Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e7600d-6189-46fe-b0f5-e8d5f7cbe7af/1/uVubQkOy6hY0s8Ndu_WkRGvxbFw.roa
File:                     uVubQkOy6hY0s8Ndu_WkRGvxbFw.roa (raw, json)
Hash identifier:          7gZ2Do7S9tKoiv9ZlZ6+YE1w+EWkWiIYehXCUjI0Yl4=
Subject key identifier:   B9:5B:9B:42:43:B2:EA:16:34:B3:C3:5D:BB:F5:A4:44:6B:F1:6C:5C
Certificate issuer:       /CN=ec2f0270f41404db1f007830fbfe5cb04264d96e
Certificate serial:       0BACC024
Authority key identifier: EC:2F:02:70:F4:14:04:DB:1F:00:78:30:FB:FE:5C:B0:42:64:D9:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7C8CcPQUBNsfAHgw-_5csEJk2W4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/e7600d-6189-46fe-b0f5-e8d5f7cbe7af/1/uVubQkOy6hY0s8Ndu_WkRGvxbFw.roa
Signing time:             Sat 01 Jan 2022 13:07:03 +0000
ROA not before:           Sat 01 Jan 2022 13:07:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     198610
IP address blocks:        193.200.74.0/24 maxlen: 24
                          193.200.75.0/24 maxlen: 24
                          193.200.72.0/24 maxlen: 24
                          193.200.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195870756 (0xbacc024)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec2f0270f41404db1f007830fbfe5cb04264d96e
        Validity
            Not Before: Jan  1 13:07:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b95b9b4243b2ea1634b3c35dbbf5a4446bf16c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:61:82:3f:27:af:0e:f3:78:f6:03:d4:c9:82:
                    d6:e1:62:52:2f:3c:3b:23:81:91:59:9c:8d:31:9b:
                    0f:e4:0e:0a:0a:d9:e7:f2:20:59:35:f5:c8:e0:3a:
                    21:3d:ff:f1:4a:f1:0a:45:63:d9:8f:8f:e9:43:5a:
                    58:99:1d:6a:e7:4f:41:20:3f:37:a0:05:04:a7:4b:
                    de:db:5e:f4:77:f8:f7:5e:da:d2:47:41:f0:9e:4e:
                    91:3a:52:f9:35:69:49:57:a9:3c:fa:74:d4:a2:7b:
                    2a:25:b4:a0:30:2f:a6:77:0e:b8:87:e5:83:2a:2b:
                    02:c1:d6:65:1a:0e:7b:be:e0:91:e6:21:3e:07:ef:
                    14:19:db:31:1b:1c:d4:ec:eb:64:69:d3:c7:53:9c:
                    36:3a:27:ef:46:43:47:4c:ce:d8:01:17:3c:41:52:
                    51:6c:72:3c:98:42:b6:df:7f:b9:39:cd:ce:6e:b3:
                    6f:11:2d:95:eb:1c:94:8a:96:36:89:5a:c1:c2:00:
                    32:0f:a2:6e:e0:7f:c6:25:ba:04:91:e3:3c:88:ad:
                    32:9b:21:5f:98:28:b8:74:82:f0:3b:a9:2e:85:44:
                    db:a3:c3:f0:62:ef:ef:71:bc:a6:b3:96:b2:eb:a3:
                    49:0c:af:d4:58:f3:7e:c6:81:f3:c6:ab:b6:fb:63:
                    19:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5B:9B:42:43:B2:EA:16:34:B3:C3:5D:BB:F5:A4:44:6B:F1:6C:5C
            X509v3 Authority Key Identifier:
                keyid:EC:2F:02:70:F4:14:04:DB:1F:00:78:30:FB:FE:5C:B0:42:64:D9:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C8CcPQUBNsfAHgw-_5csEJk2W4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e7600d-6189-46fe-b0f5-e8d5f7cbe7af/1/uVubQkOy6hY0s8Ndu_WkRGvxbFw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e7600d-6189-46fe-b0f5-e8d5f7cbe7af/1/7C8CcPQUBNsfAHgw-_5csEJk2W4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.200.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:6b:3d:22:c6:ca:ec:8c:5b:3f:d0:36:6c:ad:20:09:40:8a:
         60:ea:e4:13:b6:26:32:ad:c7:b7:e1:89:b6:c1:61:55:6e:d0:
         96:db:f5:ce:03:c8:85:13:9e:8d:a0:29:a8:d6:f3:76:5a:cc:
         7d:bf:ae:ab:71:fe:cb:0e:5b:19:ea:9c:aa:11:ee:df:ca:7d:
         0f:f9:32:e1:c8:cb:30:e7:d2:97:d1:e0:f0:35:44:b0:94:c4:
         36:3f:a5:b9:07:60:69:3e:70:a4:b1:8d:4e:ed:e8:20:1d:25:
         50:18:27:4b:c1:0a:a2:a8:8a:db:81:20:03:8a:9d:a2:64:6e:
         30:f4:c3:5c:86:dd:0b:b1:f6:64:0e:25:6c:ee:c6:04:d4:00:
         fd:e2:03:1a:7c:31:3a:9b:19:73:b2:04:90:bc:48:2a:0e:6e:
         13:26:80:dc:7a:ea:da:8f:08:54:60:ee:12:79:3d:95:0d:6a:
         03:c5:96:ef:19:1a:11:7d:c1:a4:9f:b6:ab:b3:38:24:31:59:
         b1:b1:ed:45:15:ba:ea:86:37:17:a4:f7:f7:ad:1a:03:67:7b:
         ba:de:20:22:30:77:60:9b:01:ba:f8:b7:23:ac:47:68:fc:e5:
         87:32:c5:8b:47:b7:42:a8:47:1f:17:f8:5b:38:3c:e5:36:e2:
         39:d3:b1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:10 2023 by rpki-client on console-ams.rpki-client.org