Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/1-GNXRT8hQe_7Tv3irwGNYClZ4oo.roa
File:                     1-GNXRT8hQe_7Tv3irwGNYClZ4oo.roa (raw, json)
Hash identifier:          Xvt5sybeDXun1jtiLAlSto62DvVDod8kdpurt77eWX0=
Subject key identifier:   F8:63:57:45:3F:21:41:EF:FB:4E:FD:E2:AF:01:8D:60:29:59:E2:8A
Certificate issuer:       /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial:       02C56924
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/1-GNXRT8hQe_7Tv3irwGNYClZ4oo.roa
Signing time:             Sat 12 Feb 2022 19:16:49 +0000
ROA not before:           Sat 12 Feb 2022 19:16:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        193.160.68.0/23 maxlen: 24
                          176.118.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46491940 (0x2c56924)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
        Validity
            Not Before: Feb 12 19:16:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f86357453f2141effb4efde2af018d602959e28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fc:2c:6d:c7:c5:b0:5d:ed:f0:72:4d:e1:23:
                    a2:69:ca:0a:c3:b7:a9:03:ad:f5:57:a9:f6:0b:19:
                    9f:e3:ee:6c:23:dd:80:8a:4b:2c:ee:9d:9a:68:f9:
                    94:b6:08:70:1c:e3:5f:d1:27:e5:54:36:6a:da:27:
                    9e:b8:de:ce:40:77:b2:99:1e:4e:f0:97:6f:7c:5d:
                    1f:d7:0e:cd:13:a4:7a:f9:7b:0e:98:0e:84:10:56:
                    00:8c:0c:cf:4f:d4:df:23:26:89:8b:1b:d4:92:9f:
                    e6:92:4b:95:c5:18:e0:7f:de:82:2c:61:8f:0b:01:
                    e7:4c:61:31:e9:40:79:91:8a:ee:46:a6:fc:d8:9f:
                    40:14:38:61:e4:4d:ce:0a:23:98:b9:da:13:b0:87:
                    af:be:e1:ac:c3:5c:8c:da:73:de:cb:0c:43:4e:06:
                    32:73:cf:10:d1:37:d3:70:2b:b3:75:3c:76:7a:f5:
                    f9:15:4e:4b:07:8a:50:03:ca:74:87:42:e1:37:85:
                    74:36:9f:a3:84:d3:d6:4d:43:c0:1d:b6:3b:31:df:
                    e6:31:b2:08:e2:d6:45:e7:97:e3:1c:95:89:08:c7:
                    a7:65:9e:6d:70:a5:6e:e7:29:5a:08:27:45:24:9b:
                    22:c8:98:e6:59:65:c4:18:a6:5f:a8:b9:25:70:b0:
                    3c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:63:57:45:3F:21:41:EF:FB:4E:FD:E2:AF:01:8D:60:29:59:E2:8A
            X509v3 Authority Key Identifier:
                keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/1-GNXRT8hQe_7Tv3irwGNYClZ4oo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.118.191.0/24
                  193.160.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:6e:c5:46:bb:7d:a8:75:cb:dc:5a:99:9b:6c:f4:6f:9e:36:
         cd:b9:c0:b6:48:84:4f:08:03:2f:5e:e8:50:ee:e3:c6:1f:ef:
         da:d3:a5:87:98:ae:00:66:df:d4:c0:03:5e:de:b6:18:e6:05:
         d2:ec:b5:84:92:85:bb:29:4b:0e:41:de:52:4c:ac:56:45:2b:
         62:25:a1:9e:ee:3f:0a:ce:d1:2e:e3:db:38:66:bd:c5:5d:75:
         b1:ef:b8:0b:00:f4:ad:92:88:4c:a0:37:a0:10:e0:0c:46:30:
         66:d2:5e:67:1d:92:72:98:70:2c:05:33:62:4d:22:fc:49:f0:
         40:d8:87:33:26:34:34:cc:4e:6b:4a:49:8f:fc:74:55:80:19:
         60:dc:60:79:76:43:89:d0:b8:f0:77:13:59:98:2d:36:0d:8b:
         dc:a9:5e:c0:25:cd:50:27:da:a3:c7:2b:c9:07:49:96:6a:4b:
         8e:3b:3d:f3:22:6a:52:5c:e3:c9:c5:0f:d7:c6:42:7c:38:74:
         09:73:84:e3:31:5d:cd:14:b1:79:87:26:42:43:63:e0:59:a6:
         2b:2c:31:84:fa:9c:bf:0c:d0:f1:35:12:69:91:da:e9:94:dd:
         a7:a1:aa:9a:e3:5d:02:1a:53:c3:a1:a5:c0:9c:c5:40:53:dd:
         d3:f4:b1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:59 2024 by rpki-client on console-fra.rpki-client.org