Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/I8jxl243OmMyHQm1X19_0lwQwK8.roa
File:                     I8jxl243OmMyHQm1X19_0lwQwK8.roa (raw, json)
Hash identifier:          789H7+A8ToHFm4falR0ILWV7an7CPCKZC6S6PaQZR5I=
Subject key identifier:   23:C8:F1:97:6E:37:3A:63:32:1D:09:B5:5F:5F:7F:D2:5C:10:C0:AF
Certificate issuer:       /CN=e379e81689ee551e3eadbded4d297aa8e6e5c146
Certificate serial:       01E9CEB3
Authority key identifier: E3:79:E8:16:89:EE:55:1E:3E:AD:BD:ED:4D:29:7A:A8:E6:E5:C1:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/43noFonuVR4-rb3tTSl6qOblwUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/I8jxl243OmMyHQm1X19_0lwQwK8.roa
Signing time:             Tue 26 Apr 2022 19:52:01 +0000
ROA not before:           Tue 26 Apr 2022 19:52:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        194.69.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32100019 (0x1e9ceb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e379e81689ee551e3eadbded4d297aa8e6e5c146
        Validity
            Not Before: Apr 26 19:52:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=23c8f1976e373a63321d09b55f5f7fd25c10c0af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:41:54:92:41:6a:28:80:94:1e:9a:70:2d:41:
                    6e:1c:d3:c4:13:93:61:58:ef:f0:60:c3:ce:8c:f1:
                    2a:33:ff:0e:0c:00:1b:17:30:0a:4c:b6:7f:08:6f:
                    e3:7c:3f:d7:d5:70:dc:d4:4e:03:9a:c7:24:2a:ba:
                    09:6a:bc:f6:b6:02:75:cd:d4:23:2f:89:81:4b:8d:
                    6a:30:92:3a:ee:1b:4a:2c:c9:9d:96:78:91:dd:8b:
                    06:51:c1:e3:5f:c4:76:74:3a:6a:81:3d:70:ac:46:
                    38:85:7e:2a:d1:d8:a0:ab:e3:15:e4:c9:f3:cc:98:
                    7c:2d:3f:c1:7d:50:38:cb:21:f9:0e:19:fb:74:7a:
                    58:b4:90:c8:98:5a:15:3b:1a:ac:3c:60:d5:04:01:
                    1f:a4:f5:6e:e5:14:97:a3:3e:1b:17:ad:a7:91:ec:
                    1c:31:43:aa:c9:cc:43:ca:2c:68:80:43:2d:29:57:
                    4c:49:f5:8f:1d:d0:d9:4c:4a:b0:06:2f:a6:02:37:
                    52:c5:9b:a4:5b:75:e9:bd:d6:59:ec:59:43:98:68:
                    21:71:d0:f7:b2:81:9f:c6:86:28:82:35:43:b5:35:
                    7b:82:6b:70:7e:0d:cd:16:ce:39:aa:88:b0:97:6f:
                    31:bf:04:4b:14:dc:23:4c:15:c3:32:2f:ce:88:51:
                    88:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C8:F1:97:6E:37:3A:63:32:1D:09:B5:5F:5F:7F:D2:5C:10:C0:AF
            X509v3 Authority Key Identifier:
                keyid:E3:79:E8:16:89:EE:55:1E:3E:AD:BD:ED:4D:29:7A:A8:E6:E5:C1:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43noFonuVR4-rb3tTSl6qOblwUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/I8jxl243OmMyHQm1X19_0lwQwK8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/43noFonuVR4-rb3tTSl6qOblwUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.69.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:48:de:4d:42:eb:13:8c:fc:6d:06:91:c7:9e:6e:18:27:51:
         5e:9c:6b:03:08:65:8e:ed:d2:60:8b:da:00:27:a4:dd:7b:48:
         1c:49:16:0e:a5:a7:bc:8b:9f:f6:b2:0d:8f:6f:32:bd:a4:d1:
         9a:2d:8f:43:83:13:4f:be:d6:c5:f2:1c:bc:a8:4d:ab:ce:ec:
         76:e1:e9:dd:dd:7d:f6:f7:3b:ef:d9:67:d8:63:c2:88:05:7b:
         ca:a3:6f:04:3f:0f:7a:33:c8:02:a5:5f:c2:e8:ac:c9:e6:63:
         ec:ba:a9:21:5a:51:e1:b2:ae:65:11:eb:73:50:33:3e:51:a9:
         81:a8:ee:cb:40:15:52:46:e0:b2:60:f2:2b:48:a3:e0:26:03:
         2b:a6:a7:66:1e:69:ee:69:26:35:b4:35:45:7a:01:94:a5:b8:
         dd:85:fc:5a:3c:c9:64:6c:45:24:94:4d:89:77:c0:84:62:e7:
         bf:5e:3b:c3:c8:28:9f:bb:14:b5:e7:81:9c:67:f7:f9:3b:c6:
         4e:67:b8:18:40:ce:5a:34:f5:61:1c:ad:77:76:5d:0f:8e:87:
         db:4a:8b:0f:3a:c5:1a:38:61:09:af:fc:36:f7:10:f3:2a:37:
         77:24:c6:f1:ad:ab:63:44:82:55:2e:66:6a:9a:50:9d:40:ab:
         65:98:2c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:01 2024 by rpki-client on console-fra.rpki-client.org