Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/eIVZZvR9dsz2JhJsTBsypD0hBp8.roa
File:                     eIVZZvR9dsz2JhJsTBsypD0hBp8.roa (raw, json)
Hash identifier:          pj+6X7mhA6pSNL62TywwWsFM3peZNDrpEty7uYcY+yc=
Subject key identifier:   78:85:59:66:F4:7D:76:CC:F6:26:12:6C:4C:1B:32:A4:3D:21:06:9F
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       058F59FA
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/eIVZZvR9dsz2JhJsTBsypD0hBp8.roa
Signing time:             Sun 26 Jun 2022 13:33:21 +0000
ROA not before:           Sun 26 Jun 2022 13:33:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207459
IP address blocks:        194.150.205.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93280762 (0x58f59fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Jun 26 13:33:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=78855966f47d76ccf626126c4c1b32a43d21069f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:20:b1:2b:83:bb:ba:0c:fe:7c:51:aa:10:a5:
                    b8:7e:a3:be:3a:c3:2d:e4:e4:93:fd:57:a6:61:9c:
                    0e:e0:6c:dc:d0:9c:a7:75:41:a0:a6:0e:ea:28:fc:
                    ed:42:85:fd:08:7b:34:7b:cb:14:92:87:2f:b0:af:
                    5e:5a:b6:80:84:85:44:7a:47:f5:5d:b2:75:04:c6:
                    84:f0:bb:e5:41:45:72:5b:68:7d:b4:c1:0c:f0:75:
                    64:8d:46:b7:19:77:ba:20:ab:96:64:08:22:a2:6c:
                    0b:58:53:fa:bc:ea:f6:38:58:c2:ff:7a:4a:b8:cd:
                    f6:4c:f4:9f:a7:e8:e6:e0:8d:e6:7a:b2:39:2a:e0:
                    01:46:d6:b8:a1:5d:36:17:7d:76:f7:d2:fc:b7:e8:
                    a2:d7:3d:96:a6:06:d4:03:ee:fc:2a:99:f1:fe:23:
                    d6:7f:6d:ac:06:0b:14:7a:78:dc:4b:26:c0:d1:82:
                    71:b1:32:8b:22:ba:4e:49:08:b1:54:50:e6:f1:21:
                    1e:15:99:eb:98:50:33:c3:7f:57:b2:d8:a3:23:5a:
                    58:a9:bf:85:b1:61:94:c0:31:b1:a8:8c:6c:40:06:
                    3b:69:6e:d0:ef:38:f8:ea:c5:c0:c2:0b:49:cf:1a:
                    a1:ce:a9:9f:72:d9:59:a5:a4:d2:30:fe:48:30:6a:
                    e5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:85:59:66:F4:7D:76:CC:F6:26:12:6C:4C:1B:32:A4:3D:21:06:9F
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/eIVZZvR9dsz2JhJsTBsypD0hBp8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.150.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:ed:3a:34:9f:a6:32:cc:e4:68:66:19:c3:48:42:8d:93:bc:
         d3:dc:48:3c:98:2e:f0:48:7c:1d:bb:39:1c:5b:53:1c:a6:8e:
         fb:95:e2:96:39:36:60:bd:92:f6:05:cc:ed:8d:33:ec:0f:fe:
         98:5a:42:e3:b3:49:ae:ca:c8:8e:36:63:95:a1:0c:ff:b1:fd:
         1d:5a:2a:4a:68:8b:eb:3a:7d:03:f8:c7:16:7e:12:ef:4e:5c:
         1c:65:6f:d8:0b:f0:e9:c0:41:3e:63:3d:ba:be:01:93:8d:c0:
         e8:7e:bc:d2:df:74:8d:6d:14:14:0c:c3:df:3a:89:62:07:10:
         a6:51:94:cb:a2:7d:c3:ee:a1:a6:04:a5:ae:f7:9f:17:0e:31:
         91:f2:17:35:fa:87:56:32:b4:56:aa:b4:3b:f0:19:a6:60:81:
         1c:dd:55:8a:32:96:b1:0d:21:20:0e:3c:30:ee:a1:f9:7d:db:
         c5:c9:f5:05:84:7a:ee:e3:5f:6f:ad:86:99:86:a9:4e:d1:d7:
         f1:08:e5:ef:3f:b3:78:1e:f7:e8:f8:00:49:57:4f:3f:5a:f6:
         2b:82:53:e0:97:08:8c:4d:29:1b:d4:b5:cd:6c:2c:2c:dd:31:
         08:e2:61:5f:6a:e2:bc:e8:a9:db:70:a6:7c:fa:56:51:f0:37:
         57:10:18:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:39 2023 by rpki-client on console-fra.rpki-client.org