Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/vBISO7iDiOxOggNCCEAgXXpKnEg.roa
File:                     vBISO7iDiOxOggNCCEAgXXpKnEg.roa (raw, json)
Hash identifier:          d/PztJ5Mb8Tq/QPnGtPdMmwLKUGKAhL/N3U9WT6xZOA=
Subject key identifier:   BC:12:12:3B:B8:83:88:EC:4E:82:03:42:08:40:20:5D:7A:4A:9C:48
Certificate issuer:       /CN=43b0105bccb9e6093120767354a8b8493cbe4cd6
Certificate serial:       01842D0DE6D68D3A7A2301C10CDC12683834
Authority key identifier: 43:B0:10:5B:CC:B9:E6:09:31:20:76:73:54:A8:B8:49:3C:BE:4C:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q7AQW8y55gkxIHZzVKi4STy-TNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/vBISO7iDiOxOggNCCEAgXXpKnEg.roa
Signing time:             Mon 31 Oct 2022 07:59:56 +0000
ROA not before:           Mon 31 Oct 2022 07:59:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15969
IP address blocks:        194.187.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:2d:0d:e6:d6:8d:3a:7a:23:01:c1:0c:dc:12:68:38:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43b0105bccb9e6093120767354a8b8493cbe4cd6
        Validity
            Not Before: Oct 31 07:59:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bc12123bb88388ec4e8203420840205d7a4a9c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:00:67:3f:32:77:2f:1a:f1:6d:7f:30:d4:70:
                    2b:84:ce:2f:0c:ba:98:05:69:07:b5:b8:8b:99:70:
                    d3:15:e9:13:ff:d3:90:19:7a:8c:df:00:9e:cb:9f:
                    2c:82:9a:fe:9d:a8:f5:73:51:11:40:d9:57:dc:26:
                    1a:c8:24:25:0b:6e:ef:62:5a:9d:9f:ec:e1:82:65:
                    fa:b7:c7:f8:5b:d7:d7:6a:36:bd:2a:d4:5f:9a:48:
                    65:d4:be:22:7b:40:94:e6:b8:a9:e0:fc:08:68:42:
                    7a:63:ac:44:87:a5:bd:cd:42:f0:75:20:f5:99:aa:
                    13:8a:e9:c5:ef:2d:ea:64:45:0c:0e:60:73:ae:ef:
                    40:19:33:0c:0e:10:15:d9:61:00:53:6e:c9:e3:1f:
                    19:c0:c1:2e:b2:b2:12:a3:e4:b5:17:de:5e:99:21:
                    5d:76:ec:f9:9b:54:e4:11:34:a6:e9:79:12:27:a2:
                    a8:1e:6e:cc:04:bc:26:dc:f1:15:ee:fa:db:f8:64:
                    02:4c:0c:62:70:33:2c:f3:0c:47:56:b5:bd:9e:ff:
                    0c:86:75:2c:f3:15:fc:82:21:b2:c1:4e:11:08:da:
                    01:d0:13:47:ae:d6:10:c6:78:23:07:74:c0:5c:cb:
                    53:81:9a:41:2b:a2:8a:5f:cb:a7:31:ba:e3:07:cd:
                    57:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:12:12:3B:B8:83:88:EC:4E:82:03:42:08:40:20:5D:7A:4A:9C:48
            X509v3 Authority Key Identifier:
                keyid:43:B0:10:5B:CC:B9:E6:09:31:20:76:73:54:A8:B8:49:3C:BE:4C:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7AQW8y55gkxIHZzVKi4STy-TNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/vBISO7iDiOxOggNCCEAgXXpKnEg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/Q7AQW8y55gkxIHZzVKi4STy-TNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.187.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:79:aa:03:9f:06:9a:87:1f:0b:ec:bd:f2:b1:52:16:62:4c:
         c5:24:26:4f:d1:ed:b1:4c:6a:7b:b3:bd:64:b9:dd:d4:61:f8:
         c0:5f:3a:82:33:c5:2a:ad:ee:99:eb:62:d6:be:ad:99:df:f6:
         de:52:8d:f4:a3:b6:82:3a:d2:3a:09:0d:7d:35:bb:d2:39:14:
         ab:11:36:78:0d:17:da:98:10:90:ed:55:b4:7d:fc:0f:49:8d:
         31:35:52:4b:87:12:5f:17:01:94:cb:78:7f:bc:09:b8:3a:26:
         3a:0a:08:32:26:13:0a:37:be:d8:23:c7:10:21:20:9d:89:14:
         e9:1a:8c:b4:74:38:9d:9f:b5:36:bb:46:f8:8e:b2:1c:19:18:
         3a:12:9c:e4:a9:16:c1:9e:0c:e5:e8:ea:d8:9b:90:e8:3a:e5:
         f0:16:f7:11:b2:4d:d0:8a:49:7e:ec:f1:fd:d1:2c:cb:74:a7:
         3c:f0:3f:c6:fa:ba:55:78:8c:d1:95:9a:a9:c4:a3:2b:14:ed:
         b7:19:80:42:68:ce:bc:d7:94:25:20:6e:71:48:5a:c6:a8:89:
         82:79:1b:fb:5f:f4:74:48:da:b6:82:7c:f6:8e:f3:29:97:f9:
         42:c3:2c:6b:f4:a8:54:29:07:cc:1b:40:3f:49:ee:c7:d4:ee:
         a5:5a:87:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:17 2024 by rpki-client on console-fra.rpki-client.org