Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/919d75-885e-4be4-9d8f-d285ca9cbe16/1/62TRnFUEkGGSUz3k50ViC-VxHu8.roa
File:                     62TRnFUEkGGSUz3k50ViC-VxHu8.roa (raw, json)
Hash identifier:          s3HedE9AUCtVE7r4v4K5s1OkKvXmd5ysMIGwvN11N8k=
Subject key identifier:   EB:64:D1:9C:55:04:90:61:92:53:3D:E4:E7:45:62:0B:E5:71:1E:EF
Certificate issuer:       /CN=1bf38b6d12023ef8700a9102f94ada3361e73e03
Certificate serial:       01856BB7D42FCADA00B9307FDD85CC6FAEA6
Authority key identifier: 1B:F3:8B:6D:12:02:3E:F8:70:0A:91:02:F9:4A:DA:33:61:E7:3E:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G_OLbRICPvhwCpEC-UraM2HnPgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/919d75-885e-4be4-9d8f-d285ca9cbe16/1/62TRnFUEkGGSUz3k50ViC-VxHu8.roa
Signing time:             Sun 01 Jan 2023 05:04:47 +0000
ROA not before:           Sun 01 Jan 2023 05:04:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61218
IP address blocks:        193.163.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:b7:d4:2f:ca:da:00:b9:30:7f:dd:85:cc:6f:ae:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf38b6d12023ef8700a9102f94ada3361e73e03
        Validity
            Not Before: Jan  1 05:04:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eb64d19c5504906192533de4e745620be5711eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:81:59:60:4d:2c:fa:b4:53:3a:54:4a:b4:7d:
                    e2:62:40:48:ea:eb:44:6b:3d:b9:52:b9:88:22:f1:
                    11:05:74:09:a1:0a:ea:f6:53:1b:ef:12:df:2f:49:
                    48:9c:fc:f1:2f:f9:71:ab:b6:42:1e:8c:40:b3:60:
                    17:06:b5:97:90:7f:bd:f6:07:81:e8:b5:6e:b9:e5:
                    e4:be:b1:94:51:09:ce:15:0e:fa:fd:66:05:9f:c4:
                    61:74:66:a3:74:c1:87:f3:64:88:0b:c0:b2:04:2c:
                    48:ae:a1:cc:df:33:26:73:30:8f:2a:55:8a:ef:d0:
                    cf:6c:74:ac:8d:a1:d7:51:87:79:b4:25:de:62:51:
                    81:ff:02:9c:27:4b:88:d3:76:5c:eb:0b:70:ea:11:
                    db:f4:43:e1:2b:ce:86:29:02:d4:c6:ed:c5:68:23:
                    41:b3:eb:16:e6:ff:6c:93:df:65:b6:af:2f:20:6d:
                    23:68:31:ba:d3:3e:64:62:fc:97:0c:ae:92:7e:0d:
                    5d:f7:0b:8d:11:33:12:f5:88:7c:31:a5:71:99:cf:
                    3a:03:d4:03:d8:24:91:cc:15:05:7e:9b:c9:15:47:
                    33:db:b5:c9:39:95:39:0f:d6:0a:e7:77:30:72:f7:
                    43:2e:93:ed:fe:46:bd:17:12:75:8f:cf:58:a7:7f:
                    0d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:64:D1:9C:55:04:90:61:92:53:3D:E4:E7:45:62:0B:E5:71:1E:EF
            X509v3 Authority Key Identifier:
                keyid:1B:F3:8B:6D:12:02:3E:F8:70:0A:91:02:F9:4A:DA:33:61:E7:3E:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_OLbRICPvhwCpEC-UraM2HnPgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/919d75-885e-4be4-9d8f-d285ca9cbe16/1/62TRnFUEkGGSUz3k50ViC-VxHu8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/919d75-885e-4be4-9d8f-d285ca9cbe16/1/G_OLbRICPvhwCpEC-UraM2HnPgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:51:59:b2:92:a5:1d:ea:72:67:da:97:21:e5:0a:82:a1:6c:
         7a:72:24:2f:7e:9c:9d:de:0d:4e:c8:f4:2f:eb:9e:c1:69:a6:
         15:60:05:15:5f:96:58:29:12:86:f4:df:35:ec:4c:d2:1d:2f:
         60:45:e4:9b:7f:c2:e3:f8:07:e7:c7:ed:35:1e:c3:62:e7:1a:
         81:b6:40:25:44:f0:33:76:06:1b:87:5e:92:51:32:ab:09:1c:
         b7:0e:24:91:dc:28:ed:62:65:9d:4f:27:75:b7:60:33:61:96:
         0a:51:ec:94:d2:17:e8:a1:cb:cf:d8:32:86:c2:9c:ed:e6:86:
         8d:a2:e5:8d:67:93:9c:da:62:2f:e0:a3:f8:68:51:79:a5:d4:
         49:4b:2b:c4:75:15:e3:2e:d7:ae:a3:75:55:ba:53:b6:d6:07:
         05:c4:f1:1c:69:72:98:60:7c:98:a0:47:7d:4d:3e:67:78:a8:
         fd:1c:83:82:20:8c:7a:2b:3d:c0:d5:3b:4a:fc:bf:7b:ee:2b:
         5a:a7:73:ef:c0:f3:fa:fa:54:18:ca:6a:60:43:52:76:9a:70:
         fa:40:27:94:01:87:47:58:7c:f2:8a:16:17:9d:6a:04:cb:7b:
         16:2a:cc:28:e8:ee:b7:c1:82:37:c2:d4:11:f8:fd:a1:bc:3e:
         93:ed:28:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:22 2024 by rpki-client on console-fra.rpki-client.org