Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/919d75-885e-4be4-9d8f-d285ca9cbe16/1/MkvpREKzHU2ZcTZ37nZeCCNPzyg.roa
File:                     MkvpREKzHU2ZcTZ37nZeCCNPzyg.roa (raw, json)
Hash identifier:          ZELr8qqRekJEADl7Fte34ondY1iNNzXWxSZLj/k8hqw=
Subject key identifier:   32:4B:E9:44:42:B3:1D:4D:99:71:36:77:EE:76:5E:08:23:4F:CF:28
Certificate issuer:       /CN=1bf38b6d12023ef8700a9102f94ada3361e73e03
Certificate serial:       0183B2818C99D216B5DF3ABFD4E2F00B69EB
Authority key identifier: 1B:F3:8B:6D:12:02:3E:F8:70:0A:91:02:F9:4A:DA:33:61:E7:3E:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G_OLbRICPvhwCpEC-UraM2HnPgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/919d75-885e-4be4-9d8f-d285ca9cbe16/1/MkvpREKzHU2ZcTZ37nZeCCNPzyg.roa
Signing time:             Fri 07 Oct 2022 12:52:57 +0000
ROA not before:           Fri 07 Oct 2022 12:52:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58057
IP address blocks:        193.163.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:b2:81:8c:99:d2:16:b5:df:3a:bf:d4:e2:f0:0b:69:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf38b6d12023ef8700a9102f94ada3361e73e03
        Validity
            Not Before: Oct  7 12:52:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=324be94442b31d4d99713677ee765e08234fcf28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b9:04:ac:06:d4:42:01:f5:ab:13:0a:f5:18:
                    db:3b:74:9c:67:b5:76:bb:2e:74:de:20:71:9c:4f:
                    ae:4b:d4:f3:bb:aa:40:88:b9:ce:02:b5:59:88:28:
                    b2:71:70:82:d1:3f:a1:db:b2:1a:93:43:5a:1f:4b:
                    e5:e1:4e:40:6d:28:12:51:03:ac:0d:8e:3d:70:bb:
                    53:2b:38:a0:61:c7:dd:f1:01:67:83:94:5e:3f:f7:
                    b8:b0:46:88:38:a8:a9:9d:65:f2:91:a1:16:e4:48:
                    25:ad:ee:ab:b4:b8:54:f2:cf:79:32:cd:2a:6a:cc:
                    12:21:8c:61:72:a9:7c:88:0a:85:9d:33:39:55:5f:
                    2d:55:d0:86:d3:44:39:9b:9d:18:d7:71:bc:fe:ef:
                    33:92:b2:89:c2:12:f4:b4:2f:c7:92:13:47:4d:2c:
                    48:56:98:dc:ca:bc:e9:8e:43:8a:c6:79:de:6e:8a:
                    5d:1b:62:84:9f:5b:e0:4d:ef:b0:09:6c:c8:d2:d0:
                    78:b6:c6:e1:07:68:a2:1a:e8:8a:81:fb:44:a1:80:
                    3c:6d:dc:5c:14:b1:66:c6:26:fb:2b:15:e3:2d:6e:
                    ca:13:d4:72:87:7b:da:54:2c:34:e0:0f:53:ed:66:
                    0b:3b:1c:98:68:9a:57:ab:86:4e:2b:74:38:93:37:
                    08:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4B:E9:44:42:B3:1D:4D:99:71:36:77:EE:76:5E:08:23:4F:CF:28
            X509v3 Authority Key Identifier:
                keyid:1B:F3:8B:6D:12:02:3E:F8:70:0A:91:02:F9:4A:DA:33:61:E7:3E:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_OLbRICPvhwCpEC-UraM2HnPgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/919d75-885e-4be4-9d8f-d285ca9cbe16/1/MkvpREKzHU2ZcTZ37nZeCCNPzyg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/919d75-885e-4be4-9d8f-d285ca9cbe16/1/G_OLbRICPvhwCpEC-UraM2HnPgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:9b:38:78:05:85:0f:b3:2b:30:64:9c:cd:0f:fd:99:ca:36:
         f8:41:dd:4f:a3:74:4c:33:02:f3:43:4d:69:19:df:63:f1:fc:
         13:da:6b:a0:5a:70:72:d3:19:ea:7f:cd:54:95:90:79:1e:43:
         9c:c6:09:8a:d8:9c:a2:5c:7b:ad:b1:b2:05:97:d2:0d:96:fc:
         cb:22:c6:0d:a6:b3:48:b7:17:be:55:77:c6:42:01:5b:a4:23:
         3a:04:09:32:36:1c:60:5a:74:84:9a:1c:d9:80:10:f7:7c:19:
         3a:34:26:e3:cd:88:99:11:da:96:9a:19:78:f4:02:8d:1a:07:
         83:76:94:3c:22:06:03:ef:88:94:5b:1e:30:12:e5:91:0d:ae:
         a1:85:be:30:e7:91:13:09:14:89:fd:c7:33:1b:ad:9a:9c:ea:
         93:30:13:47:5d:ca:07:5f:5b:d5:34:e9:7a:60:87:52:c6:27:
         88:03:dc:90:43:1f:2d:a1:5f:33:bb:8b:f5:46:bc:5a:87:60:
         14:13:4a:67:fc:73:49:d4:8b:1b:a3:f0:b5:5a:aa:23:a4:0f:
         ab:2b:da:1c:43:96:cd:8a:1d:16:ae:dd:e5:fd:b4:22:33:25:
         10:b9:c3:a5:df:eb:ef:cb:60:26:1f:4c:8c:2f:e9:a8:70:e7:
         35:e1:22:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:22 2024 by rpki-client on console-fra.rpki-client.org