Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d0e0f8-4a50-4dc8-b28a-fb6422c032de/1/cVILSOR-_kUePKbeVVDjAxUBto4.roa
File:                     cVILSOR-_kUePKbeVVDjAxUBto4.roa (raw, json)
Hash identifier:          iL5YhyHpUQEQoaPVLqNjImm5ohUeKAM29B41HuYeAjM=
Subject key identifier:   71:52:0B:48:E4:7E:FE:45:1E:3C:A6:DE:55:50:E3:03:15:01:B6:8E
Certificate issuer:       /CN=e3236fb737118ed0d8d46704c4f9f95497dd9b14
Certificate serial:       01856C8130D1B9579DDEF2D3420D0D901342
Authority key identifier: E3:23:6F:B7:37:11:8E:D0:D8:D4:67:04:C4:F9:F9:54:97:DD:9B:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4yNvtzcRjtDY1GcExPn5VJfdmxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d0e0f8-4a50-4dc8-b28a-fb6422c032de/1/cVILSOR-_kUePKbeVVDjAxUBto4.roa
Signing time:             Sun 01 Jan 2023 08:44:43 +0000
ROA not before:           Sun 01 Jan 2023 08:44:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     64484
IP address blocks:        193.3.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:81:30:d1:b9:57:9d:de:f2:d3:42:0d:0d:90:13:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3236fb737118ed0d8d46704c4f9f95497dd9b14
        Validity
            Not Before: Jan  1 08:44:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=71520b48e47efe451e3ca6de5550e3031501b68e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2e:86:20:a8:48:e3:ae:60:23:f7:ea:31:d9:
                    8f:29:86:06:00:33:42:05:ac:4b:75:a9:48:fc:e5:
                    34:cc:41:7f:17:cb:3d:b7:b1:ab:35:72:86:8d:9e:
                    49:49:ad:de:80:ac:77:c4:42:44:18:de:54:4c:18:
                    93:e4:63:85:0d:c9:eb:25:36:cb:cf:95:fb:39:05:
                    cc:11:33:2b:f5:cf:ab:f2:96:f1:8b:8f:4c:1f:3a:
                    91:72:ae:48:b7:45:79:3f:c3:63:92:65:74:ef:de:
                    e1:91:15:15:be:c8:2e:0c:aa:84:f8:40:38:37:ba:
                    f0:ef:07:18:d4:2d:b0:a6:1c:90:9b:05:e1:a0:37:
                    f6:36:fd:a3:d9:35:c2:c2:ca:98:02:85:5d:75:6d:
                    49:65:8c:80:d5:db:2b:28:ad:53:4e:dc:49:5e:a6:
                    79:53:a8:e8:fa:37:37:22:f0:16:21:34:99:02:54:
                    5f:c8:7d:88:d7:d1:07:7b:f8:44:81:e9:1c:55:d3:
                    3f:2f:dd:e0:41:87:f4:a2:2f:7d:bc:e4:87:92:a9:
                    44:52:d8:43:43:07:5c:f4:95:51:68:5f:b1:f8:dc:
                    e6:15:99:1f:51:d4:d4:40:13:f3:8e:58:0f:22:5d:
                    7f:d0:26:ca:70:60:ee:0b:73:4d:b5:6e:71:dd:d9:
                    17:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:52:0B:48:E4:7E:FE:45:1E:3C:A6:DE:55:50:E3:03:15:01:B6:8E
            X509v3 Authority Key Identifier:
                keyid:E3:23:6F:B7:37:11:8E:D0:D8:D4:67:04:C4:F9:F9:54:97:DD:9B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yNvtzcRjtDY1GcExPn5VJfdmxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d0e0f8-4a50-4dc8-b28a-fb6422c032de/1/cVILSOR-_kUePKbeVVDjAxUBto4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d0e0f8-4a50-4dc8-b28a-fb6422c032de/1/4yNvtzcRjtDY1GcExPn5VJfdmxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:08:95:a2:7a:74:2f:e7:3a:d2:67:28:57:a3:94:df:f4:7e:
         ca:ed:f0:a6:59:76:0d:33:04:a0:49:20:19:cc:d8:22:9c:fb:
         93:75:1d:59:6f:98:58:31:f3:a2:32:e6:f4:f3:24:e6:6e:19:
         3c:22:33:50:89:1a:2e:dd:38:a2:34:b0:92:5a:34:a1:de:2d:
         70:2a:8f:5c:9a:5b:96:c8:b1:a3:b5:42:cf:dc:5e:05:a3:8a:
         26:0b:cf:89:70:be:04:43:5b:b5:a5:04:f8:e2:3e:47:03:1b:
         ab:48:f6:9e:2d:d0:7f:17:18:5a:5e:c2:ca:8e:87:05:25:fe:
         53:54:20:62:7b:85:07:0d:f2:97:db:49:06:1c:ff:49:81:9d:
         db:eb:e0:cd:0d:a5:e4:a2:e9:d4:af:9e:3c:ec:30:de:ef:85:
         f6:7c:6d:86:be:a4:f7:0c:8d:49:23:09:34:cb:95:3c:4a:ca:
         9f:1b:a8:fd:25:b1:83:89:92:94:e4:d2:a2:8e:f4:2a:f5:49:
         8e:54:e1:04:72:36:20:84:d2:f7:d0:28:0b:29:b2:dd:e2:37:
         77:1d:be:22:bc:db:31:1d:bb:39:1a:2a:7d:a1:83:40:f4:b9:
         7b:7c:ea:45:b8:3b:e5:50:a7:bc:22:32:b7:7e:d3:b3:a4:3d:
         7f:bc:77:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:57 2024 by rpki-client on console-fra.rpki-client.org