Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d0e0f8-4a50-4dc8-b28a-fb6422c032de/1/fk2x4rlQkd2QF6zlKCxvw7BKEGA.roa
File:                     fk2x4rlQkd2QF6zlKCxvw7BKEGA.roa (raw, json)
Hash identifier:          uneDyK3NBv0G3/DEiqCmjBsvQsV6l8k7XoNDEUQLx+Y=
Subject key identifier:   7E:4D:B1:E2:B9:50:91:DD:90:17:AC:E5:28:2C:6F:C3:B0:4A:10:60
Certificate issuer:       /CN=e3236fb737118ed0d8d46704c4f9f95497dd9b14
Certificate serial:       0183C859432AE0DC80D1B3F6AACF111CEB79
Authority key identifier: E3:23:6F:B7:37:11:8E:D0:D8:D4:67:04:C4:F9:F9:54:97:DD:9B:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4yNvtzcRjtDY1GcExPn5VJfdmxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d0e0f8-4a50-4dc8-b28a-fb6422c032de/1/fk2x4rlQkd2QF6zlKCxvw7BKEGA.roa
Signing time:             Tue 11 Oct 2022 18:40:36 +0000
ROA not before:           Tue 11 Oct 2022 18:40:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     64484
IP address blocks:        193.3.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:c8:59:43:2a:e0:dc:80:d1:b3:f6:aa:cf:11:1c:eb:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3236fb737118ed0d8d46704c4f9f95497dd9b14
        Validity
            Not Before: Oct 11 18:40:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7e4db1e2b95091dd9017ace5282c6fc3b04a1060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:78:36:02:39:85:be:55:2f:d2:e8:39:87:2f:
                    86:9d:40:f4:19:57:d4:e0:a6:e4:6a:8a:75:6a:46:
                    3e:c6:23:61:dd:53:db:d2:e3:cc:87:65:09:44:13:
                    a8:0e:7f:b1:44:f9:d9:83:59:91:64:af:fd:bd:da:
                    f8:6d:47:32:45:1a:0e:34:27:07:39:54:c5:1f:a9:
                    07:3a:64:c9:34:e8:3e:75:48:33:83:df:74:63:8f:
                    43:6d:76:91:52:03:8a:dd:8d:42:84:b4:ca:51:6d:
                    cc:f5:e5:97:9f:d9:a9:e3:75:61:bd:11:5c:22:cf:
                    eb:17:89:54:ff:27:0e:74:96:60:f3:2c:c3:ef:ac:
                    b2:a3:85:c0:0d:e3:3a:f5:16:d6:07:e1:7f:f7:c4:
                    bd:0b:88:fc:74:8e:bd:f8:bc:cd:66:9f:fa:05:34:
                    75:89:41:17:46:fd:a6:6b:ca:48:17:fb:d7:50:a5:
                    58:74:1a:75:de:5d:10:75:16:c7:fd:b5:8d:49:5c:
                    e3:95:c3:f5:90:bf:96:49:44:07:ca:67:fd:40:70:
                    57:4e:06:d5:8c:74:13:b7:5f:12:a4:cc:f8:46:42:
                    0d:87:98:d2:ef:30:95:04:eb:d8:d5:09:db:e0:e6:
                    ba:44:ec:8e:4c:b1:81:69:e8:30:f0:01:c0:d5:8e:
                    cb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4D:B1:E2:B9:50:91:DD:90:17:AC:E5:28:2C:6F:C3:B0:4A:10:60
            X509v3 Authority Key Identifier:
                keyid:E3:23:6F:B7:37:11:8E:D0:D8:D4:67:04:C4:F9:F9:54:97:DD:9B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yNvtzcRjtDY1GcExPn5VJfdmxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d0e0f8-4a50-4dc8-b28a-fb6422c032de/1/fk2x4rlQkd2QF6zlKCxvw7BKEGA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d0e0f8-4a50-4dc8-b28a-fb6422c032de/1/4yNvtzcRjtDY1GcExPn5VJfdmxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:35:b0:1f:5f:de:d0:60:08:99:e1:14:e3:eb:49:97:bb:37:
         1b:3a:95:07:b3:29:4d:b6:3c:00:b4:d7:07:69:6b:68:a4:56:
         41:c3:03:1b:b9:77:3a:e1:e4:aa:27:a3:14:6b:6c:91:19:56:
         49:39:ab:04:47:28:d1:b1:f0:1a:f7:c1:cd:a0:b2:6f:83:76:
         e4:50:4f:67:d7:8f:74:49:0a:5e:51:6d:06:2d:6f:14:32:0d:
         f8:05:b0:f1:bd:21:a5:a9:c9:01:47:e9:c8:22:68:83:de:10:
         76:3e:91:a2:8d:6e:05:1c:c1:23:57:9b:51:be:27:77:ac:d3:
         ce:fc:d1:09:79:4e:12:f1:11:2d:78:95:19:92:d3:8d:b5:8b:
         10:91:ad:d5:8c:51:4a:cb:c4:47:68:b6:4d:50:0f:6d:61:54:
         e9:53:22:95:f3:71:dc:85:91:f1:bf:a8:8c:33:e8:f9:44:82:
         53:c8:d1:8d:cf:70:fa:ad:28:1e:d7:3b:d1:bd:ea:59:d7:dd:
         11:7f:72:16:b2:a7:fb:99:c4:7d:95:f0:55:16:34:b7:87:5f:
         b3:af:8c:f0:de:a7:d5:db:8e:a1:6f:0e:6f:52:0a:b4:36:ac:
         b9:b3:2f:fd:6c:9e:a8:a7:9e:f8:0a:5c:ae:f4:54:aa:88:49:
         ac:aa:af:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:19 2024 by rpki-client on console-ams.rpki-client.org