Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ee799c-1dc5-483b-8ec0-8f2fa4316098/1/q0QE8CoD_-ZRcpU0Up7QP-Rm81Q.roa
File:                     q0QE8CoD_-ZRcpU0Up7QP-Rm81Q.roa (raw, json)
Hash identifier:          EbXBV1bxi7fTZ6DOWZcOHBpSO0S4yDb8pszQTTMCCms=
Subject key identifier:   AB:44:04:F0:2A:03:FF:E6:51:72:95:34:52:9E:D0:3F:E4:66:F3:54
Certificate issuer:       /CN=15d1c3fcd694456e325b2460aebc785c995585ea
Certificate serial:       08C5E571
Authority key identifier: 15:D1:C3:FC:D6:94:45:6E:32:5B:24:60:AE:BC:78:5C:99:55:85:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FdHD_NaURW4yWyRgrrx4XJlVheo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ee799c-1dc5-483b-8ec0-8f2fa4316098/1/q0QE8CoD_-ZRcpU0Up7QP-Rm81Q.roa
Signing time:             Sat 01 Jan 2022 02:51:34 +0000
ROA not before:           Sat 01 Jan 2022 02:51:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        193.104.169.0/24 maxlen: 24
                          195.200.230.0/23 maxlen: 23
                          2001:67c:b4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147187057 (0x8c5e571)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15d1c3fcd694456e325b2460aebc785c995585ea
        Validity
            Not Before: Jan  1 02:51:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ab4404f02a03ffe651729534529ed03fe466f354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:79:c5:93:53:9a:5a:64:0f:b7:77:27:da:43:
                    74:12:7a:4b:d9:48:89:a1:6b:69:7a:f2:91:52:3f:
                    0e:65:1c:fb:88:d0:da:e8:78:c7:cb:67:3b:e4:c7:
                    7f:a9:c5:1d:c6:1d:42:1b:6c:c6:43:41:89:33:49:
                    62:af:35:2f:75:73:25:50:43:6d:52:4d:1d:f0:f1:
                    1a:40:43:25:65:4b:b0:6c:68:77:fb:74:4d:0e:81:
                    ea:2b:d1:e8:96:15:cb:4c:0a:11:db:cb:2c:24:cf:
                    4c:26:26:9f:8e:42:82:66:a8:86:d5:0e:90:e7:e9:
                    f5:8b:ff:93:f6:15:f4:5e:08:7d:5d:68:a6:6a:93:
                    01:84:cc:41:77:43:35:3f:12:75:15:d9:0b:e7:8c:
                    67:20:06:37:57:51:54:cb:d3:ef:ce:2f:16:d0:20:
                    c9:d7:31:e9:f7:53:a9:2c:9a:66:f3:76:63:7a:81:
                    3f:63:be:e3:1b:59:3a:0c:be:68:02:44:28:61:af:
                    77:af:cc:a8:75:13:46:4a:bc:5c:ed:80:53:fc:fa:
                    ea:04:63:ae:1c:46:5f:57:f8:0e:24:65:54:c8:38:
                    6c:39:84:a5:55:11:4b:67:1a:7e:a8:f7:3b:d1:de:
                    b7:0f:fa:8a:ab:7d:3c:49:68:f2:ee:88:56:af:0e:
                    8a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:44:04:F0:2A:03:FF:E6:51:72:95:34:52:9E:D0:3F:E4:66:F3:54
            X509v3 Authority Key Identifier:
                keyid:15:D1:C3:FC:D6:94:45:6E:32:5B:24:60:AE:BC:78:5C:99:55:85:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdHD_NaURW4yWyRgrrx4XJlVheo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ee799c-1dc5-483b-8ec0-8f2fa4316098/1/q0QE8CoD_-ZRcpU0Up7QP-Rm81Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ee799c-1dc5-483b-8ec0-8f2fa4316098/1/FdHD_NaURW4yWyRgrrx4XJlVheo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.169.0/24
                  195.200.230.0/23
                IPv6:
                  2001:67c:b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:1c:47:68:b7:d7:c5:30:87:12:16:e7:b4:10:33:ce:cd:19:
         a4:9b:d7:08:c2:7d:70:82:e3:5c:bd:de:80:ac:b1:43:cd:18:
         24:3c:76:0b:3c:13:d1:ac:cf:fb:f8:80:a6:d9:b7:b8:9b:ba:
         32:8a:fe:6d:d4:5d:cf:64:0d:73:80:10:60:88:95:9c:65:f1:
         89:95:b7:f6:d6:51:70:02:a0:e8:28:9e:2d:a7:82:09:90:96:
         a6:49:71:fe:82:90:4e:f9:8a:5d:5e:40:40:90:b8:6e:2d:47:
         14:5b:49:e2:12:2c:04:ef:ab:b4:25:0a:40:63:4b:ce:9b:1d:
         b8:18:77:d6:13:5c:67:95:88:cc:be:b9:78:d0:99:63:4d:a1:
         74:3c:2e:33:2a:cc:28:90:1e:e6:2a:d1:79:52:17:60:70:c1:
         a8:86:a7:3b:00:ca:35:d6:c0:a5:65:ad:46:7f:0b:35:fd:46:
         40:99:c1:11:20:58:a9:b2:44:b6:d8:c7:48:e6:23:e2:57:e3:
         72:08:a0:33:78:0b:50:05:19:53:46:38:31:f6:1b:e2:96:45:
         e9:6c:9b:ec:d2:4b:55:06:ac:7f:70:a6:e5:67:ac:fa:84:b9:
         6d:b6:9a:17:d8:c1:60:1c:40:f3:f6:e4:e3:c3:2f:b3:b5:8f:
         53:22:ba:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:01 2023 by rpki-client on console-fra.rpki-client.org