Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/99js2Obx9vvpc_pAxOb7DTzoYfw.roa
File:                     99js2Obx9vvpc_pAxOb7DTzoYfw.roa (raw, json)
Hash identifier:          +fg5DuPyY6oegdvJ04un42xrJR+40UYqZrX1gMrqp20=
Subject key identifier:   F7:D8:EC:D8:E6:F1:F6:FB:E9:73:FA:40:C4:E6:FB:0D:3C:E8:61:FC
Certificate issuer:       /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial:       01855F1C8194FA09E0577A38FEC99FAEC26D
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/99js2Obx9vvpc_pAxOb7DTzoYfw.roa
Signing time:             Thu 29 Dec 2022 18:19:41 +0000
ROA not before:           Thu 29 Dec 2022 18:19:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62563
IP address blocks:        193.108.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:5f:1c:81:94:fa:09:e0:57:7a:38:fe:c9:9f:ae:c2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
        Validity
            Not Before: Dec 29 18:19:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f7d8ecd8e6f1f6fbe973fa40c4e6fb0d3ce861fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a3:68:43:24:85:5e:b5:31:ad:51:d9:db:d4:
                    95:52:6f:c0:af:8c:4d:09:57:0e:7e:8e:39:8a:c8:
                    ac:19:2f:67:91:f3:69:b4:d8:0d:12:5d:42:25:c7:
                    17:94:71:30:50:c1:05:02:23:a6:74:50:5e:a4:86:
                    78:c4:44:7f:73:8b:e5:c6:78:99:ef:1e:48:b4:1f:
                    b3:d8:82:15:9d:4b:04:96:2a:57:23:16:51:46:8e:
                    b3:47:5e:d1:db:b9:bc:a7:23:3d:2c:75:e4:78:38:
                    bb:dd:65:7c:ed:6f:47:41:c1:7d:af:25:f6:41:ae:
                    49:d1:42:54:5e:3f:34:20:e5:bb:b8:6b:1c:f7:e8:
                    0a:0f:c6:2a:85:71:23:38:a6:78:56:64:af:60:e0:
                    de:12:2e:af:12:9d:fd:9e:12:d2:d5:94:85:02:be:
                    18:e9:a3:0a:9e:65:da:ff:4d:c2:0d:42:a2:21:fb:
                    ea:76:1e:b3:a6:42:2f:fd:5c:85:46:7c:96:43:ab:
                    7e:67:ad:d2:19:f3:91:3d:3f:20:4b:1e:bd:d3:18:
                    fd:0c:ab:09:e7:43:ba:64:8a:e1:84:dc:45:20:d2:
                    29:e5:3f:77:d8:0c:8e:55:86:29:0d:1d:a5:12:4f:
                    a0:db:e1:07:39:3d:7f:1b:f0:56:0d:f7:d9:13:9f:
                    a7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D8:EC:D8:E6:F1:F6:FB:E9:73:FA:40:C4:E6:FB:0D:3C:E8:61:FC
            X509v3 Authority Key Identifier:
                keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/99js2Obx9vvpc_pAxOb7DTzoYfw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.108.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:89:6b:6b:e6:2b:3d:33:75:50:6d:a3:ef:f2:ec:1f:25:fe:
         60:19:72:aa:0d:2f:df:27:7f:ea:13:22:b5:da:19:96:84:85:
         ec:9f:89:f4:73:0d:66:1e:85:1b:79:8b:b7:43:88:1c:d3:be:
         e5:d6:dd:63:86:db:cc:96:f3:68:92:34:3e:5a:7c:84:58:de:
         9f:87:ea:11:0e:8f:65:56:31:a4:7e:79:a0:3c:4e:31:db:36:
         30:7d:86:56:ce:9b:5d:d0:7f:4e:c7:10:dc:38:55:99:a3:f3:
         6d:73:ec:7c:a4:bb:18:59:9d:64:97:d6:56:84:36:e8:52:99:
         95:e9:01:95:c6:ae:ff:bf:cc:4b:5b:c0:f3:ae:2a:86:87:2e:
         70:27:68:97:5f:7a:ce:d8:c9:a0:25:64:2b:f3:d8:4a:f2:9d:
         65:11:1d:87:1f:b7:cb:78:65:d8:a2:e0:9f:a1:5a:5b:3e:67:
         db:17:87:3b:8d:ae:3c:80:e6:c7:d5:8e:71:f6:0e:60:bd:3b:
         29:b0:da:2b:71:6c:b4:cd:89:ce:6c:69:30:59:9c:9f:02:ed:
         6d:04:9e:02:eb:b3:db:8e:38:8e:16:1f:3f:cc:00:b5:78:20:
         0a:83:6c:b6:40:9d:ba:e4:1c:1b:2b:f6:06:eb:ef:5a:11:91:
         c5:b0:5a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:00 2024 by rpki-client on console-fra.rpki-client.org