Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/EYnopYfJJmdmDFVOga5lM29e1Ck.roa
File:                     EYnopYfJJmdmDFVOga5lM29e1Ck.roa (raw, json)
Hash identifier:          kmuQoxvVHKL4YQ41+HhPZmouvp412Wv4zZ0Sgf9m97M=
Subject key identifier:   11:89:E8:A5:87:C9:26:67:66:0C:55:4E:81:AE:65:33:6F:5E:D4:29
Certificate issuer:       /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial:       0187E2E4E0B3B6DEB62833185A5EF7B3C24F
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/EYnopYfJJmdmDFVOga5lM29e1Ck.roa
Signing time:             Wed 03 May 2023 18:34:23 +0000
ROA not before:           Wed 03 May 2023 18:34:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211439
IP address blocks:        193.108.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e2:e4:e0:b3:b6:de:b6:28:33:18:5a:5e:f7:b3:c2:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
        Validity
            Not Before: May  3 18:34:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1189e8a587c92667660c554e81ae65336f5ed429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7e:33:bf:84:b1:a1:a5:c4:ab:86:e7:9f:e6:
                    c3:27:1d:2e:d2:47:91:98:8b:08:c7:75:d7:f3:db:
                    6d:14:3e:24:fa:2a:cd:60:a0:88:62:4a:3f:a3:68:
                    35:13:23:be:ba:b9:06:61:ae:11:7c:87:db:58:66:
                    b5:df:98:3e:7a:ab:70:4c:fc:6f:de:1a:31:56:d8:
                    80:59:0e:8a:19:8c:ef:85:32:e3:99:bd:9c:4e:87:
                    43:df:d6:a4:f2:d7:43:92:05:0d:e5:e2:c7:54:e3:
                    c7:6e:d5:6d:ae:3a:cc:c0:3a:47:b7:89:6a:37:8f:
                    a0:94:42:b9:b6:ef:ae:fc:ab:db:32:35:ed:5c:72:
                    b4:0f:1c:2d:dc:ab:cb:0f:c8:00:30:9f:5e:7b:07:
                    1c:1c:f7:bc:f3:84:94:78:2d:f8:44:db:5e:c1:eb:
                    f6:51:00:33:31:db:a5:55:8e:be:25:34:55:75:89:
                    1e:be:18:40:78:4c:58:46:17:c0:59:74:c9:27:ac:
                    61:41:29:ce:1a:f3:0c:98:43:05:98:b4:43:52:4a:
                    86:e5:65:56:a9:53:6e:f9:97:19:97:b3:99:02:ae:
                    87:12:c3:a1:1c:88:a4:24:19:0c:8d:c5:19:34:0d:
                    51:19:f9:71:d3:0b:1a:55:1f:0c:94:2a:fb:09:d7:
                    2f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:89:E8:A5:87:C9:26:67:66:0C:55:4E:81:AE:65:33:6F:5E:D4:29
            X509v3 Authority Key Identifier:
                keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/EYnopYfJJmdmDFVOga5lM29e1Ck.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.108.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:8e:e0:21:ee:31:b6:a4:2b:f3:6c:42:5e:b6:67:31:9a:90:
         1a:cb:00:a6:00:59:59:f5:6b:f1:a4:ed:c6:81:52:04:ae:fd:
         e5:91:63:a0:55:a3:f9:da:dc:6a:e0:ef:3e:c7:89:ab:f6:7d:
         4f:80:1e:3c:9e:0c:35:65:67:0b:f1:e5:98:15:eb:59:19:c4:
         b5:5c:80:26:94:2e:64:65:5c:21:a2:5a:d8:62:5c:5b:e5:d8:
         ed:03:a3:a0:b9:dd:11:1c:50:8b:ca:69:8e:20:d9:06:ec:92:
         f9:b8:2d:1c:52:2d:e9:12:39:5f:e8:03:31:a5:3e:65:95:ab:
         3d:7d:1b:85:a3:12:18:f5:b2:87:6b:62:de:28:be:1e:12:bb:
         db:f3:0d:84:29:f6:bf:54:bd:72:c2:d1:62:41:d1:0c:09:5c:
         8a:4a:30:71:23:29:6f:e2:78:fa:aa:37:08:be:71:e1:cb:96:
         69:9f:06:38:4a:47:de:ae:80:e0:01:6b:2a:74:1f:c4:6d:07:
         46:9c:46:17:a1:ab:36:13:c2:e2:ca:6c:2d:6a:3b:ce:36:5d:
         a0:4f:d2:39:8c:f6:43:8b:ed:d7:e0:1e:57:ca:d0:8b:05:65:
         b3:d6:c6:ab:e0:ff:99:01:e7:5a:dc:c1:bc:6e:7e:8e:e4:37:
         53:81:6a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 12:40:43 2023 by rpki-client on console-fra.rpki-client.org