Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/H0wvom_15tRjsEsOqGM01btDI5Q.roa
File:                     H0wvom_15tRjsEsOqGM01btDI5Q.roa (raw, json)
Hash identifier:          Z14NeRyP+JQXqpGwAnNiGSmISXpPVajFRZcQn1ozeQs=
Subject key identifier:   1F:4C:2F:A2:6F:F5:E6:D4:63:B0:4B:0E:A8:63:34:D5:BB:43:23:94
Certificate issuer:       /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial:       01827EA24CA93DA14DF8FCFD8152AF8E9222
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/H0wvom_15tRjsEsOqGM01btDI5Q.roa
Signing time:             Mon 08 Aug 2022 18:05:41 +0000
ROA not before:           Mon 08 Aug 2022 18:05:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43043
IP address blocks:        193.108.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:7e:a2:4c:a9:3d:a1:4d:f8:fc:fd:81:52:af:8e:92:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
        Validity
            Not Before: Aug  8 18:05:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1f4c2fa26ff5e6d463b04b0ea86334d5bb432394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8d:96:ba:f5:c6:09:83:a1:dd:1c:9b:32:99:
                    77:00:d3:04:86:cb:c0:76:77:1c:4a:10:bd:6d:fa:
                    f0:66:df:ce:84:2b:b8:e6:c1:bd:4e:a8:a7:d4:6b:
                    76:c0:49:89:5d:aa:4f:ad:90:9a:d8:ab:e7:16:ec:
                    68:cc:a1:f5:d3:bb:38:aa:ec:4e:ff:5a:73:3a:8d:
                    02:00:fc:9e:27:80:32:87:cd:0c:73:2f:8b:bc:8c:
                    16:1f:05:50:0f:d9:7b:f1:1a:f8:77:de:2f:36:c6:
                    e0:ea:01:b5:4f:d9:80:f9:75:58:94:fb:c5:26:a3:
                    ff:1f:81:ab:1d:78:cd:2b:ff:94:ae:55:ba:f6:79:
                    02:e1:ab:cf:26:89:00:ba:6e:85:fb:91:8b:89:1e:
                    21:f9:f8:e8:7c:be:4c:7a:89:b7:86:9f:0b:ae:03:
                    dd:82:7c:45:c1:6c:ed:7d:56:5a:96:87:80:bb:b0:
                    54:d9:14:88:17:01:4f:10:35:6e:43:4f:5b:d4:5f:
                    fe:45:53:c3:34:c7:dd:95:76:0e:9e:4b:eb:7c:62:
                    2d:26:d1:d0:d6:e7:4d:f1:4e:6b:a0:7d:03:03:14:
                    57:8d:d7:ea:2b:27:98:1b:a8:e6:3c:cf:68:26:73:
                    f1:0c:c7:c8:27:77:81:7b:d0:c3:07:ca:b5:7b:c4:
                    b7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4C:2F:A2:6F:F5:E6:D4:63:B0:4B:0E:A8:63:34:D5:BB:43:23:94
            X509v3 Authority Key Identifier:
                keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/H0wvom_15tRjsEsOqGM01btDI5Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.108.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:b8:cd:c6:bd:c4:68:61:d1:bb:fb:d4:58:45:7d:66:cb:3e:
         6e:a7:d6:61:06:ba:06:bd:d8:12:14:90:83:ab:f4:00:f2:db:
         f3:27:58:7a:31:4c:84:cf:d2:a4:59:24:a6:49:24:1e:c4:10:
         ba:09:f1:d5:3d:a8:0d:25:78:b3:dd:ee:06:47:30:83:3c:5c:
         f3:b9:ca:4d:72:fd:4e:78:1d:5a:c1:6d:dc:be:8a:d6:21:a0:
         63:ae:6c:62:ba:6f:a2:07:9f:59:1d:54:af:16:77:6d:40:25:
         95:f1:48:b1:80:86:19:ec:2f:71:81:3f:a9:e9:61:1c:90:9d:
         42:e2:a3:14:d0:df:fe:9d:f4:e6:fb:9c:dd:29:8d:8d:6f:42:
         a2:a2:ae:bb:08:ca:9e:84:ba:5e:76:21:37:c9:5e:8e:fc:cb:
         21:58:06:b6:0c:15:b0:98:9f:b7:67:82:4d:62:f8:d1:08:b9:
         13:50:be:01:82:7c:eb:42:ac:e2:ad:d2:c7:19:82:af:e6:62:
         e0:f1:e2:46:43:2f:e8:33:93:46:1a:d0:86:5c:86:2e:0a:07:
         08:47:38:9f:3d:d9:3f:23:34:87:65:ee:05:95:96:28:fa:ff:
         de:93:bb:c5:7f:1b:df:e1:1e:35:f1:36:47:f2:a2:2e:8a:18:
         ba:4e:4f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:02 2024 by rpki-client on console-ams.rpki-client.org