Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/MBhyQ4H1j6uJ7YQrDW-u0sJUZSg.roa
File:                     MBhyQ4H1j6uJ7YQrDW-u0sJUZSg.roa (raw, json)
Hash identifier:          cxepfWGxLDKVVXbnnGC1Nx2SrUQb08XUJW4STYxtc4A=
Subject key identifier:   30:18:72:43:81:F5:8F:AB:89:ED:84:2B:0D:6F:AE:D2:C2:54:65:28
Certificate issuer:       /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial:       020C7814
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/MBhyQ4H1j6uJ7YQrDW-u0sJUZSg.roa
Signing time:             Sat 19 Mar 2022 07:16:32 +0000
ROA not before:           Sat 19 Mar 2022 07:16:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     397423
IP address blocks:        193.107.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34371604 (0x20c7814)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
        Validity
            Not Before: Mar 19 07:16:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3018724381f58fab89ed842b0d6faed2c2546528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:04:6a:50:d6:69:c9:69:e2:0b:9e:c8:71:f7:
                    f6:05:e7:d9:a6:7d:6b:05:df:81:9b:e2:2e:59:44:
                    d2:cb:83:a9:fe:b0:e3:7b:3e:8b:fc:16:f9:6f:9d:
                    a3:c4:6d:e0:07:d4:db:7f:61:86:40:1f:fd:da:3a:
                    80:f3:30:01:47:20:ae:80:de:cd:fb:0d:fb:19:77:
                    14:c1:c0:70:1d:db:37:4b:ee:dc:ef:76:97:89:ad:
                    c0:02:20:55:3a:6b:67:3c:cd:87:09:81:56:40:49:
                    7b:47:a2:d5:d5:14:92:4a:48:ac:8c:98:62:25:f0:
                    68:b1:0b:68:64:84:25:47:dc:76:b2:8d:a1:f6:93:
                    ea:62:4c:9f:49:d0:2c:d1:e6:27:e1:9d:7e:fb:c6:
                    8d:1e:34:70:ae:8c:80:01:7f:a1:2a:98:a5:4f:11:
                    10:09:db:38:d4:dd:30:29:62:eb:cf:3f:8a:5a:7d:
                    32:05:04:05:e3:6d:78:59:c5:c1:cb:7b:33:5c:73:
                    9f:46:ed:cb:05:35:90:66:97:a7:0a:58:d7:0f:68:
                    23:72:a2:00:39:3b:6f:ef:8d:2d:77:39:f5:e9:69:
                    1d:f6:18:4b:9d:8d:32:63:8a:a6:de:55:93:bb:d4:
                    94:1e:58:cb:d7:e0:e3:be:32:80:22:7d:5d:82:63:
                    42:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:18:72:43:81:F5:8F:AB:89:ED:84:2B:0D:6F:AE:D2:C2:54:65:28
            X509v3 Authority Key Identifier:
                keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/MBhyQ4H1j6uJ7YQrDW-u0sJUZSg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.107.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:b3:e7:43:e4:71:25:81:76:64:c1:3a:db:6c:d8:c8:cf:06:
         13:75:64:3b:1f:1c:04:d1:08:46:7e:45:fc:5b:d9:91:17:c5:
         3e:e1:dc:d4:f8:f7:a6:ac:d5:75:29:ae:2d:66:cf:03:18:c4:
         7b:6f:89:80:b9:e4:fe:f9:59:47:43:0e:98:95:e3:04:b9:21:
         49:11:5b:47:67:a3:a3:36:7c:04:ae:c2:93:da:bf:af:fc:41:
         9a:2a:e4:a1:e9:de:7b:d1:04:7e:91:48:69:30:23:6a:d3:e6:
         5c:d0:b9:b5:50:3d:77:25:22:37:c6:f6:50:69:1b:eb:d7:83:
         1a:6f:9b:b8:c7:15:86:0f:64:76:fe:86:e4:e2:92:a2:6c:a5:
         d4:ad:2e:16:db:b0:42:47:5d:95:1c:5e:77:20:ac:cd:0c:40:
         a1:22:93:10:17:8e:18:8c:53:c1:48:08:0e:06:0a:13:cf:3f:
         5a:0a:f0:d9:43:cc:9b:77:0e:8b:93:94:4a:98:25:89:a5:da:
         14:b0:09:bf:7e:68:93:aa:52:e4:45:c0:cc:34:5c:45:d9:5a:
         96:3f:db:1e:89:02:60:e4:cd:c7:f7:d7:61:b0:65:9e:82:f9:
         8f:0b:8d:87:9c:8f:f7:11:17:5a:29:db:80:0f:b2:cf:cf:3b:
         c0:9e:e2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:00 2024 by rpki-client on console-fra.rpki-client.org