Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/Q_pzSXGHLyKJfhkZ7p_aEWvrs4Y.roa
File:                     Q_pzSXGHLyKJfhkZ7p_aEWvrs4Y.roa (raw, json)
Hash identifier:          VAZN8np+uPY9aq0fqpsqcaN6oCsyDBumYCVw4pG0n4w=
Subject key identifier:   43:FA:73:49:71:87:2F:22:89:7E:19:19:EE:9F:DA:11:6B:EB:B3:86
Certificate issuer:       /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial:       01856D13E43BE1C6BA3D6D8A9DC071146B75
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/Q_pzSXGHLyKJfhkZ7p_aEWvrs4Y.roa
Signing time:             Sun 01 Jan 2023 11:24:58 +0000
ROA not before:           Sun 01 Jan 2023 11:24:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212669
IP address blocks:        193.108.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:13:e4:3b:e1:c6:ba:3d:6d:8a:9d:c0:71:14:6b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
        Validity
            Not Before: Jan  1 11:24:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=43fa734971872f22897e1919ee9fda116bebb386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7a:de:bf:cb:4b:f1:fa:e0:6f:ab:cc:25:57:
                    ff:01:a1:cd:51:f4:74:ee:b4:cb:48:15:c5:2b:1b:
                    64:8e:8b:fc:d6:70:69:58:59:53:0f:49:dd:65:c4:
                    e3:68:1f:fa:8f:fd:9b:8b:dc:1b:4c:b9:3d:10:f5:
                    92:b2:60:30:e9:90:ee:bd:8b:84:37:e7:41:93:87:
                    79:49:d0:33:1c:0d:2d:0c:5b:6f:73:b2:61:a9:d2:
                    74:0f:c9:05:f9:a2:b4:72:85:c2:9f:fa:e1:43:b1:
                    55:8a:8b:7e:0b:70:22:3e:44:c3:c9:6f:3b:2a:f2:
                    39:de:44:20:cd:51:ca:07:90:3d:2a:44:a9:f2:bc:
                    b3:a3:bc:60:b4:29:4f:e6:83:a4:91:d7:bb:20:2a:
                    fe:32:b1:92:0a:99:4c:e4:dc:e0:94:07:d2:c9:ef:
                    19:a4:91:f4:0c:5d:a5:9f:7e:7b:b0:6f:f1:cd:dd:
                    50:55:e8:98:4d:2e:00:98:eb:f7:66:65:a9:62:ea:
                    8a:d7:6d:b5:f3:ef:4e:1e:3a:ed:08:db:82:30:04:
                    6e:22:bc:de:43:8a:70:da:15:eb:ff:ef:72:89:ed:
                    96:ef:56:83:59:88:8b:5c:28:2f:04:e5:bf:cd:b9:
                    ee:41:31:c2:86:0f:e4:1e:ad:0c:2c:19:35:49:63:
                    32:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FA:73:49:71:87:2F:22:89:7E:19:19:EE:9F:DA:11:6B:EB:B3:86
            X509v3 Authority Key Identifier:
                keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/Q_pzSXGHLyKJfhkZ7p_aEWvrs4Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.108.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:43:3f:bc:05:98:8b:c6:5d:85:c8:1a:c5:76:14:f0:05:b2:
         4a:04:bb:36:96:de:34:2a:cf:4a:d2:6f:73:23:3c:97:27:f0:
         a8:7b:71:45:8e:d9:e3:b0:f3:c1:1b:ee:87:8a:b8:91:36:2f:
         3d:9a:28:fc:44:a1:a1:58:ed:73:27:7b:9b:28:40:e0:6d:c8:
         97:6e:83:7e:28:91:86:36:08:e4:12:58:89:ab:0b:6e:f2:de:
         fc:5c:81:f3:e1:7c:c0:c5:0a:66:12:6f:7d:f0:61:32:37:3c:
         99:a1:e4:94:18:ac:0a:4e:52:90:cb:87:a7:46:8e:d6:0c:f5:
         97:4c:5e:58:a1:cb:f8:ba:d9:8f:5b:d4:b0:54:4b:6c:95:75:
         18:4c:30:85:71:78:26:71:bb:ce:c9:58:1f:91:e5:e2:69:31:
         ad:10:7b:d8:f9:0a:a0:67:30:af:4d:ff:63:04:f1:f9:15:8f:
         6f:45:eb:09:09:02:50:c9:12:97:5c:5f:18:99:c4:f4:d7:a1:
         c2:47:b0:7c:48:f8:af:be:b3:92:2a:1d:df:53:f2:dc:00:9c:
         57:29:09:f4:af:5d:67:fe:97:7a:ba:45:86:bc:56:5c:c0:58:
         3b:bb:20:c8:88:7c:09:7e:d6:9c:69:29:38:cd:4e:cb:ce:da:
         d4:e4:9e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:00 2024 by rpki-client on console-fra.rpki-client.org