Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/ZoGfts7Ttg4FvBzNMAyg_ww18W0.roa
File:                     ZoGfts7Ttg4FvBzNMAyg_ww18W0.roa (raw, json)
Hash identifier:          ADcDVpED6BFLGGr3MIXfKkG9fcAKQAqvFXBmQC8OlFk=
Subject key identifier:   66:81:9F:B6:CE:D3:B6:0E:05:BC:1C:CD:30:0C:A0:FF:0C:35:F1:6D
Certificate issuer:       /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial:       0182CBF743A62423E88468A7043D70F5BEE9
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/ZoGfts7Ttg4FvBzNMAyg_ww18W0.roa
Signing time:             Tue 23 Aug 2022 18:29:15 +0000
ROA not before:           Tue 23 Aug 2022 18:29:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17447
IP address blocks:        193.108.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:cb:f7:43:a6:24:23:e8:84:68:a7:04:3d:70:f5:be:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
        Validity
            Not Before: Aug 23 18:29:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=66819fb6ced3b60e05bc1ccd300ca0ff0c35f16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:88:50:39:41:5d:91:95:0d:1a:df:cd:8a:30:
                    b9:e1:05:b2:77:6f:a6:76:66:14:ad:98:ef:58:20:
                    af:e2:8d:3d:a0:d9:e8:74:6f:d2:ea:83:6f:ac:ab:
                    aa:9d:6d:f2:09:80:50:85:50:c0:50:86:15:4e:5a:
                    a3:1f:19:cb:ef:0b:b8:62:a5:3f:6e:d4:83:9a:fb:
                    a5:9c:ba:16:b4:41:b9:5f:7b:2e:d3:63:d1:8c:92:
                    11:2b:70:4d:5f:17:1c:58:9d:7c:e3:81:75:d2:f6:
                    81:88:a1:6c:fc:4d:d0:29:6b:72:97:1d:86:c6:02:
                    51:d0:8c:b4:7d:c0:d2:d6:5d:e7:d3:c8:a0:42:af:
                    89:23:d8:10:5a:91:33:62:6a:1b:90:8e:1f:01:b1:
                    15:a4:08:71:85:70:d1:a9:4f:1a:1d:80:f0:73:a8:
                    75:2d:44:0f:2c:df:18:3a:31:00:b0:0f:b3:cc:20:
                    89:1c:3e:60:4a:af:8d:cd:29:db:f3:2c:97:c0:a5:
                    13:2d:83:cc:4a:57:ac:c2:47:37:49:86:ae:dc:49:
                    23:f5:3b:1d:0c:03:5a:ea:7d:e7:11:3f:ad:cf:d0:
                    aa:ee:9d:bd:f5:32:c8:28:0f:f2:dc:90:92:e8:05:
                    e9:4a:85:05:5f:0d:b0:dd:60:90:1c:c4:1a:90:04:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:81:9F:B6:CE:D3:B6:0E:05:BC:1C:CD:30:0C:A0:FF:0C:35:F1:6D
            X509v3 Authority Key Identifier:
                keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/ZoGfts7Ttg4FvBzNMAyg_ww18W0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.108.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:c4:f1:fd:7b:7a:5f:0c:b3:80:86:33:fb:1e:f1:b5:60:14:
         8e:62:24:5b:42:8f:71:0e:4b:5e:72:b1:a6:cf:fc:8f:99:67:
         5f:cd:bd:bf:f5:fb:09:e0:9c:35:26:72:15:d4:c5:e1:2c:2a:
         0a:ca:5e:ad:26:63:81:c0:a2:94:90:56:d3:82:40:2c:df:6b:
         e6:6d:6b:3b:0f:e0:3c:dc:2c:f1:ab:53:5c:2e:ef:1a:9b:73:
         fc:89:50:6a:0a:31:01:23:c6:a4:c0:06:54:ad:2d:a4:73:d6:
         2d:c3:39:bc:55:aa:60:1a:d6:aa:ee:f1:4f:da:18:88:37:2f:
         b1:33:ff:fb:3b:8a:49:93:16:f5:19:f6:6c:96:4b:5b:cd:cf:
         f5:c8:8d:1b:68:f5:cb:3a:37:79:6a:1b:df:b8:e0:f7:7c:76:
         9d:59:bb:3b:bc:68:0e:0b:ad:df:c2:6e:b4:fe:b5:d9:42:eb:
         46:e0:95:d9:ff:21:c3:b4:3f:08:20:12:50:4e:03:67:e4:f4:
         b8:bc:0d:f5:dc:ea:96:f5:d7:46:a8:11:f0:a7:ce:ba:74:c6:
         8d:1d:13:58:12:de:d2:c1:08:cb:99:a5:50:30:81:b3:2f:4f:
         0a:8a:89:fe:0b:33:08:3c:55:d4:e9:2b:95:06:d6:39:7e:30:
         f4:34:ad:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:02 2024 by rpki-client on console-ams.rpki-client.org