Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/_Z49idRauGtfAFERvczBswsttWY.roa
File:                     _Z49idRauGtfAFERvczBswsttWY.roa (raw, json)
Hash identifier:          TgS729nRk5lvG1GKTEbDPB8NHiE+xRZiiPfQoLs4QgA=
Subject key identifier:   FD:9E:3D:89:D4:5A:B8:6B:5F:00:51:11:BD:CC:C1:B3:0B:2D:B5:66
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       0A19300B
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/_Z49idRauGtfAFERvczBswsttWY.roa
Signing time:             Mon 14 Mar 2022 23:19:22 +0000
ROA not before:           Mon 14 Mar 2022 23:19:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        193.39.10.0/24 maxlen: 24
                          92.119.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169422859 (0xa19300b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Mar 14 23:19:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fd9e3d89d45ab86b5f005111bdccc1b30b2db566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6f:72:8c:97:a1:a5:8c:87:06:5a:c4:68:48:
                    55:05:8e:08:59:bb:a4:48:3e:89:bf:04:cd:e9:90:
                    71:28:a8:78:1d:d7:09:92:80:cf:d5:a5:30:b9:a5:
                    6c:7f:00:ab:5a:63:d4:de:08:0b:81:a4:01:53:67:
                    6f:b6:6c:ae:52:8b:33:00:2c:9f:14:8f:a8:8d:18:
                    b4:76:cf:45:98:df:81:60:80:78:11:f5:9a:75:73:
                    70:c0:fc:74:09:11:c0:05:c9:4a:5c:f0:f5:46:c3:
                    f7:24:72:b8:84:1e:5f:e6:75:e3:d4:0d:55:8a:50:
                    72:f4:bf:be:08:56:01:9e:f2:b4:f8:21:e9:c7:1d:
                    60:b6:95:26:22:1f:17:3a:17:63:e1:62:d4:9a:62:
                    57:6b:9a:18:28:c1:ad:ae:e2:b0:2b:1f:83:f3:79:
                    5a:4d:ee:e5:7f:47:ca:5f:28:98:26:73:9e:2e:5d:
                    d5:9e:66:1c:9d:ae:b9:be:a9:60:ff:81:06:aa:cf:
                    29:cd:89:74:bf:91:aa:e3:fc:c8:0b:1c:1a:c9:88:
                    14:76:d6:68:e7:d2:d8:23:4a:45:fe:c7:69:45:11:
                    73:bd:fc:a7:69:23:1c:20:50:6f:81:e5:b7:49:ed:
                    33:9b:5d:e6:e8:68:36:5a:80:ae:0a:18:bd:67:9a:
                    58:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9E:3D:89:D4:5A:B8:6B:5F:00:51:11:BD:CC:C1:B3:0B:2D:B5:66
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/_Z49idRauGtfAFERvczBswsttWY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.12.0/22
                  193.39.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:2f:14:bc:6c:b7:5a:f2:91:41:6a:5d:e9:d4:d8:8c:fb:ef:
         40:0d:81:57:ac:f6:b5:55:1a:37:24:9c:10:91:1d:86:e0:07:
         e4:bb:d0:73:00:0a:57:65:7c:a0:86:9a:c9:04:d5:00:3e:60:
         68:de:2f:bc:54:e2:5a:71:0b:82:04:b4:84:29:cb:fd:a5:16:
         d5:b9:11:6b:08:bd:0f:fe:92:40:50:ec:22:e9:4a:41:a4:2c:
         81:5e:3c:57:b6:9d:f5:50:2e:e1:da:b7:06:d7:c2:f6:77:68:
         65:00:8d:67:28:73:25:5e:3c:c9:42:7f:58:b3:65:3f:ab:f6:
         2d:ad:da:2e:80:1f:cf:5b:07:35:7a:ea:22:8c:1b:c9:99:6c:
         03:c7:e5:fa:4e:02:00:73:25:e5:d2:45:16:82:4c:ee:0b:09:
         1d:cb:07:1b:ae:16:d2:b6:5c:15:55:d9:3e:2e:5d:0d:3d:97:
         d9:22:0f:bb:1d:59:a3:5c:52:ce:26:0b:3f:53:b2:d0:db:7b:
         9f:98:5b:d6:56:94:f1:c6:fb:c2:ef:ec:ab:84:d1:e0:b2:c5:
         39:54:90:b0:95:b2:40:60:b9:e6:a5:59:d6:76:ef:62:4d:de:
         95:af:4e:58:3f:c5:25:56:f6:b7:85:b6:ef:1a:fe:97:66:72:
         34:78:6e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org