Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ffb906-676e-4e0a-82f6-11f83d70c898/1/TXWWIR6WZmusfUvq5ChuaR5orH8.roa
File:                     TXWWIR6WZmusfUvq5ChuaR5orH8.roa (raw, json)
Hash identifier:          u5sRWUl/3l/PTi62trKtdS2AVkyrAL2YrLsA4UGXtok=
Subject key identifier:   4D:75:96:21:1E:96:66:6B:AC:7D:4B:EA:E4:28:6E:69:1E:68:AC:7F
Certificate issuer:       /CN=7f2c92a79f62fcb919e795ab5de313f4bda71ddf
Certificate serial:       DA1A6F
Authority key identifier: 7F:2C:92:A7:9F:62:FC:B9:19:E7:95:AB:5D:E3:13:F4:BD:A7:1D:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fyySp59i_LkZ55WrXeMT9L2nHd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/ffb906-676e-4e0a-82f6-11f83d70c898/1/TXWWIR6WZmusfUvq5ChuaR5orH8.roa
Signing time:             Sat 01 Jan 2022 12:54:53 +0000
ROA not before:           Sat 01 Jan 2022 12:54:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        193.34.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14293615 (0xda1a6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f2c92a79f62fcb919e795ab5de313f4bda71ddf
        Validity
            Not Before: Jan  1 12:54:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4d7596211e96666bac7d4beae4286e691e68ac7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a1:e3:07:03:d2:f6:98:d2:2d:1e:5d:9b:d4:
                    ef:66:3d:b8:d0:93:57:b6:69:b5:e4:1e:0f:ba:48:
                    8d:ec:77:4a:50:8d:bb:60:c9:dd:86:b2:84:14:c4:
                    03:ac:6f:1b:7f:8d:dc:13:92:b9:a9:f7:1a:4a:e1:
                    1e:ca:48:1e:2e:68:54:ea:a9:cb:6e:16:f6:11:90:
                    5e:0c:68:84:83:85:33:a9:96:1d:dd:cc:43:a7:2e:
                    3d:ca:44:53:58:01:08:78:cb:eb:ee:12:e7:b9:08:
                    44:35:fe:42:8c:4a:24:6b:14:1d:42:96:21:ee:da:
                    d4:9c:cb:b6:59:b6:06:d7:dc:8f:32:b7:30:e0:19:
                    60:91:47:cb:dd:13:3a:59:99:bc:d7:bd:50:91:b6:
                    2f:30:a3:3f:88:c8:40:ab:7a:22:b3:a6:6f:ef:f7:
                    d5:51:90:2c:19:9a:65:25:28:74:70:c8:fd:8b:52:
                    63:0f:71:b1:2f:f4:60:8f:0b:e2:4c:52:7e:59:50:
                    14:61:68:95:9c:58:91:68:f3:83:97:87:7c:9d:58:
                    83:31:91:bc:64:f9:5a:67:00:58:bc:f1:05:e6:7b:
                    28:d0:de:bd:d4:a7:60:22:e3:44:91:1b:a1:34:a2:
                    6a:4d:eb:37:2e:50:fe:73:52:bd:11:2a:37:13:49:
                    f7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:75:96:21:1E:96:66:6B:AC:7D:4B:EA:E4:28:6E:69:1E:68:AC:7F
            X509v3 Authority Key Identifier:
                keyid:7F:2C:92:A7:9F:62:FC:B9:19:E7:95:AB:5D:E3:13:F4:BD:A7:1D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyySp59i_LkZ55WrXeMT9L2nHd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ffb906-676e-4e0a-82f6-11f83d70c898/1/TXWWIR6WZmusfUvq5ChuaR5orH8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ffb906-676e-4e0a-82f6-11f83d70c898/1/fyySp59i_LkZ55WrXeMT9L2nHd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.34.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:54:cf:4e:2e:8a:b4:8c:4d:da:8e:d7:d9:41:ac:56:db:27:
         91:65:49:9c:d8:88:15:7b:87:4d:2e:e2:0d:a2:dc:2b:01:a0:
         ce:57:bb:da:f6:39:6f:8a:8a:8d:ee:3f:3c:52:ef:9a:72:8b:
         e1:d7:1a:ea:8b:72:47:bb:c9:cb:e5:94:56:6d:80:9d:bd:15:
         f0:18:b5:e0:df:24:35:e0:fd:d4:da:50:89:78:0b:ea:d2:4c:
         e9:d8:16:dd:27:71:62:92:71:b3:0b:77:bb:e4:60:8d:cc:52:
         2d:ef:a6:fd:32:4f:c5:52:3a:f8:9a:b8:1d:38:7f:2f:ed:88:
         3e:6a:f4:c1:58:e9:2a:cb:b2:0c:e3:ad:ac:83:2a:74:ab:f0:
         d5:3e:6e:21:4f:72:d4:38:59:51:d3:55:61:26:9b:41:66:62:
         ce:75:92:70:f9:d2:a6:19:8d:b2:eb:22:47:32:c0:bf:3f:9d:
         db:b1:65:41:ec:1f:2b:0e:f1:08:af:68:50:dd:b4:a6:44:45:
         0b:0a:11:84:2f:67:bf:eb:d9:8a:92:6b:24:a6:41:bb:b6:76:
         73:4b:07:43:34:2d:92:f9:9e:ad:55:4f:8a:6f:fc:8b:e6:c3:
         4e:45:46:53:69:49:6f:48:23:3b:84:77:04:bf:b5:ee:82:c3:
         5a:a1:47:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:21 2023 by rpki-client on console-ams.rpki-client.org