Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/114ef4-1626-4ab4-a9c4-2b311dac4ac7/1/FiY4H65OPKI3KeA65Rut1iXBrL4.roa
File:                     FiY4H65OPKI3KeA65Rut1iXBrL4.roa (raw, json)
Hash identifier:          axEWyWcfz3W3a2xx9s+3QarKkzcU76Ph8ekblVodqd4=
Subject key identifier:   16:26:38:1F:AE:4E:3C:A2:37:29:E0:3A:E5:1B:AD:D6:25:C1:AC:BE
Certificate issuer:       /CN=723c0eb427bacd977b5bb48707be48722e4da06d
Certificate serial:       03172C37
Authority key identifier: 72:3C:0E:B4:27:BA:CD:97:7B:5B:B4:87:07:BE:48:72:2E:4D:A0:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cjwOtCe6zZd7W7SHB75Ici5NoG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/114ef4-1626-4ab4-a9c4-2b311dac4ac7/1/FiY4H65OPKI3KeA65Rut1iXBrL4.roa
Signing time:             Mon 28 Mar 2022 11:31:54 +0000
ROA not before:           Mon 28 Mar 2022 11:31:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        193.131.114.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51850295 (0x3172c37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=723c0eb427bacd977b5bb48707be48722e4da06d
        Validity
            Not Before: Mar 28 11:31:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1626381fae4e3ca23729e03ae51badd625c1acbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8e:27:e3:7e:67:6a:5e:a6:86:a1:f6:2a:4b:
                    53:cf:89:2b:84:60:22:75:fc:43:25:78:07:c9:0b:
                    a3:de:eb:8f:7b:79:7a:12:18:9f:05:4f:38:bc:a2:
                    f6:06:29:5f:56:fb:55:a7:fc:85:ec:05:15:9f:12:
                    2c:9e:dd:d8:d2:e1:e3:ea:9c:98:1d:6d:a0:a0:3f:
                    4e:9b:8e:66:e4:07:40:92:65:6e:fa:fa:91:98:0b:
                    f2:f9:c7:b7:8b:bd:73:8d:32:af:40:16:c0:70:b4:
                    af:31:f2:b2:98:ce:d9:d4:8e:a5:89:79:88:e7:77:
                    fd:1d:2e:71:65:c7:85:03:cb:eb:64:70:68:53:ab:
                    81:a5:04:f8:06:5b:80:6e:48:0b:8b:ae:3c:da:08:
                    e9:7c:c2:ec:a5:a5:f0:7a:03:67:3b:98:98:83:79:
                    56:bd:8f:58:83:37:bd:29:9c:0c:f5:f6:54:87:5b:
                    41:52:7c:9d:68:27:42:86:18:ac:7c:c7:f5:1e:b0:
                    32:93:c2:d2:4e:88:03:c1:50:8a:22:d4:8f:93:c7:
                    4c:c0:19:67:a3:21:c8:50:5a:46:41:bf:2a:f8:24:
                    b9:94:7f:88:58:70:95:20:a4:01:52:c1:a2:22:2f:
                    9b:81:b4:5e:fe:1d:f3:ee:41:f3:a4:55:7d:a5:d8:
                    1a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:26:38:1F:AE:4E:3C:A2:37:29:E0:3A:E5:1B:AD:D6:25:C1:AC:BE
            X509v3 Authority Key Identifier:
                keyid:72:3C:0E:B4:27:BA:CD:97:7B:5B:B4:87:07:BE:48:72:2E:4D:A0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjwOtCe6zZd7W7SHB75Ici5NoG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/114ef4-1626-4ab4-a9c4-2b311dac4ac7/1/FiY4H65OPKI3KeA65Rut1iXBrL4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/114ef4-1626-4ab4-a9c4-2b311dac4ac7/1/cjwOtCe6zZd7W7SHB75Ici5NoG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.131.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:49:b3:48:27:ac:68:68:53:b2:88:d3:1a:56:32:66:fc:31:
         62:77:95:6e:54:01:aa:64:44:9f:16:2d:04:8a:59:28:b8:3a:
         28:df:17:b7:e2:04:d5:88:04:11:e3:06:db:7c:d0:60:a9:f5:
         c2:3c:f9:60:c1:69:56:be:62:de:62:32:5e:a1:85:ca:b4:53:
         71:c9:4d:53:d0:85:6a:59:1c:4a:ee:6f:50:b5:ac:d4:4e:ea:
         9c:ae:8d:82:c1:d4:b9:d3:f6:6b:e3:ed:8f:aa:d2:26:35:4a:
         23:bb:a6:cb:fa:e4:d9:db:f0:53:60:45:57:84:db:c9:14:2c:
         2b:32:73:86:de:55:9c:6d:aa:82:ed:f2:2d:0c:7a:21:e9:b0:
         6a:ef:4a:e6:b5:3f:d3:37:82:1d:0e:89:01:16:47:69:29:25:
         5d:35:22:e5:df:1b:00:19:5e:45:d4:b7:9a:90:bd:e4:c3:ea:
         95:87:f9:4b:46:89:4a:e4:93:38:1d:64:33:27:dd:96:ce:59:
         6e:78:97:67:62:de:b6:12:34:7f:a0:91:f9:f4:f0:ae:54:3d:
         ee:8d:a5:38:61:9f:b5:5f:8c:07:db:12:f3:79:9c:52:b2:5c:
         10:2a:3f:4b:4e:da:16:9e:18:f9:af:86:b1:32:62:6d:d0:74:
         38:80:71:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:50 2024 by rpki-client on console-ams.rpki-client.org