Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3d7874-2588-407f-acb9-13d9efbf5ccf/1/f46B9iRSEX104u1SRVxl0MMc9F4.roa
File:                     f46B9iRSEX104u1SRVxl0MMc9F4.roa (raw, json)
Hash identifier:          Swn/ShTENcBNxeXM+q6QArjcqqe2QQq5+yUamvWUl5E=
Subject key identifier:   7F:8E:81:F6:24:52:11:7D:74:E2:ED:52:45:5C:65:D0:C3:1C:F4:5E
Certificate issuer:       /CN=cfa349e3b6ac2fa262413c20cbc41d6a53743193
Certificate serial:       070F2EDD
Authority key identifier: CF:A3:49:E3:B6:AC:2F:A2:62:41:3C:20:CB:C4:1D:6A:53:74:31:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z6NJ47asL6JiQTwgy8QdalN0MZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/3d7874-2588-407f-acb9-13d9efbf5ccf/1/f46B9iRSEX104u1SRVxl0MMc9F4.roa
Signing time:             Sat 01 Jan 2022 14:02:40 +0000
ROA not before:           Sat 01 Jan 2022 14:02:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     10753
IP address blocks:        194.33.156.0/22 maxlen: 22
                          193.228.72.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118435549 (0x70f2edd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa349e3b6ac2fa262413c20cbc41d6a53743193
        Validity
            Not Before: Jan  1 14:02:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7f8e81f62452117d74e2ed52455c65d0c31cf45e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e1:b6:8f:c5:b4:6d:dd:b9:40:bb:ae:55:88:
                    3d:6a:3b:bd:6a:b6:b3:fe:0d:ac:5f:a5:80:93:40:
                    9c:5b:83:be:1d:bc:a4:a1:a4:07:0b:a7:d4:7a:a7:
                    8e:b3:c0:18:24:dc:01:e6:5a:9d:90:27:bd:95:33:
                    49:d4:63:b9:42:e4:5f:3e:7c:94:75:9e:d0:12:b5:
                    fd:26:10:e0:c6:55:60:db:9b:34:25:98:4e:43:fe:
                    39:67:db:54:8a:34:92:2f:1e:30:ab:74:6b:5e:43:
                    e4:b0:15:83:ab:9f:62:c8:7f:18:51:d2:8c:5d:0d:
                    e0:e0:71:7a:bd:29:06:ad:34:b1:e2:45:ce:fe:f4:
                    3e:c6:66:f4:14:82:14:30:86:b9:39:55:f1:43:f4:
                    1f:26:32:d9:34:2d:2e:12:a6:3c:7a:80:e4:98:07:
                    38:14:e1:c0:5b:31:cd:c0:9c:66:e7:2f:46:82:c4:
                    95:05:ff:d7:fd:14:2d:09:13:a8:d3:e6:82:3a:94:
                    fb:7c:6a:c5:57:a0:e2:f8:9f:72:70:c9:8a:48:29:
                    a4:33:bf:15:e1:83:d9:d7:e2:01:21:2d:ea:89:72:
                    73:6a:d5:11:7b:2e:e5:40:d4:f9:8f:87:d1:12:2d:
                    f4:63:b9:28:3f:8e:46:9a:70:0f:33:92:65:c5:4d:
                    b6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8E:81:F6:24:52:11:7D:74:E2:ED:52:45:5C:65:D0:C3:1C:F4:5E
            X509v3 Authority Key Identifier:
                keyid:CF:A3:49:E3:B6:AC:2F:A2:62:41:3C:20:CB:C4:1D:6A:53:74:31:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6NJ47asL6JiQTwgy8QdalN0MZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d7874-2588-407f-acb9-13d9efbf5ccf/1/f46B9iRSEX104u1SRVxl0MMc9F4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d7874-2588-407f-acb9-13d9efbf5ccf/1/z6NJ47asL6JiQTwgy8QdalN0MZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.72.0/22
                  194.33.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:98:30:7a:1c:65:3a:ba:44:51:8f:08:8c:67:ab:07:7f:62:
         f2:79:33:d6:43:11:66:01:81:a2:d1:4c:53:0b:65:f0:3e:ad:
         0a:4b:aa:40:77:31:fb:4e:05:35:0c:9b:e1:3d:77:a5:5a:05:
         9c:a5:f0:d5:80:db:b1:54:ee:b9:8e:f2:a7:93:b8:27:1b:78:
         74:29:f7:9e:81:74:d5:5f:b2:92:59:73:0f:20:64:cc:1a:46:
         a8:79:7e:23:1a:2c:6d:05:ad:91:6e:e6:7f:00:1c:56:c7:22:
         87:7e:f7:40:84:d2:17:c9:5c:4b:89:5c:86:5b:0a:5d:2d:7d:
         32:db:50:58:30:cd:5f:f3:aa:48:c5:2e:31:f8:dc:1a:0b:b4:
         da:39:81:d7:36:ed:db:38:61:2e:8a:f4:93:c0:14:cf:77:0f:
         be:df:19:38:c1:8a:d7:c8:15:fa:eb:f7:b6:17:ec:1e:fc:90:
         06:f2:7a:7c:fc:57:60:21:4b:ab:b4:3b:e7:30:33:df:ce:62:
         4d:c3:f9:22:6f:b0:02:ce:c1:79:a9:81:5e:7e:7f:4b:15:f9:
         c2:a1:70:e3:4a:00:f6:7d:3e:0a:5d:37:41:1f:c1:c9:0e:87:
         f5:78:94:a2:1b:59:b3:87:a1:16:3f:50:11:77:6b:66:bc:be:
         9e:16:3f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:53 2024 by rpki-client on console-ams.rpki-client.org