Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9e2fcb-5bbe-4417-9656-bd90f79745ca/1/Z-Q_hXJzHymId62PbMOzJ5oOsKU.roa
File:                     Z-Q_hXJzHymId62PbMOzJ5oOsKU.roa (raw, json)
Hash identifier:          So/yRijsq6pBMzAqrlu6hOtZw9tlMYbfJj2WLMLWJ9c=
Subject key identifier:   67:E4:3F:85:72:73:1F:29:88:77:AD:8F:6C:C3:B3:27:9A:0E:B0:A5
Certificate issuer:       /CN=371e04ff185b50b9e61ec5f46e2b10877491d882
Certificate serial:       0AB8BE9D
Authority key identifier: 37:1E:04:FF:18:5B:50:B9:E6:1E:C5:F4:6E:2B:10:87:74:91:D8:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nx4E_xhbULnmHsX0bisQh3SR2II.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/9e2fcb-5bbe-4417-9656-bd90f79745ca/1/Z-Q_hXJzHymId62PbMOzJ5oOsKU.roa
Signing time:             Sat 01 Jan 2022 07:56:51 +0000
ROA not before:           Sat 01 Jan 2022 07:56:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200020
IP address blocks:        193.105.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179879581 (0xab8be9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371e04ff185b50b9e61ec5f46e2b10877491d882
        Validity
            Not Before: Jan  1 07:56:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=67e43f8572731f298877ad8f6cc3b3279a0eb0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d4:6f:b6:4d:f2:a6:f4:cb:95:42:1c:46:ab:
                    3e:00:f2:6e:e5:9b:29:dd:a6:ca:57:0d:e7:b9:b3:
                    d0:3f:65:72:9c:35:1d:dc:30:18:0e:12:04:98:1c:
                    a6:79:94:15:18:6d:2a:8a:dc:e0:2c:c7:6e:7e:af:
                    16:ab:01:d8:9b:94:2c:64:87:45:48:de:2f:a5:d2:
                    ca:2b:9a:d7:f5:0e:14:cc:75:03:71:46:2e:44:3e:
                    d0:1b:ed:61:a8:d5:8a:c7:ab:4f:ce:e5:85:75:08:
                    66:a9:cf:1d:42:13:7a:64:5c:2b:67:40:20:d3:e1:
                    65:fa:eb:7b:da:56:9a:41:91:94:61:7d:de:6d:75:
                    09:ee:f7:24:25:60:ed:83:9e:57:c9:9d:96:fc:2a:
                    fc:67:e1:a5:38:19:6c:73:8b:f4:03:ed:46:36:ad:
                    83:d9:38:1b:63:ca:80:fe:15:ab:22:fe:af:db:24:
                    c0:e2:39:ba:7f:c7:23:e3:61:72:f7:7a:28:2d:5f:
                    0d:a6:51:94:15:a3:1c:d4:cb:69:34:e1:97:7f:9e:
                    ae:db:61:da:de:12:1d:5d:cc:af:68:29:80:2a:1e:
                    4e:8c:ec:19:77:69:36:4c:09:28:1a:ce:e6:66:f0:
                    26:0e:c7:a0:39:99:71:7f:47:08:78:22:6f:18:79:
                    63:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E4:3F:85:72:73:1F:29:88:77:AD:8F:6C:C3:B3:27:9A:0E:B0:A5
            X509v3 Authority Key Identifier:
                keyid:37:1E:04:FF:18:5B:50:B9:E6:1E:C5:F4:6E:2B:10:87:74:91:D8:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx4E_xhbULnmHsX0bisQh3SR2II.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9e2fcb-5bbe-4417-9656-bd90f79745ca/1/Z-Q_hXJzHymId62PbMOzJ5oOsKU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9e2fcb-5bbe-4417-9656-bd90f79745ca/1/Nx4E_xhbULnmHsX0bisQh3SR2II.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:b1:6d:fa:59:98:45:4d:b2:8b:f4:8a:98:2f:89:49:c5:5a:
         95:38:00:7e:e3:55:6b:06:e0:eb:1a:63:f8:3d:3b:bf:19:29:
         26:d4:76:33:fc:fc:b9:47:20:93:fb:51:c5:d8:7e:aa:8e:5a:
         75:3e:bb:be:a1:64:06:c0:ef:94:22:92:b4:81:f1:25:2a:08:
         d0:01:6b:be:fa:ba:7c:40:5b:d9:30:68:56:1a:cc:3a:1f:6a:
         a0:b8:e9:e3:93:06:66:ce:55:0f:32:68:71:35:10:e1:79:66:
         78:46:30:26:76:e6:57:53:b1:81:03:79:fb:9f:25:f2:a0:ce:
         94:42:8e:57:b9:6b:d1:1b:7d:b5:86:c8:81:72:3c:c7:a6:d9:
         58:49:f8:5f:f4:49:8c:fc:b8:0b:17:f6:0f:ea:58:42:60:50:
         52:bc:4a:91:40:2e:36:2c:ed:ca:b7:0e:58:db:09:8e:43:76:
         c6:d2:1b:2e:af:d3:4a:98:f6:9a:eb:30:01:18:a2:00:39:0d:
         cc:02:22:02:d0:2a:e8:9b:11:9d:df:56:52:1a:b7:b5:f7:ff:
         3a:cc:a8:0e:17:a3:09:7a:0f:16:0d:a3:c3:3a:27:9f:9d:54:
         ec:45:17:c4:3e:17:93:0c:23:55:87:c1:91:ac:3e:99:30:e8:
         51:75:d4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:39 2024 by rpki-client on console-ams.rpki-client.org