Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/hjc4glrcoVMXkj6m3rpIPeW4uQQ.roa
File:                     hjc4glrcoVMXkj6m3rpIPeW4uQQ.roa (raw, json)
Hash identifier:          kmIcrvr6DHHOYJYv5nJvzLqIOhTak7SJcbSJ70mBWig=
Subject key identifier:   86:37:38:82:5A:DC:A1:53:17:92:3E:A6:DE:BA:48:3D:E5:B8:B9:04
Certificate issuer:       /CN=51ea07606b286288cedfd25fee8f8b76e416d7fd
Certificate serial:       0225A1E6
Authority key identifier: 51:EA:07:60:6B:28:62:88:CE:DF:D2:5F:EE:8F:8B:76:E4:16:D7:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeoHYGsoYojO39Jf7o-LduQW1_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/hjc4glrcoVMXkj6m3rpIPeW4uQQ.roa
Signing time:             Thu 12 May 2022 15:38:01 +0000
ROA not before:           Thu 12 May 2022 15:38:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48024
IP address blocks:        193.3.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36020710 (0x225a1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ea07606b286288cedfd25fee8f8b76e416d7fd
        Validity
            Not Before: May 12 15:38:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=863738825adca15317923ea6deba483de5b8b904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7b:50:52:a4:25:e1:cb:b5:7f:15:dd:f3:2a:
                    ac:78:21:b5:f7:ea:c5:b6:9c:c5:c9:a2:73:05:f2:
                    6b:e8:d4:9c:c6:98:48:61:72:f1:ad:21:7f:df:79:
                    23:07:5d:15:47:42:4c:3e:f7:06:28:80:e4:62:3e:
                    4c:d2:7e:49:8b:ed:e9:33:0d:6f:e4:f7:f8:cf:d9:
                    30:2e:81:68:20:d7:11:b0:6d:98:10:9f:1c:86:d5:
                    78:86:f9:4e:4d:aa:00:6e:57:aa:9c:a5:9a:68:0c:
                    4e:dd:92:3c:00:fd:43:58:14:1c:cb:0c:5a:e4:32:
                    ab:c4:87:9c:5b:43:48:b9:40:a8:06:c3:0c:1d:6b:
                    f7:f5:6b:b3:54:5e:4d:11:ff:37:cb:3a:e6:01:50:
                    cf:69:03:57:bb:92:11:8d:14:41:bf:36:ed:67:15:
                    4f:0d:f2:7d:b6:46:66:df:5f:93:9b:ec:65:41:73:
                    41:29:14:c0:26:49:90:e3:16:db:30:e8:a3:7b:64:
                    32:dc:a6:64:22:3a:86:a3:fb:f0:7f:da:9e:ae:3e:
                    41:a0:80:50:27:c3:27:da:11:e3:e5:bd:91:94:7f:
                    67:4d:56:2b:c1:b1:16:dc:f4:89:c6:13:e8:2e:4b:
                    08:59:32:93:ae:c4:ab:61:8a:f1:4a:5f:47:72:18:
                    32:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:37:38:82:5A:DC:A1:53:17:92:3E:A6:DE:BA:48:3D:E5:B8:B9:04
            X509v3 Authority Key Identifier:
                keyid:51:EA:07:60:6B:28:62:88:CE:DF:D2:5F:EE:8F:8B:76:E4:16:D7:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeoHYGsoYojO39Jf7o-LduQW1_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/hjc4glrcoVMXkj6m3rpIPeW4uQQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/UeoHYGsoYojO39Jf7o-LduQW1_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:4d:6a:b7:fc:72:ea:8a:44:7e:14:ea:5a:42:c3:01:4b:a2:
         e5:c0:ea:d6:06:da:5c:61:39:8e:14:0e:8d:6a:67:80:8b:2b:
         6b:bc:82:4a:2d:0c:a4:46:3e:9d:46:c8:08:93:e4:36:2a:1a:
         4c:b0:86:40:92:a5:85:0d:4d:45:cd:01:f0:30:88:3a:b7:a2:
         86:8b:28:42:40:19:dd:39:f9:ae:70:43:a0:85:66:62:e1:e8:
         2e:fe:60:cc:42:e9:f7:cf:fd:e4:ef:52:f1:a5:a2:aa:1c:d9:
         db:8c:84:38:98:a8:a7:f2:17:3e:93:2f:b6:b4:7b:e7:6d:89:
         f5:61:29:d4:e3:f7:07:be:53:7d:a7:b6:43:40:f9:4b:6b:ee:
         a7:2a:3e:60:41:ce:74:37:a7:77:84:8a:b3:69:30:0d:0b:40:
         33:6d:c0:13:89:39:33:48:cc:e6:fa:32:4d:70:62:2f:a7:1e:
         d3:90:ff:1f:be:db:31:63:3b:2a:dc:f0:0b:10:77:64:a6:7e:
         10:dc:05:38:58:a8:8f:8b:6d:73:49:20:0d:3e:9b:7f:6c:57:
         45:87:48:9f:8e:77:01:49:be:74:fe:97:7e:3b:27:bf:60:71:
         01:c4:cf:45:ee:c7:f0:9b:60:a8:6c:d1:e9:6f:1b:6c:5d:bf:
         f1:5b:e4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:42 2024 by rpki-client on console-ams.rpki-client.org