Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/l1Jdtda_sYkOipGS_mENtGImsSQ.roa
File:                     l1Jdtda_sYkOipGS_mENtGImsSQ.roa (raw, json)
Hash identifier:          YsMmuYZZnqawFYI11DbjsLz3OtITnYZsl9QJpwWTtQY=
Subject key identifier:   97:52:5D:B5:D6:BF:B1:89:0E:8A:91:92:FE:61:0D:B4:62:26:B1:24
Certificate issuer:       /CN=51ea07606b286288cedfd25fee8f8b76e416d7fd
Certificate serial:       0157763B
Authority key identifier: 51:EA:07:60:6B:28:62:88:CE:DF:D2:5F:EE:8F:8B:76:E4:16:D7:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeoHYGsoYojO39Jf7o-LduQW1_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/l1Jdtda_sYkOipGS_mENtGImsSQ.roa
Signing time:             Mon 14 Feb 2022 11:20:05 +0000
ROA not before:           Mon 14 Feb 2022 11:20:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        193.3.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22509115 (0x157763b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ea07606b286288cedfd25fee8f8b76e416d7fd
        Validity
            Not Before: Feb 14 11:20:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=97525db5d6bfb1890e8a9192fe610db46226b124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9e:28:e8:e0:2f:f1:bb:27:c2:ab:98:0d:bb:
                    54:c8:10:55:48:58:a1:e4:30:c8:c9:a2:64:8e:0e:
                    be:f2:10:da:b6:98:fb:a0:15:6e:2a:70:4f:6e:b7:
                    42:fa:fc:63:1d:9a:00:66:02:2a:a0:81:48:e1:79:
                    b3:ad:00:30:1e:fa:25:bc:d4:b6:e8:4d:42:46:f5:
                    eb:cd:1c:1f:01:88:ce:a9:3c:0b:90:80:79:6a:69:
                    4f:db:7c:4c:75:f8:8c:1a:79:83:96:8f:53:df:8f:
                    90:a1:77:52:5b:2a:60:b8:69:eb:c7:47:a4:12:36:
                    45:55:7e:dc:1e:26:6b:ab:90:3d:68:f3:12:10:14:
                    48:37:c9:07:5f:06:9f:d0:bd:f6:9e:0d:2d:d2:9c:
                    7a:32:83:60:fd:5b:9b:6c:fc:ab:f9:58:1e:92:97:
                    f2:1c:16:db:fc:5e:6c:6c:14:ab:97:de:52:87:7b:
                    1e:80:85:e6:a8:ec:62:ea:4c:ca:64:64:cc:37:00:
                    40:16:60:7d:ec:73:ae:d7:19:9b:4a:99:50:e7:1b:
                    cb:8a:90:94:fe:b0:67:b3:c2:62:ea:14:ce:40:03:
                    d5:ae:03:f7:38:61:5d:c2:d0:04:28:6e:a8:5b:f2:
                    b7:b8:12:16:b5:82:68:96:fc:92:02:93:fd:e3:b4:
                    fb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:52:5D:B5:D6:BF:B1:89:0E:8A:91:92:FE:61:0D:B4:62:26:B1:24
            X509v3 Authority Key Identifier:
                keyid:51:EA:07:60:6B:28:62:88:CE:DF:D2:5F:EE:8F:8B:76:E4:16:D7:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeoHYGsoYojO39Jf7o-LduQW1_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/l1Jdtda_sYkOipGS_mENtGImsSQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f3e0f2-0bb6-495b-ad3a-6c3f69b18735/1/UeoHYGsoYojO39Jf7o-LduQW1_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:4d:20:8c:f9:74:42:7c:e6:57:29:6f:ab:4b:50:70:62:1d:
         9d:6a:41:29:0e:b9:8e:a0:b2:63:ff:89:ef:f5:e1:5d:33:e5:
         22:40:73:c3:83:14:1b:4c:31:5e:1c:77:a8:cb:7d:f1:93:6e:
         af:30:0a:fd:96:05:0f:af:94:c4:a8:16:48:d6:c5:88:04:a2:
         07:0d:0f:2a:08:dd:15:ea:35:9c:92:ca:31:c3:95:91:3b:11:
         dd:79:a5:9b:ac:50:e5:d8:54:3f:93:88:11:5c:63:43:0f:0b:
         69:1b:55:ac:00:79:1a:d7:4d:ee:19:93:8b:5b:ce:e5:48:93:
         60:77:02:2a:9e:f0:a6:26:d8:d2:82:37:95:f1:c4:e3:6a:07:
         5b:53:1b:70:e9:a0:37:47:b6:a1:b9:8b:5a:00:93:ad:ad:2d:
         1a:2f:5d:dd:86:ab:21:b8:47:32:b1:7f:07:6c:f6:b1:94:39:
         24:84:d6:d7:db:ce:1f:8e:4b:5c:ea:f1:35:25:b8:4c:e6:19:
         fd:0f:e6:af:a3:a7:2b:5a:3c:74:32:24:11:20:38:0e:f6:13:
         d0:de:c3:3c:9e:49:54:af:8d:29:25:a0:ae:88:15:95:9a:31:
         d4:f7:0b:26:07:97:a6:27:31:56:6b:f7:e9:cd:eb:20:f4:5f:
         c7:6d:ba:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:42 2024 by rpki-client on console-ams.rpki-client.org