Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/3mohdaGYUYzZkjY5e114CYqJHys.roa
File:                     3mohdaGYUYzZkjY5e114CYqJHys.roa (raw, json)
Hash identifier:          3dqn4gH2usCUlfx6zMB4JVZqv5YeHCzUCbf1YfjqSfY=
Subject key identifier:   DE:6A:21:75:A1:98:51:8C:D9:92:36:39:7B:5D:78:09:8A:89:1F:2B
Certificate issuer:       /CN=166c3820fb66505134c292f2c8f4badce4eb1ab5
Certificate serial:       01843E33C18C43613C3761949C1708E24B48
Authority key identifier: 16:6C:38:20:FB:66:50:51:34:C2:92:F2:C8:F4:BA:DC:E4:EB:1A:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fmw4IPtmUFE0wpLyyPS63OTrGrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/3mohdaGYUYzZkjY5e114CYqJHys.roa
Signing time:             Thu 03 Nov 2022 15:54:50 +0000
ROA not before:           Thu 03 Nov 2022 15:54:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202199
IP address blocks:        213.109.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:3e:33:c1:8c:43:61:3c:37:61:94:9c:17:08:e2:4b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166c3820fb66505134c292f2c8f4badce4eb1ab5
        Validity
            Not Before: Nov  3 15:54:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=de6a2175a198518cd99236397b5d78098a891f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d6:7e:07:ef:91:5d:6e:3f:ac:14:9d:bd:31:
                    e9:23:81:b7:b6:e7:f1:96:02:91:64:15:98:c5:b5:
                    be:c8:ef:2b:64:99:ee:aa:63:ec:f8:3e:87:3f:f6:
                    28:e4:a1:be:da:a2:8b:db:84:a2:ec:68:19:75:56:
                    43:fb:89:f4:f6:8c:f1:b9:9a:71:78:70:3e:3f:37:
                    b6:b0:a1:e4:27:6c:c1:9b:78:9b:e6:c7:57:5f:6f:
                    17:9d:26:be:e2:ee:f9:99:aa:6d:1b:5b:da:5b:c6:
                    e8:fd:51:65:3d:d3:02:ca:f2:36:80:be:a6:24:ef:
                    ae:15:55:88:f9:3e:f5:db:ab:b7:89:40:fe:30:a0:
                    cc:2d:cb:6c:49:31:fc:e0:7a:e8:e4:bd:37:62:af:
                    7e:7c:05:ba:ed:6f:d8:6f:62:2d:8a:59:7a:e6:d8:
                    7a:50:6b:ea:d5:7b:5e:48:9c:d4:de:fc:69:8c:de:
                    2a:4b:04:50:fa:7b:3d:61:27:82:d1:ca:dd:2a:7f:
                    e1:41:57:c0:de:ff:53:28:f1:f4:db:e5:90:ca:bf:
                    0a:a0:fa:23:2e:65:c7:7f:fb:58:ac:92:2f:dc:f9:
                    b5:36:00:64:ad:8a:4b:24:71:a6:17:d0:69:81:f4:
                    78:68:69:d9:aa:ea:e3:c1:8f:22:76:83:6a:86:a6:
                    bc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6A:21:75:A1:98:51:8C:D9:92:36:39:7B:5D:78:09:8A:89:1F:2B
            X509v3 Authority Key Identifier:
                keyid:16:6C:38:20:FB:66:50:51:34:C2:92:F2:C8:F4:BA:DC:E4:EB:1A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmw4IPtmUFE0wpLyyPS63OTrGrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/3mohdaGYUYzZkjY5e114CYqJHys.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/Fmw4IPtmUFE0wpLyyPS63OTrGrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.109.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:64:3c:a8:90:26:3e:77:8a:5d:8e:70:26:2a:d0:a9:9f:eb:
         5c:ae:22:ec:bc:71:89:c2:98:de:c8:ba:3f:e1:19:58:91:df:
         ce:66:7f:c7:a2:4e:bc:15:db:64:90:d3:5d:6f:4f:32:5b:2b:
         f0:55:97:62:a5:44:6b:63:30:21:31:49:5e:3d:a8:af:04:71:
         68:ff:fa:3a:e5:1e:57:8a:85:ea:8e:2e:f7:70:15:e8:52:13:
         56:83:22:20:f0:8e:4d:f1:a1:8c:e2:22:d8:af:69:ad:6f:b6:
         c0:75:78:cc:68:07:9f:d2:4c:d7:72:10:ad:e5:82:0e:4a:65:
         c7:a5:4a:6a:4b:25:ac:30:8b:73:a9:6a:62:56:6e:9e:50:2f:
         d7:2c:5c:70:25:4b:32:aa:38:44:67:a6:72:b5:e5:49:22:25:
         4f:0e:49:63:89:0a:f5:d1:79:d7:ab:9d:14:66:ed:3f:b7:3c:
         2a:3a:37:31:2d:a8:73:5b:38:c9:58:08:1f:ab:6a:e5:10:77:
         fa:5c:a4:de:4c:fc:96:ca:05:cb:f4:60:d2:be:53:b2:62:24:
         2c:ce:2c:6b:6d:d2:06:06:03:73:0c:f7:d9:4e:d2:88:1c:44:
         02:d0:0b:37:fd:61:e5:48:c8:d9:41:7d:54:17:c0:93:f1:33:
         b7:ec:40:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:42 2024 by rpki-client on console-ams.rpki-client.org