Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/GuONRZK1hPuJ6KyeDDj7AJLQoKM.roa
File:                     GuONRZK1hPuJ6KyeDDj7AJLQoKM.roa (raw, json)
Hash identifier:          jXR9C18oSLMAR7lrFvtDgFJby2djebNwGEYxsY0Q8FE=
Subject key identifier:   1A:E3:8D:45:92:B5:84:FB:89:E8:AC:9E:0C:38:FB:00:92:D0:A0:A3
Certificate issuer:       /CN=166c3820fb66505134c292f2c8f4badce4eb1ab5
Certificate serial:       0142D73C
Authority key identifier: 16:6C:38:20:FB:66:50:51:34:C2:92:F2:C8:F4:BA:DC:E4:EB:1A:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fmw4IPtmUFE0wpLyyPS63OTrGrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/GuONRZK1hPuJ6KyeDDj7AJLQoKM.roa
Signing time:             Tue 22 Feb 2022 22:38:25 +0000
ROA not before:           Tue 22 Feb 2022 22:38:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211585
IP address blocks:        213.109.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21157692 (0x142d73c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166c3820fb66505134c292f2c8f4badce4eb1ab5
        Validity
            Not Before: Feb 22 22:38:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1ae38d4592b584fb89e8ac9e0c38fb0092d0a0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c4:3f:98:bd:90:f2:e8:88:53:27:da:20:06:
                    3a:63:34:05:a3:e2:52:89:3f:cb:f5:41:c1:0e:e1:
                    49:19:f5:90:1a:da:76:42:eb:56:3e:e8:50:74:f4:
                    79:25:a3:8c:76:3a:67:24:1d:7c:b4:74:cf:63:de:
                    13:4b:22:6d:c9:0d:fb:9a:59:22:54:14:2a:b2:7a:
                    8b:1a:6c:eb:1c:4a:6c:e0:80:e5:4e:85:4d:03:6f:
                    4f:12:ab:07:11:a6:bc:58:18:f7:6a:c7:2d:85:e0:
                    01:fc:74:92:5d:65:6e:e3:3b:97:42:8c:4a:f1:56:
                    1c:a8:48:e7:2d:7d:e7:ba:ba:51:ce:c2:7f:66:0a:
                    5c:64:96:41:74:4b:1f:02:38:76:7d:a2:19:2c:f6:
                    0b:31:5a:3e:cf:e7:7a:96:0d:e3:c9:14:56:a2:ba:
                    f0:77:ff:f5:65:1d:5d:bf:a5:f3:d9:da:bd:35:72:
                    29:4a:2d:cc:28:db:73:fd:1f:90:a1:de:e2:f1:df:
                    5a:59:bd:04:b8:88:16:41:23:e2:96:46:14:1f:d0:
                    43:d7:b9:b2:bd:5e:7d:b6:3b:e2:bb:4e:95:1b:b3:
                    bf:79:db:e5:a1:13:52:59:b7:aa:4d:7c:36:ad:16:
                    a6:3c:ee:88:66:09:62:37:f3:95:30:b7:3d:17:31:
                    46:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E3:8D:45:92:B5:84:FB:89:E8:AC:9E:0C:38:FB:00:92:D0:A0:A3
            X509v3 Authority Key Identifier:
                keyid:16:6C:38:20:FB:66:50:51:34:C2:92:F2:C8:F4:BA:DC:E4:EB:1A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmw4IPtmUFE0wpLyyPS63OTrGrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/GuONRZK1hPuJ6KyeDDj7AJLQoKM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/Fmw4IPtmUFE0wpLyyPS63OTrGrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.109.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:a5:25:83:88:a0:1f:b1:72:a9:1c:ca:15:b0:1a:14:6f:b5:
         c7:e5:68:bb:e4:d7:34:32:0e:39:ad:7f:59:cf:a4:dc:86:bf:
         68:c7:24:82:aa:7c:cd:32:1a:06:3a:5b:91:3c:47:db:05:de:
         60:68:91:ad:90:69:13:cd:85:32:52:03:4f:e3:1e:5c:3d:a4:
         0f:3e:f0:fc:b6:d1:70:9d:98:45:2f:de:f1:56:b5:41:ef:80:
         45:02:1a:89:83:ed:71:45:b3:84:7e:8e:9a:bf:a9:fa:a4:fd:
         94:1e:fb:a7:bb:d5:4d:49:d2:48:7d:2c:0e:4f:38:6e:fc:57:
         70:a3:e2:77:d0:93:5d:8f:8b:4c:63:de:01:56:c0:30:4d:63:
         52:40:b1:f7:0a:02:9b:89:0a:35:1c:16:51:e1:28:36:fd:61:
         41:6b:3d:a2:e2:2a:ff:7e:f9:05:4b:d8:9e:d8:e4:e5:73:6c:
         a8:91:1b:41:c0:de:94:81:70:d3:5e:2c:db:9d:71:87:28:7e:
         d7:cf:e4:dd:91:ad:5f:a4:12:5a:e6:73:5d:20:5e:04:ce:97:
         4f:10:c7:df:36:2a:65:43:33:93:b9:5c:ef:1f:09:fa:ba:22:
         3d:11:0e:ee:ba:b2:1c:0e:d0:c0:ef:85:60:e7:2d:ab:7b:5f:
         e5:e4:49:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:44 2024 by rpki-client on console-fra.rpki-client.org