Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/70408e-9d44-4783-9bff-a1d176fedb86/1/4LUu-QnYMi0b4sZxLHybb4jHtX0.roa
File:                     4LUu-QnYMi0b4sZxLHybb4jHtX0.roa (raw, json)
Hash identifier:          XNlZ7WUX6zLJTXCLl6wlWf9hrTqeVLPSIxcr4MGE0ro=
Subject key identifier:   E0:B5:2E:F9:09:D8:32:2D:1B:E2:C6:71:2C:7C:9B:6F:88:C7:B5:7D
Certificate issuer:       /CN=c27822e22bffa312b871d0ab93a9e8eb1c44ceea
Certificate serial:       0171DD
Authority key identifier: C2:78:22:E2:2B:FF:A3:12:B8:71:D0:AB:93:A9:E8:EB:1C:44:CE:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wngi4iv_oxK4cdCrk6no6xxEzuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/70408e-9d44-4783-9bff-a1d176fedb86/1/4LUu-QnYMi0b4sZxLHybb4jHtX0.roa
Signing time:             Thu 21 Apr 2022 09:27:10 +0000
ROA not before:           Thu 21 Apr 2022 09:27:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50137
IP address blocks:        193.104.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94685 (0x171dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27822e22bffa312b871d0ab93a9e8eb1c44ceea
        Validity
            Not Before: Apr 21 09:27:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e0b52ef909d8322d1be2c6712c7c9b6f88c7b57d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fc:06:4d:98:a8:0e:e5:28:d4:76:e2:c3:58:
                    a9:15:7f:89:89:dd:1d:47:91:07:f0:58:ab:a3:6e:
                    a1:cf:6c:4b:88:f8:10:bd:74:fd:8b:78:85:0b:7a:
                    68:28:40:3a:00:1b:e5:61:73:51:4b:3d:7d:33:35:
                    80:01:c6:ed:90:ce:c2:97:21:c2:1b:50:af:50:4d:
                    df:27:e3:7a:ef:d0:8e:5c:c2:b6:3a:28:46:e9:c8:
                    29:7f:80:eb:e2:ef:cc:dc:d2:13:6f:4d:67:81:0e:
                    cb:c3:6c:27:e5:bd:7b:f1:81:d3:04:6e:ea:09:a1:
                    d9:03:54:a7:e2:4f:ba:29:66:a0:ab:1c:9a:d7:f6:
                    46:30:27:56:ab:15:37:95:b2:bf:56:36:59:59:57:
                    7a:dc:2c:ac:75:8b:2f:34:74:f0:c9:21:1a:92:47:
                    0e:23:0a:68:42:10:5b:04:a7:f6:24:81:2c:03:3e:
                    7b:56:bc:12:a1:35:e1:ac:5b:d7:73:d2:38:55:1f:
                    a1:80:df:e6:d5:4b:df:5f:cb:9e:ca:21:79:47:6a:
                    c3:b9:27:08:ae:a7:35:dc:8c:0f:6b:18:6a:5d:f5:
                    c4:be:eb:23:c6:2d:3b:52:c8:1f:4a:6b:63:7b:0a:
                    4b:77:b7:24:c8:4a:f9:39:ab:62:6e:60:f9:87:b8:
                    55:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B5:2E:F9:09:D8:32:2D:1B:E2:C6:71:2C:7C:9B:6F:88:C7:B5:7D
            X509v3 Authority Key Identifier:
                keyid:C2:78:22:E2:2B:FF:A3:12:B8:71:D0:AB:93:A9:E8:EB:1C:44:CE:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wngi4iv_oxK4cdCrk6no6xxEzuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70408e-9d44-4783-9bff-a1d176fedb86/1/4LUu-QnYMi0b4sZxLHybb4jHtX0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70408e-9d44-4783-9bff-a1d176fedb86/1/wngi4iv_oxK4cdCrk6no6xxEzuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:bb:39:4a:f9:c4:04:14:85:c1:51:f8:d7:07:cd:ec:d7:e3:
         b9:d4:29:b2:25:b2:27:e3:84:bc:28:1e:21:90:24:30:5b:06:
         22:80:72:25:c8:31:79:ed:cf:4c:9b:b7:4f:9a:b5:43:96:c4:
         dc:3f:85:b9:d8:2a:73:3c:10:e4:80:c4:9b:f2:3e:41:bc:db:
         1f:cc:5e:94:71:17:0b:7f:2c:aa:42:1f:33:31:87:2d:82:a3:
         c8:ab:56:42:7d:af:aa:d3:16:6e:d1:74:e5:72:04:aa:e6:cb:
         3e:28:f5:11:d3:53:cd:94:b1:1d:a2:71:1a:d5:a1:b3:d7:51:
         9d:dd:41:c5:fe:6b:f0:cb:af:14:39:8e:bc:fe:10:df:0a:3e:
         40:5b:8d:bf:cc:3a:ac:8d:01:75:5b:c3:fd:6c:ae:b6:13:8c:
         47:1b:06:75:c5:af:bd:49:94:39:0e:da:5a:49:96:13:99:fa:
         51:1d:20:bc:e7:6c:11:b7:8c:d3:12:e7:f9:8f:99:4f:60:1d:
         f7:1d:b4:fb:26:d9:b6:0c:61:75:b3:23:16:7c:2b:8e:66:d4:
         ce:ac:e5:18:28:90:4b:db:7f:a1:3a:8c:98:4e:48:1c:ef:62:
         8d:d8:bd:57:ad:9a:0c:49:81:33:38:99:5b:d6:7b:ee:69:0e:
         08:7f:8b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:59 2024 by rpki-client on console-fra.rpki-client.org