Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/67b13f-7c1c-4d11-bfaf-859441974ff0/1/qdl57afUxxu0rM9dyRnm-Iswr9M.roa
File:                     qdl57afUxxu0rM9dyRnm-Iswr9M.roa (raw, json)
Hash identifier:          2RUWHm2V4jmo/2NLeo8xC+fHO/ysV/DRKWbIQrw+G6A=
Subject key identifier:   A9:D9:79:ED:A7:D4:C7:1B:B4:AC:CF:5D:C9:19:E6:F8:8B:30:AF:D3
Certificate issuer:       /CN=ac69d3a96e34ecffb68580420cd8ec9f7ea09281
Certificate serial:       869224
Authority key identifier: AC:69:D3:A9:6E:34:EC:FF:B6:85:80:42:0C:D8:EC:9F:7E:A0:92:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rGnTqW407P-2hYBCDNjsn36gkoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/67b13f-7c1c-4d11-bfaf-859441974ff0/1/qdl57afUxxu0rM9dyRnm-Iswr9M.roa
Signing time:             Sat 01 Jan 2022 03:52:14 +0000
ROA not before:           Sat 01 Jan 2022 03:52:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        212.23.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8819236 (0x869224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac69d3a96e34ecffb68580420cd8ec9f7ea09281
        Validity
            Not Before: Jan  1 03:52:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a9d979eda7d4c71bb4accf5dc919e6f88b30afd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8f:eb:96:76:ec:59:72:03:73:8e:55:e6:09:
                    a4:6d:23:6a:85:62:23:10:86:df:ba:87:74:5f:2f:
                    86:74:08:61:d2:c0:ca:ea:d7:d3:6e:0a:0c:d1:b9:
                    56:50:38:c6:d0:d2:3f:0f:05:06:eb:55:60:a5:61:
                    e4:a6:52:f3:d5:b1:66:06:a7:6f:cb:3f:97:b4:84:
                    33:a7:4f:ea:11:2d:98:03:64:fd:19:d4:93:77:82:
                    52:66:19:f6:69:9e:06:b9:bc:c6:2b:0b:79:68:e1:
                    8e:e5:7e:36:26:0c:52:23:9c:6f:3b:3d:15:16:7e:
                    f5:dc:4c:37:4c:2b:f3:eb:ab:6f:ed:c1:b4:2a:83:
                    94:1c:66:e6:e0:7b:4c:62:38:16:36:22:3f:31:c3:
                    0a:e0:00:13:ea:e9:59:13:26:7c:8b:0c:5a:a5:0e:
                    8b:e2:db:b0:97:da:76:2e:3f:21:11:f4:4b:85:d9:
                    c0:b7:3d:b3:fd:2d:87:06:25:1c:6f:ea:4d:61:91:
                    6a:cd:4f:d1:66:08:df:c2:bb:c1:a3:66:f9:3d:30:
                    10:c8:b3:ce:59:b7:d8:be:63:aa:25:86:08:f8:df:
                    b4:41:da:d8:8d:11:a4:57:64:64:eb:a1:5c:40:e4:
                    bf:c0:4d:ad:69:67:e7:6c:9b:7f:82:8d:e4:c0:12:
                    3a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D9:79:ED:A7:D4:C7:1B:B4:AC:CF:5D:C9:19:E6:F8:8B:30:AF:D3
            X509v3 Authority Key Identifier:
                keyid:AC:69:D3:A9:6E:34:EC:FF:B6:85:80:42:0C:D8:EC:9F:7E:A0:92:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGnTqW407P-2hYBCDNjsn36gkoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/67b13f-7c1c-4d11-bfaf-859441974ff0/1/qdl57afUxxu0rM9dyRnm-Iswr9M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/67b13f-7c1c-4d11-bfaf-859441974ff0/1/rGnTqW407P-2hYBCDNjsn36gkoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.23.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:5a:8d:03:f7:b2:81:ad:5e:4e:ec:3b:ee:a5:fa:9a:f3:27:
         c6:e3:62:2d:9a:c4:91:a9:7d:df:a5:96:07:33:bc:61:4d:70:
         ef:c0:24:78:6b:03:41:4c:03:33:48:40:8d:cb:77:b1:11:74:
         27:5e:c0:59:8d:f4:0a:25:88:45:a0:c3:06:ea:93:d1:e1:4c:
         89:3b:45:89:a8:b9:22:c7:db:9c:21:48:8b:3c:8c:de:fa:fb:
         e6:ed:07:8b:53:08:ff:48:5c:02:63:6f:53:34:e6:65:b0:95:
         8b:af:77:df:79:8a:f3:28:ec:ee:72:2a:da:c5:c1:06:cb:99:
         b8:7c:0d:43:43:b7:8a:85:3e:b9:92:16:9a:6e:84:0d:4f:2b:
         04:2e:aa:4d:b0:40:db:fe:a8:e6:5c:a9:b8:3e:bc:15:d0:05:
         9e:52:9e:c2:87:ce:ba:3f:2d:0a:c2:dc:88:eb:6b:4d:f0:15:
         3a:3e:f7:ad:58:7d:db:24:7c:8e:bd:92:e3:ca:d3:8d:de:7e:
         c2:3b:67:dd:27:5a:81:68:e0:bd:1c:66:e4:95:b2:5b:bf:9d:
         c4:62:87:76:3e:5e:4c:1e:3c:6f:30:c1:c6:54:6e:6f:54:85:
         bf:52:84:b2:0a:9b:78:7c:d5:3d:cc:ab:5a:99:88:bf:bf:55:
         db:4b:b9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:55 2024 by rpki-client on console-ams.rpki-client.org