Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/_z6IHsIBGmkIlVyTPrmoK8bLKE8.roa
File:                     _z6IHsIBGmkIlVyTPrmoK8bLKE8.roa (raw, json)
Hash identifier:          mtQ67Ff1k0kfp91bCKIVzmjAg9yptFHsLft4qCytaNk=
Subject key identifier:   FF:3E:88:1E:C2:01:1A:69:08:95:5C:93:3E:B9:A8:2B:C6:CB:28:4F
Certificate issuer:       /CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Certificate serial:       01685E99
Authority key identifier: 80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/_z6IHsIBGmkIlVyTPrmoK8bLKE8.roa
Signing time:             Sat 01 Jan 2022 04:57:57 +0000
ROA not before:           Sat 01 Jan 2022 04:57:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35308
IP address blocks:        193.151.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23617177 (0x1685e99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
        Validity
            Not Before: Jan  1 04:57:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ff3e881ec2011a6908955c933eb9a82bc6cb284f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d3:21:a6:f8:82:7f:56:cb:37:71:5b:71:25:
                    a9:ec:2c:c8:1e:d4:68:68:c4:e8:99:ba:e6:3d:f4:
                    87:f0:8c:5c:03:e6:85:b7:83:d6:c3:5a:d2:8c:45:
                    b9:1f:c7:b3:86:38:ec:61:2b:cd:e8:66:07:ee:59:
                    9c:6e:04:6b:62:4c:cc:ea:c0:f4:d2:7f:cc:56:59:
                    be:7d:41:9c:bf:e8:db:bf:dd:e8:c5:ef:3d:8d:db:
                    5a:ac:cc:20:36:c3:c1:99:a0:09:82:bf:22:75:02:
                    7d:18:6f:06:9b:e0:10:71:d9:67:92:95:52:4f:bc:
                    ef:7f:e3:00:a3:28:b7:50:e4:0d:82:b1:92:24:d5:
                    31:b9:42:ed:fd:44:56:ef:3c:03:7f:bf:e6:96:8d:
                    ba:bd:30:04:00:ff:9a:cc:5d:12:21:df:9d:c7:b4:
                    7a:49:1a:1a:54:cc:e9:de:06:b2:f0:8a:87:16:16:
                    3c:62:ca:cd:47:bb:1f:d3:94:06:1d:38:13:29:7c:
                    a6:dc:f7:2b:99:f4:7d:0e:fe:6b:8f:da:1d:50:df:
                    f0:d1:df:6a:1a:d9:f7:3e:25:27:6e:ef:1b:03:14:
                    10:16:4d:64:f5:e3:75:e4:70:6e:61:62:b6:6d:5d:
                    9f:ba:28:86:bc:0d:93:cb:29:00:a2:1f:0d:6f:95:
                    83:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3E:88:1E:C2:01:1A:69:08:95:5C:93:3E:B9:A8:2B:C6:CB:28:4F
            X509v3 Authority Key Identifier:
                keyid:80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/_z6IHsIBGmkIlVyTPrmoK8bLKE8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.151.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:1a:5b:c2:c5:b4:7b:2e:90:25:fe:09:14:36:aa:02:12:9f:
         7f:b5:03:be:5c:ea:9c:e8:3c:71:93:c8:2b:dd:72:72:51:fd:
         86:4d:ed:fa:3e:bd:52:e9:e1:ba:69:a2:d8:64:23:92:b9:70:
         a2:74:96:a0:27:42:76:3e:64:db:81:09:c4:01:fb:83:f6:ac:
         4a:4b:3b:1d:a9:84:cd:ad:f8:32:48:cf:fa:6e:50:2a:43:aa:
         f2:bf:8c:6a:23:cf:1a:7d:d6:74:2b:e4:73:12:54:65:ff:8c:
         60:be:cc:ef:4b:c8:31:f0:52:8e:f4:d7:4c:73:d0:03:47:e8:
         bd:83:6d:30:21:54:79:0d:e6:9e:bb:96:5f:4e:7e:1c:c7:c5:
         7c:d8:eb:91:60:ca:9b:41:29:92:b1:b9:78:cf:4e:14:d1:18:
         3d:52:6d:e1:c2:85:dc:ff:6d:10:61:aa:b4:e2:01:6a:27:cb:
         56:f7:56:ba:16:c8:c5:8c:7b:44:82:3b:c4:55:d3:a9:84:cf:
         b5:1e:85:5e:c6:4b:a1:f6:04:4a:f6:a6:ec:97:38:13:9e:81:
         96:79:05:b2:a4:3a:d4:4d:b7:cb:23:99:69:b5:91:77:ec:6d:
         42:8e:57:72:89:0f:bd:2d:69:2a:c2:ba:75:25:94:81:c4:37:
         16:68:a0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org