Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/kkER23WZlV1jVmibrMpv13kyJa0.roa
File:                     kkER23WZlV1jVmibrMpv13kyJa0.roa (raw, json)
Hash identifier:          D+69SCT1WGLWMB+uT5DCrtOiP0h8b0B04FRpmi2gvFo=
Subject key identifier:   92:41:11:DB:75:99:95:5D:63:56:68:9B:AC:CA:6F:D7:79:32:25:AD
Certificate issuer:       /CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Certificate serial:       016B3C89
Authority key identifier: 80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/kkER23WZlV1jVmibrMpv13kyJa0.roa
Signing time:             Sat 01 Jan 2022 04:57:59 +0000
ROA not before:           Sat 01 Jan 2022 04:57:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197520
IP address blocks:        193.151.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23805065 (0x16b3c89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
        Validity
            Not Before: Jan  1 04:57:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=924111db7599955d6356689bacca6fd7793225ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:be:c0:19:57:e7:c3:91:88:a2:7b:cd:35:48:
                    9f:a7:c5:b9:9d:24:8d:0a:bd:98:d7:72:11:78:ea:
                    9f:80:b1:3c:33:67:93:ac:15:ad:a1:32:e5:3e:a7:
                    19:74:4d:ec:ba:10:68:82:47:c9:05:88:06:c8:26:
                    03:1c:1d:ac:e0:33:99:48:71:97:4d:22:a5:20:36:
                    7d:59:83:f2:41:b2:80:4d:c6:41:99:e1:9c:2f:83:
                    18:57:9a:2d:54:05:2f:f1:19:c3:2a:23:60:ba:5f:
                    1c:c0:b1:9c:37:87:8f:10:d9:f3:d9:9f:45:55:df:
                    b9:31:b1:d1:c3:bc:07:77:cc:85:75:dc:58:c7:8f:
                    28:55:6f:59:6d:cb:9f:47:d1:88:13:8f:1a:e7:0b:
                    2b:6d:80:10:fd:aa:f1:fe:e8:13:ef:23:19:fd:b1:
                    42:d2:e7:52:71:28:ec:5e:97:c8:12:bf:45:08:55:
                    29:d5:c9:29:1b:6e:ca:b9:96:9c:b5:ad:82:99:8f:
                    57:c7:a5:d3:de:09:b4:43:f3:5a:b4:d3:c0:1c:cb:
                    59:81:15:9a:5e:eb:35:b2:7f:aa:fa:f9:24:52:74:
                    28:d1:d9:d8:67:d4:a7:cd:f8:b3:bd:40:19:b9:11:
                    85:58:d2:4c:3a:3b:14:27:be:1d:a8:08:bd:ef:30:
                    0c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:41:11:DB:75:99:95:5D:63:56:68:9B:AC:CA:6F:D7:79:32:25:AD
            X509v3 Authority Key Identifier:
                keyid:80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/kkER23WZlV1jVmibrMpv13kyJa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.151.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:bc:48:b8:d4:2a:4c:78:7f:e1:a0:cb:34:94:3b:ed:fa:7d:
         65:60:b7:6c:2f:d0:5d:27:b6:4c:d1:cc:eb:ad:11:f6:1c:b3:
         2f:78:ac:db:aa:88:82:94:58:a5:13:40:2a:f4:c7:b2:79:3c:
         fa:d9:72:74:a4:82:f4:84:0c:fd:08:72:e9:9f:fb:b7:66:6e:
         fd:d9:f3:17:a5:cc:54:0b:bf:19:ce:27:7f:44:4d:15:3c:13:
         70:e9:14:6f:ab:8d:42:49:9e:15:2f:af:56:6f:67:2d:47:7b:
         3c:85:b3:e7:3e:f8:3d:34:0a:43:57:da:7d:7e:2f:ed:f2:c3:
         97:6f:6b:1a:08:39:02:c4:c5:3f:80:4e:66:a1:01:ba:b5:a9:
         7e:cb:0d:90:85:fb:cb:52:2a:1b:14:39:ae:49:ef:00:cb:25:
         17:35:b6:cc:89:2e:0a:7d:27:4e:33:f4:c9:fa:83:9e:91:e9:
         ed:a4:07:c4:13:b0:4f:d0:7e:a4:c5:7c:a1:ab:5c:48:47:4a:
         eb:eb:9c:7e:20:c7:b8:54:da:43:da:f2:c8:50:48:bb:95:a5:
         85:be:81:84:e4:b3:95:f7:60:6d:e2:6f:d4:3c:57:9f:86:57:
         3f:ed:4b:30:cc:23:0b:c0:4d:61:e9:02:90:2f:ad:a7:14:b1:
         5a:8d:98:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org