Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/iT0yyGamTovGFruB3B0_YUJDDK0.roa
File:                     iT0yyGamTovGFruB3B0_YUJDDK0.roa (raw, json)
Hash identifier:          hrhpZsvOoOAMFnHn8bKNmP6maS1b67I1+3mbzjezG9M=
Subject key identifier:   89:3D:32:C8:66:A6:4E:8B:C6:16:BB:81:DC:1D:3F:61:42:43:0C:AD
Certificate issuer:       /CN=e72861d1c9e90835ea9416f0593d063d149a53e2
Certificate serial:       ECDFC9
Authority key identifier: E7:28:61:D1:C9:E9:08:35:EA:94:16:F0:59:3D:06:3D:14:9A:53:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5yhh0cnpCDXqlBbwWT0GPRSaU-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/iT0yyGamTovGFruB3B0_YUJDDK0.roa
Signing time:             Sat 01 Jan 2022 07:57:27 +0000
ROA not before:           Sat 01 Jan 2022 07:57:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        193.162.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15523785 (0xecdfc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e72861d1c9e90835ea9416f0593d063d149a53e2
        Validity
            Not Before: Jan  1 07:57:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=893d32c866a64e8bc616bb81dc1d3f6142430cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2e:71:45:ba:8c:66:25:d0:25:d5:b1:63:93:
                    18:2b:f9:98:e1:33:44:23:51:77:a9:53:0e:fc:81:
                    28:3b:16:e9:db:f0:df:49:f1:9f:93:6f:90:03:6e:
                    e2:0c:43:1e:5d:8c:48:20:60:4f:fa:f3:e0:f5:c3:
                    22:81:d5:a0:23:3a:b2:02:54:d8:1a:f6:78:25:8c:
                    48:96:7c:fe:2f:28:87:29:2c:a4:9d:98:4f:8e:81:
                    17:1e:99:43:5f:eb:ca:80:86:01:23:fc:53:31:bb:
                    02:be:31:58:58:73:48:42:db:62:8b:0a:e0:09:6e:
                    89:6f:93:94:ff:8e:6a:9d:58:fa:12:ff:42:b6:ab:
                    e4:0d:1c:5a:91:33:a8:a3:cb:2e:ff:04:5b:3b:f0:
                    e8:d3:97:3f:69:25:5e:7d:34:26:ef:c9:e9:ea:bd:
                    59:73:68:a3:e1:e2:0e:82:03:27:7b:4c:43:22:da:
                    67:9d:1a:03:16:4e:09:93:63:7e:15:86:54:b2:6a:
                    b6:1c:c5:6e:33:28:d0:bb:aa:da:f9:98:0c:bb:06:
                    01:ab:c8:6e:90:29:a5:19:0d:48:b6:ac:26:0f:e4:
                    46:60:26:7a:c6:8a:00:bf:94:3c:f1:12:4b:d7:f2:
                    94:96:f4:ee:68:37:19:78:b8:38:d8:c7:50:5f:3d:
                    73:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3D:32:C8:66:A6:4E:8B:C6:16:BB:81:DC:1D:3F:61:42:43:0C:AD
            X509v3 Authority Key Identifier:
                keyid:E7:28:61:D1:C9:E9:08:35:EA:94:16:F0:59:3D:06:3D:14:9A:53:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yhh0cnpCDXqlBbwWT0GPRSaU-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/iT0yyGamTovGFruB3B0_YUJDDK0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/5yhh0cnpCDXqlBbwWT0GPRSaU-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.162.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:4b:00:da:a4:d7:e6:55:0f:02:24:4e:cd:a7:01:5e:2f:74:
         48:d0:46:72:4d:ac:be:e6:fd:68:08:10:27:9c:29:03:1c:0d:
         23:6e:2c:3d:50:86:57:3e:b4:48:f9:b5:1e:ea:dc:29:ba:de:
         7b:b0:e9:ae:9f:38:2b:ad:fe:e6:47:60:1c:7c:0e:b4:3c:06:
         3b:4d:11:bc:ec:7f:cc:57:46:48:a6:a6:4d:1b:1f:c7:6c:df:
         42:7a:89:46:02:86:18:0d:39:7e:90:dd:31:18:3f:f3:d1:78:
         e9:db:94:58:cc:1b:82:ec:cf:19:19:3e:3e:d5:5d:fd:e1:5a:
         87:bf:86:47:83:c9:a7:b4:4b:d2:a5:3e:a2:86:93:39:5c:b6:
         fc:7b:b0:2d:1b:db:88:51:f3:4f:89:34:11:24:65:08:ab:ce:
         4b:85:53:e6:8a:f0:e4:b1:23:c2:51:ab:53:32:d5:24:4e:cc:
         42:69:c0:63:75:cd:bf:58:88:ed:ad:64:17:8b:17:5c:22:df:
         e2:e2:c8:c0:6d:f1:0a:c7:ff:06:1a:a8:23:a3:99:0d:a3:74:
         53:b9:ff:57:b6:23:c7:42:ba:39:c1:ac:c9:09:ef:76:cf:07:
         c8:f6:14:17:b6:55:f6:ae:2d:f3:35:6c:9f:11:f0:e6:4d:3e:
         f6:8a:71:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:05 2024 by rpki-client on console-ams.rpki-client.org