Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/4L7BbzOVwBRHJI9BLkBxajnwkdw.roa
File:                     4L7BbzOVwBRHJI9BLkBxajnwkdw.roa (raw, json)
Hash identifier:          yHV4B7yVnTxkolajSp2eDQ7NSKGrGjENccT1R2rnD6Y=
Subject key identifier:   E0:BE:C1:6F:33:95:C0:14:47:24:8F:41:2E:40:71:6A:39:F0:91:DC
Certificate issuer:       /CN=2aa694f440fb760212b92056e0eb5b31d5150ffb
Certificate serial:       072C8B9D
Authority key identifier: 2A:A6:94:F4:40:FB:76:02:12:B9:20:56:E0:EB:5B:31:D5:15:0F:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqaU9ED7dgISuSBW4OtbMdUVD_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/4L7BbzOVwBRHJI9BLkBxajnwkdw.roa
Signing time:             Wed 19 Jan 2022 21:53:03 +0000
ROA not before:           Wed 19 Jan 2022 21:53:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209730
IP address blocks:        193.26.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120359837 (0x72c8b9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa694f440fb760212b92056e0eb5b31d5150ffb
        Validity
            Not Before: Jan 19 21:53:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e0bec16f3395c01447248f412e40716a39f091dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9a:1e:49:84:c0:3c:c0:3c:b1:c7:be:6e:c4:
                    19:d5:4f:d0:1c:6e:8c:16:db:e1:76:f6:e4:5f:7d:
                    39:e6:60:af:f9:73:a1:56:fc:8f:f3:95:66:b5:d8:
                    57:78:18:a1:47:31:f1:3e:f0:b7:19:75:fb:20:ad:
                    96:69:d2:9b:ac:41:99:d4:33:50:bd:e6:14:10:72:
                    13:7a:09:da:1f:c5:19:44:64:33:09:9b:84:36:bc:
                    98:3c:1d:10:35:44:69:c0:c8:cf:07:74:dc:6e:31:
                    ab:07:07:e5:09:54:69:0b:2f:b8:e8:93:92:f1:f3:
                    74:81:aa:4a:41:22:db:23:84:9b:f2:81:9b:8f:e9:
                    f7:e9:de:e5:29:c4:3c:29:bb:77:8e:f5:eb:2f:6b:
                    de:0b:2c:d9:05:09:1b:e2:a7:11:d8:c1:d1:9b:dc:
                    d3:77:85:7e:98:a3:8b:6d:43:14:31:3d:c5:26:5c:
                    59:13:53:64:b3:b4:23:a3:9e:0c:5a:02:9b:18:1f:
                    33:ab:39:9b:3d:44:70:46:e6:62:fa:25:01:d1:f2:
                    fe:22:23:39:61:46:83:13:e6:8a:0e:09:bb:c6:e5:
                    45:61:e6:e0:b6:ac:1c:1f:49:fe:e4:98:f0:b4:cc:
                    8c:0a:bc:a8:d3:f3:e8:3f:d2:ec:31:20:68:50:02:
                    d8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BE:C1:6F:33:95:C0:14:47:24:8F:41:2E:40:71:6A:39:F0:91:DC
            X509v3 Authority Key Identifier:
                keyid:2A:A6:94:F4:40:FB:76:02:12:B9:20:56:E0:EB:5B:31:D5:15:0F:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqaU9ED7dgISuSBW4OtbMdUVD_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/4L7BbzOVwBRHJI9BLkBxajnwkdw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/KqaU9ED7dgISuSBW4OtbMdUVD_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.26.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:bd:f6:69:6b:cb:d7:99:db:14:41:54:a1:2a:42:b2:29:cb:
         fb:de:31:bd:1c:e4:73:9d:d6:5e:06:b4:4a:ae:93:b1:69:bb:
         46:9b:66:e6:03:14:16:40:fe:e9:19:26:37:8e:26:b9:06:46:
         10:3e:ce:14:ef:50:ff:de:03:a0:b3:ea:b9:3b:3d:74:82:63:
         84:b6:2b:cf:68:b6:4b:e8:4a:b1:c4:72:d6:b8:f0:81:04:e9:
         3a:8e:47:de:a8:32:f8:15:d3:98:1e:40:ff:e8:07:a0:8d:df:
         c2:07:42:98:3c:a9:30:a0:38:08:9c:3f:f0:ca:3a:f1:e9:1e:
         83:d7:5d:3b:3a:0a:ae:64:1c:f7:70:fa:d3:e7:e5:1c:60:83:
         88:09:69:4f:7b:66:8c:a5:0d:a3:f8:63:b2:8a:cb:49:e7:1d:
         fa:38:f9:dc:a1:6e:ba:8e:60:25:68:9f:96:96:c7:22:6e:ae:
         ee:eb:60:f6:bf:da:7c:a6:7f:9a:97:cf:ab:80:66:ba:30:2d:
         a9:2d:f8:5e:d7:5d:84:bc:ce:11:6f:37:62:60:d2:b7:7d:29:
         e2:97:eb:81:4d:23:65:d9:66:e2:11:0b:7c:e6:a3:cf:47:e8:
         dc:e9:da:75:6f:d6:89:27:1f:d0:6e:b4:2e:72:7b:c6:4d:d7:
         88:89:9f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:09 2024 by rpki-client on console-ams.rpki-client.org