Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3ac039-18c2-424c-ae59-374c9b7ad1e7/1/mYT5y1S6cGpYOPO1VEvfnJfeSHQ.roa
File:                     mYT5y1S6cGpYOPO1VEvfnJfeSHQ.roa (raw, json)
Hash identifier:          r9JLeRaJFUd0hzeFnw7yFQphj7VIISD+gPFEn4u3Zn4=
Subject key identifier:   99:84:F9:CB:54:BA:70:6A:58:38:F3:B5:54:4B:DF:9C:97:DE:48:74
Certificate issuer:       /CN=2e4dd492aba37802f99020379b0daa49f101b7da
Certificate serial:       01835F3FF563CD3CF0B238A54E0CC4ACD479
Authority key identifier: 2E:4D:D4:92:AB:A3:78:02:F9:90:20:37:9B:0D:AA:49:F1:01:B7:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lk3UkqujeAL5kCA3mw2qSfEBt9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/3ac039-18c2-424c-ae59-374c9b7ad1e7/1/mYT5y1S6cGpYOPO1VEvfnJfeSHQ.roa
Signing time:             Wed 21 Sep 2022 08:52:50 +0000
ROA not before:           Wed 21 Sep 2022 08:52:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3214
IP address blocks:        194.15.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:5f:3f:f5:63:cd:3c:f0:b2:38:a5:4e:0c:c4:ac:d4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e4dd492aba37802f99020379b0daa49f101b7da
        Validity
            Not Before: Sep 21 08:52:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9984f9cb54ba706a5838f3b5544bdf9c97de4874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:63:3e:89:7b:70:5d:7e:d4:9b:51:7f:f8:cd:
                    e1:35:fe:a5:36:e1:86:41:de:1e:11:b0:2b:d1:5b:
                    a2:b4:f3:f2:e0:78:52:14:57:01:de:3f:d1:42:1e:
                    78:da:b2:4f:00:89:d7:d0:9b:2d:82:e8:a9:b6:f5:
                    0f:d1:c6:fa:f4:25:07:2c:a1:72:8e:c7:29:f0:ca:
                    ed:60:6c:88:2a:f1:97:dd:f5:35:64:c5:62:ad:70:
                    5c:1c:f6:19:e6:b5:75:dd:5f:67:ab:73:c3:1b:b7:
                    5b:32:97:f1:01:32:ac:fe:74:37:91:c7:3a:47:e1:
                    7b:69:76:29:bb:e0:e8:d4:13:29:43:a8:ea:e1:5b:
                    4a:f8:68:a2:32:cf:da:cb:b6:a3:a9:30:1e:2c:1e:
                    ec:c2:52:22:fd:10:7d:79:db:af:f8:09:2b:cf:80:
                    80:d8:31:89:2c:aa:b2:a5:d6:7f:a8:1e:64:58:5f:
                    66:45:2f:59:9b:3f:1d:14:d5:50:6d:94:cc:75:d1:
                    47:e2:b7:89:f5:8d:7d:13:c4:13:d8:b7:15:59:24:
                    c5:e7:a5:42:cb:eb:12:2e:65:02:df:52:85:47:d6:
                    0c:48:37:d3:06:3c:7f:8e:37:7d:74:db:3e:40:a1:
                    9b:7b:84:ac:a8:a1:1f:e8:a9:ee:f5:bd:cb:3e:22:
                    4f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:84:F9:CB:54:BA:70:6A:58:38:F3:B5:54:4B:DF:9C:97:DE:48:74
            X509v3 Authority Key Identifier:
                keyid:2E:4D:D4:92:AB:A3:78:02:F9:90:20:37:9B:0D:AA:49:F1:01:B7:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lk3UkqujeAL5kCA3mw2qSfEBt9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3ac039-18c2-424c-ae59-374c9b7ad1e7/1/mYT5y1S6cGpYOPO1VEvfnJfeSHQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3ac039-18c2-424c-ae59-374c9b7ad1e7/1/Lk3UkqujeAL5kCA3mw2qSfEBt9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.15.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:1d:07:e0:b0:db:23:03:cb:7d:cf:8e:9c:21:1f:4d:bc:35:
         74:c2:a8:27:48:7b:8b:40:b7:6f:e5:00:33:80:f0:70:4e:3e:
         af:11:98:e4:4c:2f:a7:57:97:3f:9e:d4:7f:8b:53:fc:48:9d:
         a9:18:3c:86:05:7f:a1:95:87:11:68:7a:45:b7:36:4d:2d:13:
         ee:0d:c2:b9:eb:dc:50:f7:9a:7e:db:47:8b:1e:55:10:ff:0b:
         d2:20:8d:12:76:4a:10:f2:cf:c2:ee:1e:9f:4d:fb:35:b6:e0:
         f4:ed:a1:22:81:0f:98:1a:18:36:80:71:2e:7e:1e:1f:ca:0d:
         f9:ac:cf:79:fe:80:f4:6d:7d:ad:ee:fd:53:b7:44:11:7c:bd:
         7b:46:c0:98:dd:88:85:cb:1e:04:fc:64:2a:2f:2f:66:55:10:
         c5:95:28:b6:0a:57:15:66:24:3b:0a:12:2a:d0:1d:6a:c0:6d:
         2f:f3:6a:d4:3f:b8:e4:83:9e:27:b2:32:6a:ad:17:5d:48:8d:
         12:8d:a5:87:d8:85:5b:39:57:57:1a:f2:a5:68:1d:e6:11:13:
         2d:f8:d5:87:37:f4:49:89:7a:e8:bb:cd:7b:a3:f5:ea:10:86:
         d7:a2:3d:a4:2d:a3:bd:72:89:e6:d8:02:ea:e9:46:5e:0b:ff:
         7f:77:c7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:45 2024 by rpki-client on console-fra.rpki-client.org