Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4b3bcd-5082-4b67-ac90-a3604ee68e3e/1/R2E_FuA1N0HbGR3BCfMcI7W-HLg.roa
File:                     R2E_FuA1N0HbGR3BCfMcI7W-HLg.roa (raw, json)
Hash identifier:          KEaYcT5Zago5rGV3UWZJvwXUfh9cl1TFmEk8E2KXeRk=
Subject key identifier:   47:61:3F:16:E0:35:37:41:DB:19:1D:C1:09:F3:1C:23:B5:BE:1C:B8
Certificate issuer:       /CN=ca99b3e8ba82d0d48f170c6ffd8e9daa3aa223d4
Certificate serial:       061EE275
Authority key identifier: CA:99:B3:E8:BA:82:D0:D4:8F:17:0C:6F:FD:8E:9D:AA:3A:A2:23:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ypmz6LqC0NSPFwxv_Y6dqjqiI9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/4b3bcd-5082-4b67-ac90-a3604ee68e3e/1/R2E_FuA1N0HbGR3BCfMcI7W-HLg.roa
Signing time:             Sat 01 Jan 2022 10:54:19 +0000
ROA not before:           Sat 01 Jan 2022 10:54:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199524
IP address blocks:        193.148.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102687349 (0x61ee275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca99b3e8ba82d0d48f170c6ffd8e9daa3aa223d4
        Validity
            Not Before: Jan  1 10:54:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=47613f16e0353741db191dc109f31c23b5be1cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:81:0f:d7:f5:47:96:ca:4d:ef:25:52:61:d2:
                    2a:5c:6a:bf:e4:fb:d4:60:fc:4b:22:78:8c:2a:a4:
                    c0:24:69:cf:80:a0:0e:b1:07:59:8f:00:0d:88:16:
                    83:ae:02:36:77:3c:03:4b:a8:2e:bb:4e:c9:65:85:
                    bf:60:14:3f:94:53:43:58:81:be:5f:1b:c4:1a:d6:
                    d4:0c:5f:b3:07:fe:f6:0b:b0:a8:40:c8:b2:75:6b:
                    5c:51:db:01:fd:52:9b:dd:d4:f4:b6:d4:99:81:be:
                    9d:7d:a0:2c:c2:16:0f:b7:79:9f:0c:88:86:71:9c:
                    74:3d:56:a0:12:7b:1c:7a:76:ea:4d:fe:3b:71:21:
                    5a:56:4f:c6:10:d5:16:de:18:cf:ce:00:01:b0:10:
                    16:e2:e2:f4:3c:13:da:4a:dc:90:05:73:fe:41:61:
                    f7:92:13:aa:9e:3d:5f:c7:73:82:21:a9:3f:08:f0:
                    7c:32:d4:2c:99:42:6f:d7:4f:52:2e:1f:82:39:69:
                    d8:8a:ee:6d:91:32:bb:6f:ac:7f:e3:21:0a:a1:7f:
                    18:e1:3f:18:4c:fb:79:2e:04:3b:b3:27:0b:cf:46:
                    aa:ac:dd:96:0c:7d:a2:3d:d3:06:1f:d1:de:77:8b:
                    bd:4d:18:9a:68:bf:9d:12:68:58:79:fb:24:32:d6:
                    83:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:61:3F:16:E0:35:37:41:DB:19:1D:C1:09:F3:1C:23:B5:BE:1C:B8
            X509v3 Authority Key Identifier:
                keyid:CA:99:B3:E8:BA:82:D0:D4:8F:17:0C:6F:FD:8E:9D:AA:3A:A2:23:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypmz6LqC0NSPFwxv_Y6dqjqiI9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4b3bcd-5082-4b67-ac90-a3604ee68e3e/1/R2E_FuA1N0HbGR3BCfMcI7W-HLg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4b3bcd-5082-4b67-ac90-a3604ee68e3e/1/ypmz6LqC0NSPFwxv_Y6dqjqiI9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.148.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:aa:96:cb:aa:01:73:9e:cc:e6:70:85:97:7d:03:1b:09:37:
         84:55:54:61:73:48:35:fd:9c:a3:67:9b:1b:51:c2:92:d1:52:
         b8:ed:2c:d6:2a:bb:39:3f:d3:6d:10:2f:5a:85:f0:a7:27:9e:
         ac:0e:9d:7c:c2:8f:f7:f0:50:60:00:38:79:2f:a0:e5:ef:85:
         b9:11:9c:9a:70:82:c1:6c:a7:d7:5f:05:9f:92:91:8d:86:74:
         53:15:ab:24:c8:19:dc:79:8d:1e:20:ff:30:6b:c7:ee:5b:3f:
         04:b4:73:8b:e1:63:b3:18:f0:1d:68:80:8e:3b:4c:2c:35:09:
         87:e2:16:5b:15:e9:64:96:0a:9e:bc:52:2c:df:e6:67:05:ac:
         bb:2c:1c:50:05:6f:1f:3f:d5:d4:15:c6:55:6a:93:c3:29:05:
         a1:2e:69:99:2d:3d:fd:1f:3d:37:72:4d:a0:cf:06:b6:f6:75:
         9b:3c:c4:09:c8:1e:d7:53:3a:a2:c9:27:b8:78:46:85:81:85:
         89:3d:16:e9:a9:13:a5:4b:2c:a4:04:3d:44:83:27:51:e7:0a:
         c1:1e:42:d2:6a:fe:d5:4c:a7:b5:28:63:81:9d:ff:08:cf:84:
         5f:68:58:42:0a:48:1f:6d:79:6c:fe:ab:d5:e4:05:4e:22:d4:
         23:3c:1f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:45 2024 by rpki-client on console-fra.rpki-client.org