Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/caf622-ee11-458d-b81d-15ed1ea93e25/1/WNEC8XdosatR6QJ3HBWwtMPKx2g.roa
File:                     WNEC8XdosatR6QJ3HBWwtMPKx2g.roa (raw, json)
Hash identifier:          jtPm/wo+xGv0pot8Mwq1cXuLMxqu43OYDpRERhhfHK8=
Subject key identifier:   58:D1:02:F1:77:68:B1:AB:51:E9:02:77:1C:15:B0:B4:C3:CA:C7:68
Certificate issuer:       /CN=ceae1021ef5d6d72ca68f8ca5c159f4a08a74366
Certificate serial:       021F428F
Authority key identifier: CE:AE:10:21:EF:5D:6D:72:CA:68:F8:CA:5C:15:9F:4A:08:A7:43:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zq4QIe9dbXLKaPjKXBWfSginQ2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/caf622-ee11-458d-b81d-15ed1ea93e25/1/WNEC8XdosatR6QJ3HBWwtMPKx2g.roa
Signing time:             Sat 01 Jan 2022 07:56:59 +0000
ROA not before:           Sat 01 Jan 2022 07:56:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        193.32.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35603087 (0x21f428f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ceae1021ef5d6d72ca68f8ca5c159f4a08a74366
        Validity
            Not Before: Jan  1 07:56:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=58d102f17768b1ab51e902771c15b0b4c3cac768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f7:c7:7d:d2:22:61:e6:ee:93:a2:f6:56:55:
                    01:31:57:97:61:73:32:43:1d:df:2a:7d:ac:ef:a3:
                    a6:91:e4:2e:b9:b8:e8:36:d2:d6:be:0a:f2:42:46:
                    14:02:a5:24:2e:28:fc:89:c3:17:61:a8:76:18:8c:
                    2e:d1:db:b2:4f:3e:2a:5f:d4:4c:1f:61:9d:04:0c:
                    03:1a:6b:1d:6e:1e:c7:5c:fa:9d:86:40:06:e6:f0:
                    58:b1:15:4c:03:99:44:fb:74:b9:7a:ce:c3:c9:9a:
                    d8:f0:1a:39:e2:5d:56:2f:55:38:b8:c3:bc:8d:c4:
                    91:9a:c3:c2:fc:f9:5e:95:bf:80:23:df:77:a9:65:
                    47:d1:63:8f:bb:8a:05:35:77:e2:f2:d8:35:a8:1c:
                    63:28:e8:3e:18:c9:e2:57:67:fd:10:c6:4a:72:80:
                    b6:53:9e:2d:54:6e:34:13:54:d8:a8:5f:3e:82:9c:
                    a9:36:68:80:14:7e:22:52:64:40:7d:ea:ea:c6:84:
                    51:12:94:f2:d9:45:fd:ff:bc:b5:d6:00:64:d1:00:
                    fc:a4:5b:13:4d:d3:79:d7:6b:b0:0f:c1:fa:19:13:
                    d0:a9:96:0c:12:52:f8:c5:ba:28:b4:ea:ef:6d:3b:
                    59:8c:b9:3f:33:6e:7e:ac:b7:ac:ea:78:e9:b0:f1:
                    45:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D1:02:F1:77:68:B1:AB:51:E9:02:77:1C:15:B0:B4:C3:CA:C7:68
            X509v3 Authority Key Identifier:
                keyid:CE:AE:10:21:EF:5D:6D:72:CA:68:F8:CA:5C:15:9F:4A:08:A7:43:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zq4QIe9dbXLKaPjKXBWfSginQ2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/caf622-ee11-458d-b81d-15ed1ea93e25/1/WNEC8XdosatR6QJ3HBWwtMPKx2g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/caf622-ee11-458d-b81d-15ed1ea93e25/1/zq4QIe9dbXLKaPjKXBWfSginQ2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.32.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:b7:65:21:b4:ac:40:8f:90:82:88:7d:66:f0:4a:fe:21:62:
         98:6a:7f:14:de:3e:60:f4:7a:fc:d4:82:9e:3b:19:28:f9:6c:
         21:74:cc:ac:65:e6:3b:07:68:fe:7d:b6:2f:6e:5c:62:7b:75:
         0f:e6:10:dd:2a:b0:66:d1:e6:10:ca:b7:cd:8a:7e:3d:a2:8b:
         e2:a7:44:f5:b4:2b:31:64:a0:a2:bd:e9:9f:90:47:6c:03:ae:
         26:2a:75:5c:9b:e0:fe:61:11:99:c5:63:18:79:bf:2b:f6:0c:
         d4:6f:8e:51:c4:45:37:53:49:c1:0e:13:85:ff:b3:e9:90:9d:
         ee:e9:53:d9:ab:f8:ae:a9:86:bc:24:aa:34:c0:37:7c:4e:c0:
         e9:b7:29:56:1c:43:c0:b7:5d:2e:07:c4:cf:aa:10:10:b6:e0:
         05:8d:07:6a:0e:2b:8d:cc:65:0d:db:89:9a:44:6a:ca:2f:35:
         01:62:98:88:f8:11:0c:ae:58:a1:c9:a1:47:26:00:f8:ee:cb:
         45:c7:5e:bb:27:eb:fa:e6:22:8f:d0:0e:72:6b:90:2e:2f:71:
         14:de:7c:e0:5a:ea:02:2f:46:83:8b:56:3c:c8:d0:df:0a:81:
         33:95:c6:e3:28:52:07:3b:11:08:d2:99:5a:50:49:0b:00:dd:
         60:d8:db:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:12 2024 by rpki-client on console-ams.rpki-client.org