Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/_fCHrZ0TuOWni7doE4vqjfTYeoU.roa
File:                     _fCHrZ0TuOWni7doE4vqjfTYeoU.roa (raw, json)
Hash identifier:          wq7EzVMLPWBCgQL7xe6MW2pJ/ASWByMALg7KJlqEzcM=
Subject key identifier:   FD:F0:87:AD:9D:13:B8:E5:A7:8B:B7:68:13:8B:EA:8D:F4:D8:7A:85
Certificate issuer:       /CN=5b661adcbf6962eeec825c6d4de9b449f02e841d
Certificate serial:       0751343A
Authority key identifier: 5B:66:1A:DC:BF:69:62:EE:EC:82:5C:6D:4D:E9:B4:49:F0:2E:84:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2Ya3L9pYu7sglxtTem0SfAuhB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/_fCHrZ0TuOWni7doE4vqjfTYeoU.roa
Signing time:             Fri 28 Jan 2022 08:49:44 +0000
ROA not before:           Fri 28 Jan 2022 08:49:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        193.57.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122762298 (0x751343a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b661adcbf6962eeec825c6d4de9b449f02e841d
        Validity
            Not Before: Jan 28 08:49:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fdf087ad9d13b8e5a78bb768138bea8df4d87a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:22:11:46:3f:54:1e:f0:da:97:9b:b0:44:ac:
                    0e:5c:62:ba:63:60:be:a4:b5:ba:a7:6b:84:08:ad:
                    80:63:35:d0:a1:bf:ad:6f:a8:86:1c:72:ac:a5:e9:
                    c7:47:ce:20:e2:ce:f0:25:cc:a3:f9:b6:3a:86:f6:
                    b5:b9:33:e7:d5:4d:b0:a3:66:9f:9d:62:6e:1a:45:
                    53:c0:97:6d:d9:3b:87:d7:01:60:fe:eb:a3:74:88:
                    87:57:99:a5:2d:2b:0f:0c:e8:4f:31:5b:93:d2:57:
                    ce:f2:6a:18:58:85:29:99:c4:f2:67:99:10:8b:f5:
                    d3:5d:1c:10:26:40:d1:e6:bc:3c:91:6b:61:f8:df:
                    82:25:ba:9e:44:3c:9e:84:d8:28:6d:2c:8e:1a:41:
                    6e:95:dd:4e:87:c6:58:fa:b6:85:0c:12:63:93:c5:
                    12:ab:94:b7:83:f8:88:a2:ed:72:f7:e3:69:ad:ff:
                    44:9a:bc:4b:cb:e0:e1:5c:a8:0f:b9:f4:fc:d7:26:
                    85:c0:06:4c:44:f5:65:b3:fd:fb:cb:e4:e5:02:2e:
                    d1:04:72:33:a9:2d:8b:94:a0:db:7d:a0:38:a5:4b:
                    cd:c2:b4:3e:11:28:4f:58:e5:3a:0d:68:5e:f2:d4:
                    ec:aa:09:ac:3f:13:7c:4d:07:bd:dc:28:b9:27:12:
                    de:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F0:87:AD:9D:13:B8:E5:A7:8B:B7:68:13:8B:EA:8D:F4:D8:7A:85
            X509v3 Authority Key Identifier:
                keyid:5B:66:1A:DC:BF:69:62:EE:EC:82:5C:6D:4D:E9:B4:49:F0:2E:84:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2Ya3L9pYu7sglxtTem0SfAuhB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/_fCHrZ0TuOWni7doE4vqjfTYeoU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cff31c-25d0-4d02-a696-4bcb629da545/1/W2Ya3L9pYu7sglxtTem0SfAuhB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.57.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:66:f0:62:38:6e:25:b7:4b:20:23:6e:88:d7:f8:a5:82:c4:
         30:e1:8f:12:7e:2c:12:d3:a6:92:59:a9:e9:f5:93:fe:b3:1e:
         7a:af:22:bd:75:4f:76:dc:e9:ec:09:71:18:fc:84:38:7c:03:
         17:0a:08:fe:27:5a:4c:ca:11:b4:e5:3a:f1:d9:84:2f:1c:b0:
         c3:2e:35:c4:70:da:c6:6b:99:f3:93:51:cb:05:a6:f1:1b:9d:
         5e:e1:32:28:19:c8:95:b6:34:6d:78:20:08:56:c5:01:cf:4a:
         41:6c:df:22:46:2f:f6:66:9b:08:b4:d1:00:62:cd:87:2e:18:
         2a:98:05:bf:6f:2a:e2:4f:37:9d:97:94:ac:f8:25:1d:2f:fd:
         94:bc:5d:e0:39:11:68:2d:04:b7:0d:a0:bd:0c:e7:e4:f1:21:
         3b:5c:f4:81:41:25:0c:ad:7e:4a:a0:4f:a8:c7:36:a7:0e:9a:
         a5:15:0e:26:3b:02:7f:fd:4f:f2:9c:92:b1:83:9e:58:1e:0d:
         1e:96:b9:12:48:90:fb:2e:2b:a4:8d:1a:3f:86:e8:1e:1c:5b:
         e3:71:a4:c8:37:16:81:3f:1c:1b:b2:c4:68:6a:ca:f1:d4:cc:
         8b:22:fa:f7:5d:a8:5d:1c:63:b7:38:85:f8:68:55:1e:05:bd:
         7b:6e:c3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:46 2024 by rpki-client on console-fra.rpki-client.org