Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8ecf-354a-4726-b9f0-f707008f4f32/1/6k47bmTYCsNlHXPNR5tEJ2xBW_g.roa
File:                     6k47bmTYCsNlHXPNR5tEJ2xBW_g.roa (raw, json)
Hash identifier:          nLGmkB6cET0f7zZ+7yzfCP5cqCq21kCcBvLgSfloPDo=
Subject key identifier:   EA:4E:3B:6E:64:D8:0A:C3:65:1D:73:CD:47:9B:44:27:6C:41:5B:F8
Certificate issuer:       /CN=fb3d0aad7f5bca77cf928fb2b29754bd8c2330e1
Certificate serial:       02EF3AA0
Authority key identifier: FB:3D:0A:AD:7F:5B:CA:77:CF:92:8F:B2:B2:97:54:BD:8C:23:30:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-z0KrX9bynfPko-yspdUvYwjMOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8ecf-354a-4726-b9f0-f707008f4f32/1/6k47bmTYCsNlHXPNR5tEJ2xBW_g.roa
Signing time:             Sat 01 Jan 2022 07:58:51 +0000
ROA not before:           Sat 01 Jan 2022 07:58:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200738
IP address blocks:        193.26.148.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49232544 (0x2ef3aa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb3d0aad7f5bca77cf928fb2b29754bd8c2330e1
        Validity
            Not Before: Jan  1 07:58:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ea4e3b6e64d80ac3651d73cd479b44276c415bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:43:e4:25:58:c3:7c:73:17:99:18:4c:69:8c:
                    a5:2a:af:3a:d5:3b:ed:3d:fa:69:72:b9:0d:46:e2:
                    17:b9:5c:06:19:ff:04:ee:f7:22:f1:a1:6e:87:8f:
                    30:80:04:b5:8b:04:a6:e3:8e:62:cc:4f:b9:f5:85:
                    f3:9d:50:39:e8:8e:a7:36:32:f5:88:51:35:98:c9:
                    59:db:ee:82:95:c7:10:21:b8:5e:b9:d4:a9:8c:cb:
                    de:22:5b:28:66:54:e7:63:8e:d5:af:ee:b5:47:24:
                    9d:81:04:07:4e:21:45:6e:fd:5c:d5:51:f3:8b:22:
                    bf:31:6c:a7:62:85:bd:4c:0b:61:45:8d:cd:e8:c9:
                    2b:ba:f5:27:00:6a:0d:96:b3:c3:6a:04:7a:c9:b3:
                    7b:3a:ec:a1:81:44:e9:f5:f5:83:5d:53:a4:85:e0:
                    a2:90:7a:a5:e9:7f:92:f9:aa:b7:15:f0:f3:4c:06:
                    90:b1:74:69:fe:9a:54:32:4c:93:8f:0f:1f:03:9b:
                    6b:dc:99:77:a5:69:61:a8:70:10:1a:6e:f9:e4:b4:
                    52:bc:c9:ee:3e:fe:d8:05:cc:66:81:4f:dc:55:52:
                    d8:9f:79:3f:2c:91:37:0c:4f:8c:9f:1b:2d:88:0e:
                    4c:68:f0:ad:45:50:08:b3:0d:7d:b5:49:aa:af:25:
                    83:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4E:3B:6E:64:D8:0A:C3:65:1D:73:CD:47:9B:44:27:6C:41:5B:F8
            X509v3 Authority Key Identifier:
                keyid:FB:3D:0A:AD:7F:5B:CA:77:CF:92:8F:B2:B2:97:54:BD:8C:23:30:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z0KrX9bynfPko-yspdUvYwjMOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8ecf-354a-4726-b9f0-f707008f4f32/1/6k47bmTYCsNlHXPNR5tEJ2xBW_g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8ecf-354a-4726-b9f0-f707008f4f32/1/1-z0KrX9bynfPko-yspdUvYwjMOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.26.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:41:18:d5:fc:14:ee:74:ee:55:22:d1:6c:8c:22:f8:d9:a2:
         34:fc:61:7a:9a:c6:0d:75:a1:6d:27:fb:ff:86:cb:d5:a6:f9:
         f1:73:97:c9:07:fe:83:17:b2:2d:12:94:cd:e9:43:39:fe:2f:
         6d:f6:18:e9:36:1b:e4:2f:67:b6:7f:82:c0:eb:0d:ee:4f:31:
         2d:c1:7c:f5:21:76:23:5e:2a:a4:34:2d:b0:24:bd:6e:3b:50:
         e1:53:94:ae:cc:fa:52:ba:08:08:86:19:5e:ae:f6:2e:65:f2:
         96:31:70:e4:5e:27:d8:37:23:67:a8:56:c1:4c:17:8b:bf:4a:
         d6:ae:31:1e:f6:17:3c:7f:03:30:c2:e8:7a:68:ca:bf:ee:74:
         53:52:07:09:56:3d:41:ae:7b:a0:37:d1:5c:d5:23:3e:7d:d1:
         4c:ae:8f:92:fb:67:a5:8e:c6:fb:72:d1:8b:a7:32:e5:a3:9b:
         c7:2b:98:8a:1c:2d:21:ef:02:3b:3b:2d:18:a3:29:86:ef:a5:
         4f:a5:1f:53:f7:d9:3f:9f:ee:24:be:d6:22:e3:81:9d:ca:e0:
         3a:88:62:10:ba:cb:c8:61:b4:1c:11:b0:78:c5:39:8d:78:3a:
         1f:2d:1b:79:66:16:11:bb:ef:e6:ab:0a:79:63:76:2d:0b:a2:
         e2:dc:dd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:18 2024 by rpki-client on console-ams.rpki-client.org