Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/mn626IlxQE9nC4LVPsg27a-4KIA.roa
File:                     mn626IlxQE9nC4LVPsg27a-4KIA.roa (raw, json)
Hash identifier:          P3mcmjU5or4x1zDlc1FfX84gcETO2LxetG6Xf+bi6+A=
Subject key identifier:   9A:7E:B6:E8:89:71:40:4F:67:0B:82:D5:3E:C8:36:ED:AF:B8:28:80
Certificate issuer:       /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial:       35574875
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/mn626IlxQE9nC4LVPsg27a-4KIA.roa
Signing time:             Mon 27 Jun 2022 18:03:32 +0000
ROA not before:           Mon 27 Jun 2022 18:03:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207459
IP address blocks:        193.106.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894912629 (0x35574875)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
        Validity
            Not Before: Jun 27 18:03:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9a7eb6e88971404f670b82d53ec836edafb82880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3e:39:9f:91:2f:62:bd:cb:90:b9:04:75:a6:
                    10:5e:69:18:0f:a0:f6:c3:57:87:bb:85:26:e6:64:
                    fe:4f:a3:b2:91:62:10:be:01:99:c5:e5:fb:5b:95:
                    ab:25:f4:83:8e:2e:80:b7:5c:9d:87:98:59:26:04:
                    74:1a:08:d7:13:56:23:9e:96:38:9a:eb:e2:74:7d:
                    23:ab:67:da:11:dc:88:58:92:a4:80:8d:5c:e3:41:
                    73:d2:76:54:0b:50:c7:62:fe:99:f1:ba:7d:94:8a:
                    b7:c6:56:5b:a2:97:90:fb:87:16:36:00:76:ea:be:
                    e0:50:9e:56:52:5c:02:d8:dc:a4:cd:36:65:c9:8e:
                    ce:b8:a5:d0:16:06:07:e9:cb:79:d5:6c:b3:6e:3e:
                    71:d1:92:ed:13:0a:78:c2:f0:12:be:ea:53:4a:23:
                    eb:3b:21:a4:9f:82:b7:f8:fa:68:e1:f6:f1:dc:ef:
                    f9:6c:70:a8:d6:43:83:52:a5:66:3d:50:0c:0b:81:
                    43:5b:1f:0d:90:df:cd:78:41:43:7f:0c:f7:9e:30:
                    4e:77:61:6f:d6:79:85:ec:5c:6d:c6:29:80:1c:2f:
                    84:b8:16:aa:a1:96:d2:ae:e4:9b:f3:d4:18:74:77:
                    e8:d8:5a:be:48:41:fa:23:b6:dd:69:21:2e:0a:cb:
                    6f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7E:B6:E8:89:71:40:4F:67:0B:82:D5:3E:C8:36:ED:AF:B8:28:80
            X509v3 Authority Key Identifier:
                keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/mn626IlxQE9nC4LVPsg27a-4KIA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.106.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:30:72:9c:80:1e:ac:68:80:7c:96:90:65:60:1f:85:15:04:
         f7:45:f4:4a:7e:87:4b:b9:1b:e2:38:cf:bc:e3:11:4f:0c:33:
         a3:15:5d:ba:2b:7d:d9:52:33:c0:1d:c7:57:e2:4e:76:28:ea:
         f9:3c:76:a9:6b:b3:90:44:f1:55:dd:89:aa:f0:61:5f:bd:37:
         04:ea:8d:7c:af:24:e0:a9:d6:67:f4:2b:36:8d:8d:42:63:12:
         60:8d:e7:99:86:70:2f:ab:72:80:d1:96:94:e5:73:14:b6:56:
         47:39:3f:74:03:54:cc:71:31:3e:18:95:52:0b:09:0d:3e:31:
         ce:80:2a:c6:0c:8b:f4:d4:8e:8c:5d:f2:50:9e:26:88:74:b8:
         ef:a4:a4:34:e4:5d:1c:39:a6:a2:c6:6f:54:16:55:a9:9e:5d:
         71:59:a8:54:09:21:8f:60:43:a7:6f:7b:d2:b4:7f:ec:5a:9a:
         91:06:a5:38:cb:5c:90:98:e4:1f:34:04:b4:b8:ea:cb:e5:43:
         55:2b:05:c5:7e:90:e0:ac:1f:cb:9f:66:37:97:85:c2:f3:e1:
         c6:e2:08:40:f2:52:d1:ca:84:f8:bb:81:e4:2a:eb:85:7a:f9:
         f4:d5:cb:35:f8:27:d0:eb:1b:14:e6:ad:cc:bd:58:76:2a:07:
         5a:bb:2e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:00 2024 by rpki-client on console-fra.rpki-client.org