Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9ed460-9e50-4f30-bd53-e65ff34fb641/1/xsJCNsf7JGoraKvpf4rwdThbTZk.roa
File:                     xsJCNsf7JGoraKvpf4rwdThbTZk.roa (raw, json)
Hash identifier:          q7zG2attD033VJ0RkiK6QjL9LFmFfFBD+NPmWlFrhrs=
Subject key identifier:   C6:C2:42:36:C7:FB:24:6A:2B:68:AB:E9:7F:8A:F0:75:38:5B:4D:99
Certificate issuer:       /CN=83a7c80bd26fcd29b9055dfde6833adb052454bf
Certificate serial:       F5CB
Authority key identifier: 83:A7:C8:0B:D2:6F:CD:29:B9:05:5D:FD:E6:83:3A:DB:05:24:54:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g6fIC9JvzSm5BV395oM62wUkVL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/9ed460-9e50-4f30-bd53-e65ff34fb641/1/xsJCNsf7JGoraKvpf4rwdThbTZk.roa
Signing time:             Mon 28 Feb 2022 13:21:35 +0000
ROA not before:           Mon 28 Feb 2022 13:21:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42849
IP address blocks:        193.200.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62923 (0xf5cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83a7c80bd26fcd29b9055dfde6833adb052454bf
        Validity
            Not Before: Feb 28 13:21:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c6c24236c7fb246a2b68abe97f8af075385b4d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7a:ad:de:e3:c3:44:b7:a9:04:80:36:b7:46:
                    2e:9f:f3:68:51:02:65:8f:f9:da:24:e6:e4:c0:f6:
                    f0:d5:85:b3:4a:9c:b5:c9:02:fe:30:be:0f:f8:fc:
                    fb:92:85:1c:a1:77:72:4f:9d:b4:d4:89:54:55:1b:
                    f7:be:d3:66:85:e3:44:78:05:07:a5:52:f4:35:a8:
                    2c:ea:87:cd:ff:89:2a:61:8f:b6:06:63:4b:f8:6d:
                    24:63:84:21:c6:fc:c9:c5:2f:d7:c5:e0:0f:4c:20:
                    2d:2e:51:7c:7b:15:7f:dc:5e:cd:9b:24:65:f1:93:
                    8c:28:ae:83:df:0c:44:39:bd:90:95:bb:21:0a:3c:
                    85:ff:96:ab:8e:75:19:2f:d0:d1:16:32:fb:bd:61:
                    01:41:78:d4:a7:ef:a0:ca:53:42:af:f0:57:f6:40:
                    c8:99:a3:05:f3:19:3c:00:5c:b1:17:f6:6b:76:f3:
                    b7:d2:a5:83:cc:7f:02:c3:37:ee:c6:44:fb:16:45:
                    ee:ed:e5:6d:c6:66:57:5d:18:8b:88:dc:de:cf:a4:
                    6e:6d:79:71:d7:96:33:07:8c:42:8c:e4:48:5d:8f:
                    d8:7a:fc:ae:01:3e:fc:95:51:db:ee:af:f1:cd:5f:
                    f8:f0:bf:03:59:2e:c5:e1:3a:e5:7b:f4:50:62:4e:
                    f2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C2:42:36:C7:FB:24:6A:2B:68:AB:E9:7F:8A:F0:75:38:5B:4D:99
            X509v3 Authority Key Identifier:
                keyid:83:A7:C8:0B:D2:6F:CD:29:B9:05:5D:FD:E6:83:3A:DB:05:24:54:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6fIC9JvzSm5BV395oM62wUkVL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9ed460-9e50-4f30-bd53-e65ff34fb641/1/xsJCNsf7JGoraKvpf4rwdThbTZk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9ed460-9e50-4f30-bd53-e65ff34fb641/1/g6fIC9JvzSm5BV395oM62wUkVL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.200.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:af:8a:b3:c6:9b:e6:1d:6b:1b:c1:ca:1e:a6:c7:e8:ab:65:
         f3:38:04:5c:e8:42:b8:fa:6b:3e:4e:81:d4:e9:95:bb:7d:9d:
         99:ec:60:c7:a6:14:a6:28:f3:a2:01:e6:34:9e:31:94:28:dd:
         42:1e:18:4f:d4:b4:56:a6:ad:d1:03:21:6b:ec:99:47:a6:b6:
         ce:56:fd:79:2b:27:a4:ed:0a:09:37:27:9a:31:41:45:d6:52:
         4a:26:98:23:cc:d0:4a:ea:1c:62:fa:f9:e8:f8:49:1d:21:1e:
         75:25:4d:02:2c:3f:dd:77:2a:0d:10:a1:2e:41:ef:43:02:59:
         90:36:8e:64:57:cb:55:27:93:dc:e9:ff:0d:11:05:14:2d:43:
         1f:7e:28:07:74:86:ec:fa:35:79:00:f2:85:73:00:57:2e:d6:
         29:8b:ea:16:25:36:6c:41:8a:8a:93:f7:d2:42:b9:d5:36:a8:
         9a:28:c0:f0:75:86:2e:2a:6d:ea:a6:dc:15:ff:56:69:b7:10:
         10:e9:a0:78:a7:fe:d5:0a:fc:fe:68:cc:80:08:f3:10:f0:53:
         f8:cc:3e:b3:7e:04:85:a2:7f:df:9f:11:92:86:4d:bb:54:dc:
         60:a0:3d:cb:40:f7:77:5c:9c:43:f8:b3:80:8c:32:4d:98:cc:
         98:b0:d2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:16 2024 by rpki-client on console-ams.rpki-client.org