Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/FoR0S7fMrx4lL41-amSPKMRHN5I.roa
File:                     FoR0S7fMrx4lL41-amSPKMRHN5I.roa (raw, json)
Hash identifier:          ixcdwJzaMKpp12GOk+HGQeMBFz/ktFKan2UGJ9ucZ7E=
Subject key identifier:   16:84:74:4B:B7:CC:AF:1E:25:2F:8D:7E:6A:64:8F:28:C4:47:37:92
Certificate issuer:       /CN=ca54207281f550df30f5f4fc3e09bdcbe2fd22f4
Certificate serial:       0192FDBA
Authority key identifier: CA:54:20:72:81:F5:50:DF:30:F5:F4:FC:3E:09:BD:CB:E2:FD:22:F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/FoR0S7fMrx4lL41-amSPKMRHN5I.roa
Signing time:             Tue 07 Jun 2022 20:02:05 +0000
ROA not before:           Tue 07 Jun 2022 20:02:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204874
IP address blocks:        193.57.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26410426 (0x192fdba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca54207281f550df30f5f4fc3e09bdcbe2fd22f4
        Validity
            Not Before: Jun  7 20:02:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1684744bb7ccaf1e252f8d7e6a648f28c4473792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5f:6a:f1:34:12:b9:8b:71:f0:23:5a:bb:a0:
                    29:c7:a3:aa:28:28:f2:e9:0d:17:01:a4:05:23:13:
                    24:d2:cf:a7:3f:35:36:a8:fc:95:31:a6:2e:9a:09:
                    3e:f3:5d:4b:55:3d:ed:08:59:cb:35:80:77:e0:0a:
                    df:f0:fc:a3:90:a0:22:19:5a:d6:d4:24:5e:2d:3b:
                    35:bb:5f:6b:a4:18:a0:b1:74:0e:8a:ad:d4:f3:72:
                    9d:97:4c:16:1a:ab:b5:18:43:8a:b9:ca:82:76:be:
                    56:28:49:90:b6:83:60:ee:56:d4:93:9a:15:b2:53:
                    06:cd:7c:67:c0:ca:ab:b6:c0:c1:c9:55:96:07:20:
                    f1:4c:c9:ac:d7:f3:cb:50:2b:c7:79:fc:0e:e4:aa:
                    f0:db:fc:96:6d:a5:ce:6b:2b:7d:79:b4:e1:8f:37:
                    de:5e:60:82:dc:74:0c:bd:8e:e5:4f:7a:66:4a:05:
                    fd:e9:5d:e0:b7:50:f1:30:8a:ce:11:a9:73:3e:99:
                    4f:5a:cb:5d:96:64:fa:a1:07:8f:f4:59:1b:c9:b0:
                    f7:c2:78:3d:a7:bc:fe:52:80:d8:49:ee:bd:02:ba:
                    1d:16:3a:f3:5d:2f:74:45:09:43:d2:a0:38:76:52:
                    2d:94:7c:e0:ae:95:4b:cf:a8:91:de:82:92:73:8b:
                    8c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:84:74:4B:B7:CC:AF:1E:25:2F:8D:7E:6A:64:8F:28:C4:47:37:92
            X509v3 Authority Key Identifier:
                keyid:CA:54:20:72:81:F5:50:DF:30:F5:F4:FC:3E:09:BD:CB:E2:FD:22:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/FoR0S7fMrx4lL41-amSPKMRHN5I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.57.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:03:77:0b:1e:b1:07:37:47:b0:29:ca:1c:ef:a0:63:29:f0:
         a4:22:5a:fd:cc:e3:01:a7:14:5f:ed:2d:76:35:b2:91:df:12:
         c4:b9:bd:66:b2:70:a1:14:fc:8b:80:52:6d:3d:1c:a1:32:f9:
         7e:47:50:2c:c3:c4:72:03:d0:77:74:45:22:d6:a0:06:b0:df:
         41:cb:a7:39:7d:13:1d:32:79:99:5b:fb:87:29:bd:74:fd:85:
         81:ab:7b:88:ee:b9:9b:f9:d1:1d:d2:bd:b6:29:c4:a3:48:bd:
         ca:32:fe:fc:29:88:b5:46:20:a8:92:7f:86:bb:5e:e3:44:c5:
         3c:46:c8:96:d3:a1:21:af:5d:58:2f:86:4c:ca:e2:88:fe:ac:
         9f:a3:b2:16:3a:4e:eb:c3:8c:d1:79:d7:a9:47:00:b7:3c:d1:
         d6:82:db:50:9a:aa:3e:40:cf:5f:77:6c:48:44:0a:87:4d:20:
         bd:5b:e0:a5:76:1b:a7:99:cf:b9:83:f6:32:44:a6:51:c0:90:
         04:80:19:c0:19:1f:07:03:62:ec:1a:47:f0:f7:17:fc:b3:b4:
         0d:7c:9e:4d:38:ca:19:43:5f:7e:2e:b6:06:8c:42:55:80:d9:
         24:7c:de:3b:30:50:d2:28:06:58:b1:08:18:ca:61:5c:8a:4d:
         19:09:1c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:33 2024 by rpki-client on console-ams.rpki-client.org