Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/LIU3bBDKTadJPmty4Ha79mtUqhU.roa
File:                     LIU3bBDKTadJPmty4Ha79mtUqhU.roa (raw, json)
Hash identifier:          6z7v0QHxOzyKWSmxDx9+Tig4ZivNmLNkugAH596g0jw=
Subject key identifier:   2C:85:37:6C:10:CA:4D:A7:49:3E:6B:72:E0:76:BB:F6:6B:54:AA:15
Certificate issuer:       /CN=ca54207281f550df30f5f4fc3e09bdcbe2fd22f4
Certificate serial:       1BA310
Authority key identifier: CA:54:20:72:81:F5:50:DF:30:F5:F4:FC:3E:09:BD:CB:E2:FD:22:F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/LIU3bBDKTadJPmty4Ha79mtUqhU.roa
Signing time:             Sat 01 Jan 2022 02:52:48 +0000
ROA not before:           Sat 01 Jan 2022 02:52:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        193.57.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1811216 (0x1ba310)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca54207281f550df30f5f4fc3e09bdcbe2fd22f4
        Validity
            Not Before: Jan  1 02:52:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2c85376c10ca4da7493e6b72e076bbf66b54aa15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e3:8c:50:5f:93:97:40:ab:ea:7a:16:5e:00:
                    ae:e9:05:2a:da:10:bd:be:3a:9e:61:53:a2:39:7f:
                    51:2c:f2:05:d3:f1:55:bc:0f:6b:3e:6f:a1:97:97:
                    af:a4:3a:d7:1a:65:04:af:ba:99:1c:8d:fe:ba:07:
                    2d:7b:d6:15:ec:36:bb:0b:ed:5a:c0:47:36:1e:af:
                    89:1e:ed:9b:19:6e:4a:ad:d0:2e:99:cd:ad:72:5e:
                    43:0f:3e:a2:e5:7e:87:46:49:db:4e:74:13:ba:3c:
                    61:60:b3:57:71:fe:9b:55:e4:85:e0:da:ea:10:f7:
                    6a:84:d2:16:89:ca:9d:82:b3:95:2a:ac:74:fa:f0:
                    49:e6:c6:75:c8:24:7b:f1:f4:50:e0:f7:9b:ac:b6:
                    bc:73:0c:0a:11:90:87:8f:f7:54:76:d5:36:c0:bb:
                    5a:6e:69:91:4d:e1:39:d3:34:c2:56:ee:b1:ac:6b:
                    f7:61:3b:f2:28:21:b9:38:bd:7b:c0:46:6c:67:84:
                    c5:56:05:02:c4:03:45:af:d3:63:60:88:30:65:35:
                    a8:47:44:83:77:73:89:ec:bd:5a:30:01:83:96:f9:
                    c8:7e:d1:79:3b:ef:cc:3f:1e:d5:47:77:03:66:27:
                    48:44:4d:9d:5c:3c:2d:85:bc:30:7e:df:7a:39:4c:
                    23:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:85:37:6C:10:CA:4D:A7:49:3E:6B:72:E0:76:BB:F6:6B:54:AA:15
            X509v3 Authority Key Identifier:
                keyid:CA:54:20:72:81:F5:50:DF:30:F5:F4:FC:3E:09:BD:CB:E2:FD:22:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/LIU3bBDKTadJPmty4Ha79mtUqhU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.57.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:78:f3:c1:87:6b:43:09:9e:76:d2:59:d6:a1:3b:b0:cb:d2:
         c0:fb:fe:34:ea:86:bf:77:94:60:ea:cb:5e:ac:04:1c:b9:03:
         7c:10:f0:1d:a5:65:2b:e4:bc:69:5b:3b:63:26:b2:04:b2:39:
         af:b9:7d:6d:4e:32:9e:a1:4e:c2:a7:38:72:f7:e2:93:d5:57:
         f5:49:74:76:1c:89:ab:b9:f3:92:84:4c:b7:e1:ab:e9:8c:8e:
         42:97:e4:b1:f9:11:eb:c8:71:41:23:8a:1a:56:6c:88:3b:13:
         94:1e:47:25:9a:4c:e6:eb:d0:0b:df:38:3f:74:09:22:18:32:
         7c:18:0d:6c:13:4d:8b:e3:3e:5f:22:f3:90:5f:c8:96:52:24:
         18:5e:71:02:35:38:5d:f4:c7:37:d7:02:33:2c:a0:c1:d5:a4:
         5d:a5:2c:2a:f3:55:48:f2:fe:6d:5e:6c:95:a0:40:0a:42:a8:
         55:bc:71:1b:30:e0:19:a1:73:a3:80:cc:b9:90:5b:8b:0e:24:
         ff:39:d8:1c:73:17:db:07:1a:44:f6:8e:1e:85:d1:97:61:0c:
         6b:48:0c:d0:09:1c:55:96:8d:b6:0b:15:99:8c:95:1a:b9:d5:
         92:91:3f:ec:a5:62:c2:cb:5b:6b:8f:a2:5d:0a:aa:07:be:03:
         0d:44:f8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-fra.rpki-client.org