Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/40bcd2-cd93-4922-a373-485b193db243/1/01up9XZzWT0lsYUb8cy9pVZw-xA.roa
File:                     01up9XZzWT0lsYUb8cy9pVZw-xA.roa (raw, json)
Hash identifier:          w3Simbj+++1KE3xoSXjs0ri7/ximqHzJ0BFou64lKs4=
Subject key identifier:   D3:5B:A9:F5:76:73:59:3D:25:B1:85:1B:F1:CC:BD:A5:56:70:FB:10
Certificate issuer:       /CN=119f2dcb336b725717c5f9902d4a60e98c04a86d
Certificate serial:       0183EA1A3DE604C5E6682698CB1BDE102A41
Authority key identifier: 11:9F:2D:CB:33:6B:72:57:17:C5:F9:90:2D:4A:60:E9:8C:04:A8:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EZ8tyzNrclcXxfmQLUpg6YwEqG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/40bcd2-cd93-4922-a373-485b193db243/1/01up9XZzWT0lsYUb8cy9pVZw-xA.roa
Signing time:             Tue 18 Oct 2022 07:58:51 +0000
ROA not before:           Tue 18 Oct 2022 07:58:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15395
IP address blocks:        193.138.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ea:1a:3d:e6:04:c5:e6:68:26:98:cb:1b:de:10:2a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=119f2dcb336b725717c5f9902d4a60e98c04a86d
        Validity
            Not Before: Oct 18 07:58:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d35ba9f57673593d25b1851bf1ccbda55670fb10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fe:ed:4b:e0:6d:49:3d:23:f7:15:f4:9d:81:
                    36:39:a7:ee:f2:5b:03:3a:4b:64:25:52:e5:d8:0e:
                    1d:b3:18:36:eb:9f:63:01:de:90:44:b0:c7:fa:b5:
                    aa:89:db:3c:89:41:22:6d:5b:49:55:a8:ec:50:b2:
                    98:0c:53:6a:aa:c4:1f:ef:cd:c3:55:cc:03:76:53:
                    8a:ea:35:9a:80:72:0e:14:b8:e1:aa:c5:f6:d3:d8:
                    d7:67:c2:9e:71:94:72:69:89:ad:e9:79:a6:4f:22:
                    a6:18:df:24:b7:20:bf:ce:73:21:b1:74:08:15:7d:
                    5e:b7:7e:86:30:ac:07:7e:2c:3a:5f:5f:0b:f3:c5:
                    c8:26:7e:90:9e:7c:08:3a:cf:f1:bd:d4:ed:42:d3:
                    54:57:35:a3:b5:ad:31:a1:6d:4d:64:e0:60:58:cb:
                    75:22:13:61:a8:23:ac:9e:d6:20:7b:17:02:9e:36:
                    04:cd:0a:da:a7:6a:83:f4:34:88:15:c9:d1:7d:b4:
                    36:39:18:c5:25:d1:97:a3:7c:2b:21:73:91:2b:96:
                    09:90:90:0d:0d:5e:cf:8e:9d:02:11:3f:2b:b9:af:
                    3e:3b:f8:3c:20:88:cd:ca:bb:97:67:88:b9:43:9c:
                    57:19:c2:9a:e3:65:2b:67:9a:fa:82:b4:d9:b2:69:
                    09:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:5B:A9:F5:76:73:59:3D:25:B1:85:1B:F1:CC:BD:A5:56:70:FB:10
            X509v3 Authority Key Identifier:
                keyid:11:9F:2D:CB:33:6B:72:57:17:C5:F9:90:2D:4A:60:E9:8C:04:A8:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EZ8tyzNrclcXxfmQLUpg6YwEqG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40bcd2-cd93-4922-a373-485b193db243/1/01up9XZzWT0lsYUb8cy9pVZw-xA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40bcd2-cd93-4922-a373-485b193db243/1/EZ8tyzNrclcXxfmQLUpg6YwEqG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.138.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:1c:24:1e:ed:f5:40:58:9f:d3:cc:cc:df:5f:25:5f:2d:9a:
         9b:fa:0a:a9:78:42:86:21:93:4c:f0:f7:4c:af:c4:2e:5f:38:
         e6:4d:df:2e:33:e9:3e:ab:69:33:c6:bd:88:42:19:0e:d2:29:
         8e:19:6a:81:9d:83:97:73:5b:20:3e:eb:36:68:9e:0d:33:ac:
         0f:b2:86:27:74:cf:cd:9a:ea:8b:fa:ea:52:c1:67:81:39:f7:
         ac:4d:10:ca:56:3c:84:03:a1:1d:27:c5:14:9a:36:29:ab:32:
         9d:9d:36:c8:ba:cb:30:c4:70:cf:a0:04:86:36:3d:34:0a:de:
         b8:7a:e8:ad:7e:6b:6c:2c:d3:49:74:53:8c:6c:6b:b0:d3:6c:
         c8:06:be:09:4f:d8:58:ac:55:df:ac:22:99:f6:69:1d:6a:bc:
         38:ed:42:66:1f:0d:38:19:f6:73:47:5f:9d:7e:ac:34:10:b7:
         fc:f9:f2:db:3b:16:b9:d7:3c:5b:0b:cd:49:53:86:a5:01:b0:
         30:df:7d:81:e1:d2:53:c5:9a:c5:f8:ee:d2:08:0b:1d:4e:e3:
         8d:03:5e:2c:bb:ab:44:57:62:f5:f9:5c:ca:b4:e0:68:0e:e8:
         18:92:83:ff:dd:af:9d:d8:17:66:c0:01:31:02:08:b8:c1:cc:
         1f:92:85:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:27 2024 by rpki-client on console-ams.rpki-client.org