Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bf13cd-6ecc-44dc-a1e8-fb2bb9cf2c69/1/L2mqjdzO03yUqsUrW_OrMJ0vqpw.roa
File:                     L2mqjdzO03yUqsUrW_OrMJ0vqpw.roa (raw, json)
Hash identifier:          BkA7Uvv+dRwg4bAkyHnJXeHGinOa7yjmVHkdR6gAtAI=
Subject key identifier:   2F:69:AA:8D:DC:CE:D3:7C:94:AA:C5:2B:5B:F3:AB:30:9D:2F:AA:9C
Certificate issuer:       /CN=6adbd4a857b2f94523c0b1485cc4808b1aa77143
Certificate serial:       03F78740
Authority key identifier: 6A:DB:D4:A8:57:B2:F9:45:23:C0:B1:48:5C:C4:80:8B:1A:A7:71:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/atvUqFey-UUjwLFIXMSAixqncUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/bf13cd-6ecc-44dc-a1e8-fb2bb9cf2c69/1/L2mqjdzO03yUqsUrW_OrMJ0vqpw.roa
Signing time:             Mon 28 Feb 2022 19:58:47 +0000
ROA not before:           Mon 28 Feb 2022 19:58:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48430
IP address blocks:        193.201.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66553664 (0x3f78740)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6adbd4a857b2f94523c0b1485cc4808b1aa77143
        Validity
            Not Before: Feb 28 19:58:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2f69aa8ddcced37c94aac52b5bf3ab309d2faa9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:66:9a:ff:44:a4:d3:7c:46:3a:03:f0:fb:
                    fb:32:39:c7:e4:83:b9:18:92:1e:37:e9:d0:29:01:
                    c8:db:c9:6a:36:41:58:46:a8:ea:91:79:c2:09:4b:
                    b3:62:45:5e:b5:47:b9:21:3f:92:55:da:80:18:01:
                    71:10:11:4b:1e:da:a8:c2:53:47:b0:9b:80:ed:fb:
                    79:2c:3c:c4:ee:c1:78:11:ee:81:23:ed:25:13:72:
                    5c:3b:19:01:e9:45:b5:15:83:f0:45:7d:71:f9:d3:
                    e9:ca:a1:70:99:56:83:28:35:14:64:ae:a2:d1:89:
                    da:5a:c8:dc:3d:b5:a6:52:c0:45:1c:4b:22:71:d1:
                    56:69:0b:11:f4:cf:5c:81:04:17:4b:5d:fc:18:3e:
                    c4:db:c0:cc:5e:91:b0:c7:68:c1:69:31:dd:d3:48:
                    35:74:5a:a4:85:80:0e:b0:8d:f8:cd:e5:d3:7e:48:
                    6c:ba:89:c9:53:54:c3:84:3d:ca:b1:6b:d5:bc:35:
                    4c:43:b0:a9:95:e3:bb:2d:26:2c:71:f3:d2:ea:21:
                    22:03:db:ae:4c:3e:8a:dd:72:45:fc:cb:7f:6e:ad:
                    d2:7b:2a:8d:45:d8:07:df:54:bf:6f:15:78:0c:ba:
                    1f:6e:12:cc:c8:40:95:7b:05:04:14:ab:98:3c:03:
                    43:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:69:AA:8D:DC:CE:D3:7C:94:AA:C5:2B:5B:F3:AB:30:9D:2F:AA:9C
            X509v3 Authority Key Identifier:
                keyid:6A:DB:D4:A8:57:B2:F9:45:23:C0:B1:48:5C:C4:80:8B:1A:A7:71:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atvUqFey-UUjwLFIXMSAixqncUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bf13cd-6ecc-44dc-a1e8-fb2bb9cf2c69/1/L2mqjdzO03yUqsUrW_OrMJ0vqpw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bf13cd-6ecc-44dc-a1e8-fb2bb9cf2c69/1/atvUqFey-UUjwLFIXMSAixqncUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.201.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:ef:0f:00:a5:83:18:7b:58:5d:bd:ae:37:e2:22:e7:92:76:
         db:40:ca:96:e2:7e:b7:cf:2b:f8:cd:ad:84:2e:d6:fd:46:8d:
         a2:d0:16:f6:60:7a:bc:97:ae:26:68:1a:fc:1c:17:8e:a8:78:
         fa:d7:0c:6e:26:35:84:e9:42:ef:57:3e:ad:37:9c:71:9a:cb:
         cf:ec:4e:3e:7a:1a:1e:61:53:ed:6f:4b:2d:fb:e8:d5:d8:d0:
         02:12:58:30:7b:4a:63:f1:db:96:61:9c:cb:da:50:4a:1c:9c:
         4c:da:59:3e:9c:07:a2:df:3d:46:fe:fd:d9:18:90:83:df:3e:
         9c:3f:36:8b:f2:71:81:09:ee:c0:eb:b5:04:9b:06:47:d7:6f:
         94:ac:fb:3b:49:36:ea:cb:8f:07:cc:59:62:e3:10:81:ad:5d:
         e9:64:c1:9b:38:29:4d:ed:5e:5b:46:63:8a:c2:d2:72:10:58:
         90:54:71:70:86:88:c6:8b:4a:04:a7:0c:e6:05:e9:7d:9f:ae:
         52:3a:dd:8f:b4:0d:48:05:60:3d:fe:14:66:ae:a1:e7:83:45:
         3e:0b:4e:f4:4b:bd:db:e7:fa:14:7c:2e:26:50:f8:ac:92:d9:
         30:99:cc:14:ce:a2:fe:01:0d:01:c6:05:c1:fc:9c:56:91:ba:
         e0:71:63:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:51 2024 by rpki-client on console-ams.rpki-client.org