Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/81b044-a129-4874-a8a3-adb5e96631f7/1/M5Ba80BKpkpkWdFDh-QgNq3Gy3M.roa
File:                     M5Ba80BKpkpkWdFDh-QgNq3Gy3M.roa (raw, json)
Hash identifier:          Q6czgdlicrbHSjPGz1Ht88byWy/ZGMFOrK2mI6CqhgE=
Subject key identifier:   33:90:5A:F3:40:4A:A6:4A:64:59:D1:43:87:E4:20:36:AD:C6:CB:73
Certificate issuer:       /CN=6a9909e02187344fc514ab054fb1b625e7d57dcc
Certificate serial:       0954D7D7
Authority key identifier: 6A:99:09:E0:21:87:34:4F:C5:14:AB:05:4F:B1:B6:25:E7:D5:7D:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/apkJ4CGHNE_FFKsFT7G2JefVfcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/81b044-a129-4874-a8a3-adb5e96631f7/1/M5Ba80BKpkpkWdFDh-QgNq3Gy3M.roa
Signing time:             Mon 14 Mar 2022 09:28:11 +0000
ROA not before:           Mon 14 Mar 2022 09:28:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200845
IP address blocks:        193.30.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156555223 (0x954d7d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a9909e02187344fc514ab054fb1b625e7d57dcc
        Validity
            Not Before: Mar 14 09:28:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=33905af3404aa64a6459d14387e42036adc6cb73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:20:d1:0f:80:b1:eb:7d:db:b1:c8:00:9b:b5:
                    cb:70:86:c0:78:9b:d5:4b:0b:bc:e8:45:64:23:a3:
                    61:cf:31:07:e1:31:52:27:68:f8:91:55:f5:99:5c:
                    5d:33:0b:ce:ea:0d:18:13:0f:a1:90:ce:f7:bd:07:
                    46:9a:c7:a5:5c:26:81:9a:3b:24:b2:d8:91:5c:01:
                    a8:0f:d5:d3:d1:a3:80:34:b1:9b:c1:24:07:74:fa:
                    d7:32:98:eb:5e:37:40:04:7b:42:83:70:bf:7d:f4:
                    a5:5e:56:ec:9b:4c:82:9f:fb:c9:15:56:25:26:95:
                    df:92:1e:8c:56:1f:f0:46:f2:ad:7c:f3:43:b5:1c:
                    b2:fd:a3:7d:f7:a1:6d:d5:bd:04:1e:a0:38:95:9f:
                    d2:11:82:52:33:f0:f4:3d:05:0c:03:28:12:52:de:
                    02:4b:3c:70:10:84:ef:3b:13:6c:30:86:5d:93:6a:
                    5c:66:ca:ea:32:96:16:fb:45:ef:d7:50:36:76:d1:
                    14:e9:72:de:2c:75:01:c6:d9:56:61:47:fc:63:b8:
                    e6:1b:7e:a3:88:d7:15:60:9a:a1:a8:e4:01:ba:de:
                    f6:6b:02:fb:1b:69:65:2c:15:97:43:d1:24:5a:64:
                    95:60:00:00:11:39:95:4c:06:29:e3:50:c6:1f:ff:
                    37:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:90:5A:F3:40:4A:A6:4A:64:59:D1:43:87:E4:20:36:AD:C6:CB:73
            X509v3 Authority Key Identifier:
                keyid:6A:99:09:E0:21:87:34:4F:C5:14:AB:05:4F:B1:B6:25:E7:D5:7D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apkJ4CGHNE_FFKsFT7G2JefVfcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/81b044-a129-4874-a8a3-adb5e96631f7/1/M5Ba80BKpkpkWdFDh-QgNq3Gy3M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/81b044-a129-4874-a8a3-adb5e96631f7/1/apkJ4CGHNE_FFKsFT7G2JefVfcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:a5:d6:21:47:0c:fd:1b:06:af:32:c8:e6:d5:d5:a0:b6:14:
         c0:d3:b7:0a:bf:1d:4d:c3:9e:1a:f6:80:43:bf:33:fa:f9:da:
         53:c2:8d:02:d7:f9:99:b4:2b:8f:77:cb:81:79:3a:92:53:82:
         10:a6:46:76:75:a1:d5:15:72:75:65:0f:1b:3c:b8:6f:9b:eb:
         3d:9e:a9:1f:3c:6c:09:c3:65:a6:67:5f:09:6f:d1:85:86:d8:
         c3:5b:40:6b:c4:83:08:67:1c:83:98:46:15:76:fe:67:cf:85:
         01:60:c5:00:44:42:82:e9:6e:27:75:a9:87:83:11:c6:54:4c:
         00:d9:f8:3a:3c:38:91:3b:e7:e1:73:37:53:9f:dc:f1:8e:5b:
         72:fe:e6:e9:00:ec:65:ff:1a:3d:7c:d3:23:1e:cb:86:79:3f:
         11:0f:53:3f:bf:ee:b2:08:f8:82:47:ae:ea:f3:86:9c:f6:30:
         52:d2:61:2a:30:56:44:9d:90:74:2b:fa:43:42:d8:0b:90:79:
         99:54:0b:4e:92:d6:d5:f7:62:a3:e9:df:4b:05:89:c7:65:78:
         b9:d4:80:7e:66:a4:35:ff:16:cb:5c:15:9c:ed:9b:25:1c:c0:
         d5:b9:c4:e0:69:b2:c5:f4:5e:46:e4:2e:84:b6:28:d9:cd:ab:
         eb:20:b9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:09 2024 by rpki-client on console-ams.rpki-client.org