Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f77e9b-6383-48f6-853c-e2bac6d865a1/1/47osBZT_IDyukrJPC1KbLJzsxr0.roa
File:                     47osBZT_IDyukrJPC1KbLJzsxr0.roa (raw, json)
Hash identifier:          XpHt3ilZx4PKhQvngSzqYqp0AjG36AR4db5ZxQnHsxQ=
Subject key identifier:   E3:BA:2C:05:94:FF:20:3C:AE:92:B2:4F:0B:52:9B:2C:9C:EC:C6:BD
Certificate issuer:       /CN=09deaf5deccf729bedd4d25ddd3a8b5d8038eed5
Certificate serial:       035F0790
Authority key identifier: 09:DE:AF:5D:EC:CF:72:9B:ED:D4:D2:5D:DD:3A:8B:5D:80:38:EE:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cd6vXezPcpvt1NJd3TqLXYA47tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/f77e9b-6383-48f6-853c-e2bac6d865a1/1/47osBZT_IDyukrJPC1KbLJzsxr0.roa
Signing time:             Sat 01 Jan 2022 08:58:53 +0000
ROA not before:           Sat 01 Jan 2022 08:58:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50316
IP address blocks:        193.3.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56559504 (0x35f0790)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09deaf5deccf729bedd4d25ddd3a8b5d8038eed5
        Validity
            Not Before: Jan  1 08:58:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e3ba2c0594ff203cae92b24f0b529b2c9cecc6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:30:02:ce:2b:fb:34:ba:d4:66:15:0c:05:b6:
                    fc:8e:cd:21:f4:a6:93:0d:67:4c:cf:bd:d9:a4:9c:
                    2c:10:d6:d8:ad:07:f8:d9:5a:d3:49:a1:78:7c:de:
                    a0:4d:33:f3:3b:5a:87:42:dc:e0:e0:c9:c9:a2:1e:
                    5d:3f:82:b2:b9:4d:1e:13:76:b3:44:f2:b6:f1:a6:
                    1f:61:60:2d:2c:54:45:0d:48:67:74:3e:86:f9:17:
                    90:32:84:91:38:61:32:97:2a:46:28:18:3d:c4:d8:
                    75:6f:f6:d6:c7:43:a8:d2:4c:c7:09:f4:50:ab:9e:
                    b9:3d:a0:41:92:ef:14:71:b7:58:3d:6c:d5:d0:87:
                    61:18:93:0a:d3:7b:a5:ea:fc:21:da:f6:2e:cd:41:
                    36:31:dd:01:13:29:6e:94:87:b9:cc:e5:cd:6d:3b:
                    90:e0:91:6b:b2:df:1c:dc:92:b5:5f:dc:ac:d3:e2:
                    c0:ae:27:a6:f2:64:19:be:20:74:88:db:b0:a7:5e:
                    c3:e5:70:b6:eb:10:4f:b0:09:85:d6:24:0e:b0:81:
                    5e:27:7b:4a:91:38:d8:bc:9d:4b:d2:a5:93:81:83:
                    96:0a:70:79:28:ca:75:a4:88:2f:36:94:30:ce:76:
                    bb:67:a6:bc:82:ee:e7:34:1e:e4:c5:3b:f1:92:b7:
                    b4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BA:2C:05:94:FF:20:3C:AE:92:B2:4F:0B:52:9B:2C:9C:EC:C6:BD
            X509v3 Authority Key Identifier:
                keyid:09:DE:AF:5D:EC:CF:72:9B:ED:D4:D2:5D:DD:3A:8B:5D:80:38:EE:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cd6vXezPcpvt1NJd3TqLXYA47tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f77e9b-6383-48f6-853c-e2bac6d865a1/1/47osBZT_IDyukrJPC1KbLJzsxr0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f77e9b-6383-48f6-853c-e2bac6d865a1/1/Cd6vXezPcpvt1NJd3TqLXYA47tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:f0:74:96:1f:dd:6d:bb:e6:7b:b8:0d:c2:fa:a6:0d:40:f6:
         09:7e:47:56:59:58:4e:64:bd:1e:9a:43:59:70:be:43:d7:a4:
         f6:49:28:17:31:db:d1:7e:28:15:7e:7a:bc:a1:23:a4:59:9a:
         79:9c:f1:c7:04:91:9c:8e:5f:72:cf:a3:67:92:c3:8a:65:e8:
         94:99:db:ec:6d:22:f9:4c:cb:ef:e3:13:4e:52:f8:69:00:a1:
         72:4a:e4:47:a3:cc:e8:a0:05:46:29:c9:a2:08:2a:04:72:46:
         82:21:08:36:0e:b8:8b:43:9d:ab:09:d1:e1:3c:cc:0f:40:30:
         16:8f:ca:48:38:ca:7f:23:ee:46:74:85:21:fd:91:b9:96:cf:
         ef:62:68:ba:10:e7:a4:c5:87:4d:2d:1f:24:42:e1:10:b5:29:
         38:4f:9d:8b:b3:37:eb:37:f3:65:a2:04:55:de:ac:55:ca:a6:
         81:1d:d3:ba:ed:16:34:cc:a4:c6:dc:95:81:c0:8d:1f:d2:6f:
         88:15:94:c8:6d:05:65:f8:44:28:9b:3b:b3:71:d9:d0:81:d0:
         36:6f:08:cd:85:27:98:de:47:6f:a9:ef:97:2e:95:18:73:ad:
         23:65:eb:23:ce:80:91:60:e5:f6:c6:4e:24:41:1b:52:bd:13:
         23:30:5c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:07 2024 by rpki-client on console-fra.rpki-client.org