Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/28dea6-2062-4b99-9921-4e2b8e3c65c5/1/frBUOvkwFOZCcJyo219w4lcHTks.roa
File:                     frBUOvkwFOZCcJyo219w4lcHTks.roa (raw, json)
Hash identifier:          a6vXBvPG/stnLOvK1tZl3YjM+g3dqSPxx0Zl8vgSDPA=
Subject key identifier:   7E:B0:54:3A:F9:30:14:E6:42:70:9C:A8:DB:5F:70:E2:57:07:4E:4B
Certificate issuer:       /CN=b1de96d535d5954a16f67d89201ff8062a151ab5
Certificate serial:       01BC10
Authority key identifier: B1:DE:96:D5:35:D5:95:4A:16:F6:7D:89:20:1F:F8:06:2A:15:1A:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sd6W1TXVlUoW9n2JIB_4BioVGrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/28dea6-2062-4b99-9921-4e2b8e3c65c5/1/frBUOvkwFOZCcJyo219w4lcHTks.roa
Signing time:             Mon 21 Feb 2022 13:47:36 +0000
ROA not before:           Mon 21 Feb 2022 13:47:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209242
IP address blocks:        193.9.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113680 (0x1bc10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1de96d535d5954a16f67d89201ff8062a151ab5
        Validity
            Not Before: Feb 21 13:47:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7eb0543af93014e642709ca8db5f70e257074e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:38:78:9c:f7:b5:90:bb:94:3f:2d:e4:b5:ff:
                    c8:d7:0f:43:cc:17:ec:20:4f:36:9f:6a:d1:bb:96:
                    70:8b:c8:f5:70:36:40:0d:33:13:b2:7e:84:1a:d8:
                    ce:46:b4:8d:f7:7e:27:57:34:17:b0:e6:c8:25:c6:
                    4c:1c:04:a9:40:81:2b:cd:c3:3d:8e:7f:e5:c7:02:
                    fd:12:1d:5d:39:8d:9b:89:42:24:dc:58:be:5e:16:
                    b9:74:6d:61:de:20:16:92:9e:20:09:b6:ea:8f:8f:
                    e7:a3:d2:77:30:f2:78:5c:c5:60:28:62:97:54:f3:
                    ba:81:f6:8b:2c:2d:5d:7f:23:b1:af:49:2f:f6:98:
                    1e:c3:3b:62:9c:45:38:f3:9d:87:49:54:82:ef:cf:
                    c9:33:2b:1c:ef:97:52:34:7b:83:42:24:b0:57:f4:
                    2b:f7:2f:fd:c4:a2:84:b1:4d:53:dd:3b:ee:5e:7f:
                    8b:e2:37:09:2b:af:8b:54:7e:74:a0:fe:e4:84:52:
                    6d:1c:70:90:ab:0b:75:1b:43:ac:26:a5:f1:f9:49:
                    ca:54:a6:47:cc:95:e1:66:17:6b:c1:dc:0d:8b:13:
                    bf:58:d6:9e:a5:6c:d0:3c:50:df:34:bf:1b:6f:8b:
                    75:3e:58:08:8e:6f:20:01:87:8f:f1:3a:94:58:95:
                    7a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B0:54:3A:F9:30:14:E6:42:70:9C:A8:DB:5F:70:E2:57:07:4E:4B
            X509v3 Authority Key Identifier:
                keyid:B1:DE:96:D5:35:D5:95:4A:16:F6:7D:89:20:1F:F8:06:2A:15:1A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sd6W1TXVlUoW9n2JIB_4BioVGrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/28dea6-2062-4b99-9921-4e2b8e3c65c5/1/frBUOvkwFOZCcJyo219w4lcHTks.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/28dea6-2062-4b99-9921-4e2b8e3c65c5/1/sd6W1TXVlUoW9n2JIB_4BioVGrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.9.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:25:6a:d3:4d:70:2c:25:ef:60:86:50:ca:d7:4f:1a:47:8e:
         72:40:c4:1a:d0:34:d6:f5:2e:3c:be:c9:44:da:cf:e5:2d:e6:
         fe:b1:51:ae:3c:f7:0e:30:4e:a8:7c:be:5f:8e:06:41:25:3a:
         34:4a:18:17:73:f8:c0:ce:29:ad:19:86:15:6c:ec:e2:95:80:
         e3:df:42:54:5a:4d:cb:32:c9:72:4d:ab:55:7b:1d:80:06:50:
         b6:a7:85:23:15:cd:0f:91:c0:0e:dc:cb:83:31:23:0d:ed:e2:
         49:19:d3:ec:14:d9:a3:18:51:5d:18:ff:b2:ac:27:0c:a0:8b:
         80:04:0d:ee:55:1b:ee:ef:87:a2:be:35:20:d4:c9:41:8d:ff:
         22:ae:a4:c3:a7:f5:f7:31:fb:ea:9e:51:1a:68:22:1b:32:fe:
         60:25:4b:f2:67:3f:eb:71:27:58:4b:d0:27:a6:89:92:10:e7:
         37:ee:71:c3:ce:f1:9c:17:e9:91:05:36:b7:8b:dd:5a:d3:e5:
         55:99:19:be:b7:b5:2d:65:24:a6:e3:17:55:7b:7b:00:54:4f:
         68:17:49:80:59:87:b1:09:13:6b:f0:72:3f:1b:48:a8:ab:ff:
         7b:f7:84:fc:65:42:de:66:64:bf:58:6a:84:b6:d9:08:ef:b3:
         f7:59:53:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:27 2024 by rpki-client on console-fra.rpki-client.org