Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/7dKqKzGIQk3py0iaUH7ytbshKQg.roa
File:                     7dKqKzGIQk3py0iaUH7ytbshKQg.roa (raw, json)
Hash identifier:          32ZQPl1lHCii1K3udvBaB8fy6NXvvhBlBDpgZLgzDQ4=
Subject key identifier:   ED:D2:AA:2B:31:88:42:4D:E9:CB:48:9A:50:7E:F2:B5:BB:21:29:08
Certificate issuer:       /CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Certificate serial:       0183AC763C74570C5FFD8F7089D80AF85FF3
Authority key identifier: 4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/7dKqKzGIQk3py0iaUH7ytbshKQg.roa
Signing time:             Thu 06 Oct 2022 08:42:53 +0000
ROA not before:           Thu 06 Oct 2022 08:42:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        193.246.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ac:76:3c:74:57:0c:5f:fd:8f:70:89:d8:0a:f8:5f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
        Validity
            Not Before: Oct  6 08:42:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=edd2aa2b3188424de9cb489a507ef2b5bb212908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e5:28:68:56:c4:d5:b0:ab:ea:e9:80:27:ca:
                    dd:4b:a1:b5:81:d9:f2:9d:6f:97:29:6b:dd:50:a4:
                    eb:89:53:9b:4d:ba:74:2d:43:31:f4:26:94:80:7d:
                    3f:bd:70:6b:ab:c2:24:49:8d:0a:c0:82:7f:2b:75:
                    a4:1e:b3:66:2e:b7:16:6e:5a:aa:bc:2b:64:1f:ce:
                    e4:e8:ac:0b:3f:1b:48:81:51:9c:80:a2:0f:15:29:
                    f9:8d:a2:f7:68:51:d5:b4:b5:05:a8:4a:69:19:4e:
                    74:d3:20:e1:07:17:82:ed:7c:fb:06:a8:bd:15:3c:
                    92:af:f5:82:89:30:b7:7f:3d:bc:3c:aa:43:df:a3:
                    1a:29:19:88:bc:bf:ff:a1:3c:9a:f8:12:5b:45:08:
                    d1:eb:b9:04:67:17:ea:36:c4:ef:68:69:57:e7:74:
                    6c:d1:ed:f8:33:de:6f:e1:78:2c:af:c1:9a:9c:cf:
                    76:c7:e8:7f:37:6f:bc:c1:7f:f0:8f:84:af:f4:50:
                    db:5f:f1:dc:50:85:24:b9:32:1a:d7:3d:fb:a3:83:
                    96:b6:29:64:79:9b:5c:42:87:1d:2d:94:d8:cb:3b:
                    b3:7e:9b:69:74:cf:8d:08:f0:ca:36:9e:ea:2c:81:
                    bd:41:8e:ef:29:88:73:dc:13:cb:e7:10:0b:e1:19:
                    58:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D2:AA:2B:31:88:42:4D:E9:CB:48:9A:50:7E:F2:B5:BB:21:29:08
            X509v3 Authority Key Identifier:
                keyid:4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/7dKqKzGIQk3py0iaUH7ytbshKQg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.246.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:7d:55:b4:39:c9:8c:6d:38:41:eb:95:e5:ac:49:9c:f6:e1:
         21:64:3e:60:1c:9b:0f:d6:60:8c:78:b8:e7:da:86:dd:bc:58:
         f6:f1:03:f7:4c:e1:35:fd:bd:50:34:8c:e6:20:40:62:3a:6a:
         a0:6d:96:a6:80:b5:6a:5d:05:0e:e6:6b:6a:96:98:fa:37:8e:
         47:c3:c8:71:e4:be:b0:ae:d9:7c:66:f2:63:e0:2c:35:a0:8e:
         8c:08:84:4a:80:bb:5d:58:8a:a3:32:97:7e:a0:b2:8a:c4:de:
         47:83:80:76:64:28:2e:85:2f:1b:71:29:b0:d0:57:64:2d:d3:
         fe:2a:fb:9e:7d:6b:38:cb:7f:28:38:40:c0:5b:73:1f:75:92:
         69:be:91:d6:e5:c4:78:fe:bf:8b:4a:ea:f2:a5:74:0d:1b:49:
         54:77:09:c3:48:2b:32:1b:2c:21:16:a6:29:0a:0e:ec:21:ec:
         70:e2:5f:e8:e1:8b:a9:dc:26:b0:5f:a3:13:66:cc:ad:f1:2c:
         e6:fe:8e:fc:4a:87:01:cd:92:c6:ec:14:29:0d:42:24:1e:21:
         a2:f4:e0:cd:76:b9:76:b5:8a:17:fc:80:80:25:c9:b4:2a:cc:
         06:b7:7d:2d:73:15:6e:08:f2:be:2a:ec:4a:4e:a2:93:79:6b:
         82:9a:30:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:27 2024 by rpki-client on console-ams.rpki-client.org