Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/J1lq81xGV7KTdX-GNJ5d1pGI5bU.roa
File:                     J1lq81xGV7KTdX-GNJ5d1pGI5bU.roa (raw, json)
Hash identifier:          0g8bH9wGsLc6IQ6Vgmy7iiZAzIArB3epiaDAwT0zXNw=
Subject key identifier:   27:59:6A:F3:5C:46:57:B2:93:75:7F:86:34:9E:5D:D6:91:88:E5:B5
Certificate issuer:       /CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Certificate serial:       0186028E094A672810A416B54100C4D2D3BA
Authority key identifier: 4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/J1lq81xGV7KTdX-GNJ5d1pGI5bU.roa
Signing time:             Mon 30 Jan 2023 12:01:48 +0000
ROA not before:           Mon 30 Jan 2023 12:01:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210439
IP address blocks:        193.246.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:02:8e:09:4a:67:28:10:a4:16:b5:41:00:c4:d2:d3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
        Validity
            Not Before: Jan 30 12:01:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=27596af35c4657b293757f86349e5dd69188e5b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cf:c4:b7:bd:21:66:c2:a9:50:08:fb:d6:7d:
                    3f:78:09:9c:1d:57:53:a9:e9:9b:c3:cd:1f:c0:8c:
                    75:83:04:e3:07:1e:68:47:65:53:6c:44:31:89:5d:
                    74:1f:f8:ae:b1:f4:0e:76:96:0c:ce:88:92:7b:5a:
                    86:5b:f3:b4:eb:b7:92:3f:08:79:04:a4:34:5b:6d:
                    91:b0:86:62:ef:bf:8a:13:49:bd:7b:91:72:e4:e3:
                    59:f9:f7:a1:85:99:97:63:af:de:c9:17:6c:83:e0:
                    1b:42:cf:50:fd:13:a2:e8:1a:a9:db:d7:0a:f5:f7:
                    80:d6:4a:67:66:fd:58:52:7d:df:e2:98:d2:56:b5:
                    41:a5:d4:d3:9a:34:df:15:d9:4c:75:06:df:e6:ed:
                    1b:7c:12:ca:e8:cb:0d:df:5c:61:21:57:76:0b:7f:
                    64:05:70:e2:ad:db:6c:c6:4c:fc:d2:e5:ee:fe:b4:
                    e7:e3:57:b2:2c:4b:d0:65:ab:41:0c:29:63:2d:0b:
                    99:72:f4:14:b0:ab:56:c7:a5:9b:62:bd:a4:67:4a:
                    ce:fb:11:de:94:c1:45:75:e9:a2:5b:23:a2:bc:f1:
                    ca:17:61:5a:01:07:d2:26:62:90:0c:aa:bc:8f:e6:
                    ee:87:2f:c9:7d:9f:65:57:5c:52:cb:a8:93:a2:33:
                    a8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:59:6A:F3:5C:46:57:B2:93:75:7F:86:34:9E:5D:D6:91:88:E5:B5
            X509v3 Authority Key Identifier:
                keyid:4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/J1lq81xGV7KTdX-GNJ5d1pGI5bU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.246.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:64:61:34:2e:05:34:7b:b5:ed:3e:84:9b:67:91:bf:2f:75:
         99:fa:db:10:80:5b:e9:f6:f7:05:cf:94:b9:b4:34:d2:8e:d0:
         99:77:4c:e0:30:e2:20:a5:99:e9:cc:ac:81:d0:60:8a:87:e0:
         94:ad:6a:be:15:5f:db:5d:79:36:3f:ed:6f:6d:f9:6b:3e:7f:
         64:7d:30:e8:30:d1:36:b3:3c:b1:ae:a6:d1:9a:3e:9d:b4:1d:
         2f:8e:f8:85:45:30:62:fc:96:e1:e9:f7:6b:ce:47:f2:83:1b:
         69:84:47:7f:0e:53:d7:61:1c:5d:54:d3:a0:36:63:4a:6f:8d:
         c3:50:9f:04:ba:e4:19:f1:d4:ad:cc:2d:af:71:09:21:2a:c6:
         cc:fc:17:4e:2f:f3:b4:51:35:be:d1:bc:51:14:ae:6d:14:df:
         66:59:70:86:08:84:5c:42:f6:ec:e6:c2:df:5d:a5:06:31:ca:
         a6:b9:54:e2:22:78:5b:78:d6:bb:ea:1b:fd:69:3e:fe:7b:8c:
         7e:ad:4e:55:da:e8:cb:af:3a:87:ff:9f:4e:d6:e9:ea:e7:38:
         30:19:08:8c:90:71:db:7c:e0:66:dd:63:ef:af:ab:3b:53:fe:
         2a:41:e5:37:18:65:26:63:a4:69:b5:b8:60:78:a9:79:81:a0:
         fe:be:68:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:27 2024 by rpki-client on console-ams.rpki-client.org