Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/bjYKnKqjl6I7zbCTSRbgWLiGSm0.roa
File:                     bjYKnKqjl6I7zbCTSRbgWLiGSm0.roa (raw, json)
Hash identifier:          hAPqp3dxvCSbs6Z39Ad5uvJW73ku3atDSkL2ZEd+QLQ=
Subject key identifier:   6E:36:0A:9C:AA:A3:97:A2:3B:CD:B0:93:49:16:E0:58:B8:86:4A:6D
Certificate issuer:       /CN=2e0b6ff7b65894332cbb41d3aeb735301f48b298
Certificate serial:       01C75485
Authority key identifier: 2E:0B:6F:F7:B6:58:94:33:2C:BB:41:D3:AE:B7:35:30:1F:48:B2:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/bjYKnKqjl6I7zbCTSRbgWLiGSm0.roa
Signing time:             Mon 28 Mar 2022 18:30:55 +0000
ROA not before:           Mon 28 Mar 2022 18:30:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60781
IP address blocks:        193.243.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29840517 (0x1c75485)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0b6ff7b65894332cbb41d3aeb735301f48b298
        Validity
            Not Before: Mar 28 18:30:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6e360a9caaa397a23bcdb0934916e058b8864a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cd:3b:d5:7a:f1:c7:2f:e5:34:0f:6b:ab:d8:
                    ed:df:57:6a:1f:a8:63:1f:7d:b3:0c:e3:b0:9a:48:
                    4c:5b:e9:92:fd:e9:08:f0:41:d0:cd:77:24:e8:2f:
                    66:a7:89:26:34:99:1b:6c:3d:41:22:98:20:f1:38:
                    53:25:3d:69:5f:6b:16:82:bc:5e:d8:f9:86:48:9a:
                    8f:6e:30:b4:09:e2:42:be:c3:59:e4:41:d6:a6:4a:
                    c6:dd:e5:f4:b0:5b:88:cb:aa:ec:f0:19:23:1c:ec:
                    1b:da:5e:af:0b:a2:c3:ee:28:b1:32:00:cb:69:3d:
                    0f:84:4a:d5:0a:8b:24:dd:33:a6:52:bb:69:08:12:
                    e1:ab:9a:8b:17:08:9c:f7:98:6e:02:5d:06:43:51:
                    e7:27:3c:59:e9:2d:61:59:fe:69:89:c1:3c:3b:d5:
                    e5:25:80:b7:cc:e2:a5:7c:01:0a:48:37:48:dc:05:
                    28:cf:00:e6:47:72:26:51:59:66:a5:34:06:86:cf:
                    34:18:e6:90:03:79:e0:73:ae:29:85:03:04:a5:87:
                    b4:93:73:4b:78:bb:2b:24:ed:46:1c:35:79:0c:99:
                    f9:f4:f1:3d:c9:2e:8c:70:cf:10:af:6a:86:88:dc:
                    cc:79:69:1c:da:17:3d:02:58:1a:ff:e4:d3:96:69:
                    80:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:36:0A:9C:AA:A3:97:A2:3B:CD:B0:93:49:16:E0:58:B8:86:4A:6D
            X509v3 Authority Key Identifier:
                keyid:2E:0B:6F:F7:B6:58:94:33:2C:BB:41:D3:AE:B7:35:30:1F:48:B2:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/bjYKnKqjl6I7zbCTSRbgWLiGSm0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.243.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:8b:4d:8f:93:66:15:b1:22:15:42:6b:d9:36:8d:80:d6:d8:
         b7:59:dd:f7:c3:d1:e2:9b:f3:ac:3d:94:c1:18:63:0d:5f:7f:
         3d:e8:b3:57:0b:68:51:83:c6:41:4f:73:72:f8:07:13:0c:b5:
         7c:cc:2a:17:65:6f:b9:ad:1f:ac:6c:b6:c0:5b:e8:4e:ce:53:
         63:3c:76:61:f5:6a:3c:09:e1:78:d4:93:77:bf:4e:17:03:9c:
         8a:81:71:01:88:53:19:45:8e:d5:35:c6:fe:9d:7a:d0:af:31:
         d2:33:de:04:f9:82:bb:d8:f4:e6:ba:79:b0:f7:18:7a:06:49:
         e6:2b:86:fb:aa:a7:25:45:2a:b6:e5:cd:22:b5:22:3f:f3:db:
         0f:da:c5:ab:f3:86:ce:94:70:8b:74:16:c5:d6:8e:20:66:be:
         21:6b:60:13:78:5a:43:47:d5:f7:f6:fa:ce:9a:72:c1:cb:fb:
         fc:20:9d:7a:36:9d:61:15:80:e7:43:c9:f1:35:4f:a2:a3:d9:
         b5:be:8f:02:2a:95:29:be:67:78:ce:ba:78:88:82:d9:e5:8f:
         19:27:51:7c:af:7b:5f:ae:32:26:52:86:1b:23:9a:1d:27:9c:
         1c:a7:8e:04:c9:bc:ca:80:54:cc:74:64:66:9e:06:08:2e:0b:
         a0:ef:59:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:53 2024 by rpki-client on console-ams.rpki-client.org