Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/Nuzpouk-AQ2gunAqSqX71cYdha0.roa
File:                     Nuzpouk-AQ2gunAqSqX71cYdha0.roa (raw, json)
Hash identifier:          HFRD8VJv8f4FxC/qZqdBqVV6XtHIEZ8D2O3x5zij+vM=
Subject key identifier:   36:EC:E9:A2:E9:3E:01:0D:A0:BA:70:2A:4A:A5:FB:D5:C6:1D:85:AD
Certificate issuer:       /CN=942dd92f420a283345ea93c4d31deaaabfb0fa4b
Certificate serial:       07478E51
Authority key identifier: 94:2D:D9:2F:42:0A:28:33:45:EA:93:C4:D3:1D:EA:AA:BF:B0:FA:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/Nuzpouk-AQ2gunAqSqX71cYdha0.roa
Signing time:             Fri 21 Jan 2022 22:49:34 +0000
ROA not before:           Fri 21 Jan 2022 22:49:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210538
IP address blocks:        193.169.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122130001 (0x7478e51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=942dd92f420a283345ea93c4d31deaaabfb0fa4b
        Validity
            Not Before: Jan 21 22:49:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=36ece9a2e93e010da0ba702a4aa5fbd5c61d85ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6c:81:9a:05:5c:94:1b:29:da:1c:c7:06:f2:
                    90:65:2f:23:67:a6:ec:24:9f:6f:9c:dd:1e:32:26:
                    71:01:3e:8b:15:40:4f:36:ba:27:d8:af:bd:91:59:
                    9c:39:d1:be:f6:81:80:d3:a2:0b:34:5c:8b:53:0a:
                    b6:06:bd:ea:d3:74:d2:67:a5:de:91:41:5e:dd:af:
                    2b:05:82:a3:1b:22:df:ae:94:7a:6f:2a:85:a0:ec:
                    51:d1:4f:a7:19:ed:62:e1:fe:06:a0:b2:3f:b9:b6:
                    15:22:69:b9:6d:21:27:34:ae:02:48:40:b4:e3:ce:
                    cd:ac:dc:e4:18:68:59:71:5c:53:ef:1c:53:94:9b:
                    6c:46:db:12:6f:27:56:3c:88:4c:26:a5:3a:13:31:
                    28:2b:32:52:c1:00:3e:40:a7:26:f0:5a:86:58:46:
                    65:93:f0:4b:0b:e2:10:48:92:ff:f1:96:dc:8f:3e:
                    a0:49:9b:d0:7f:ea:26:5c:00:d4:5d:94:d9:44:d0:
                    d3:6b:a7:e1:68:e0:31:17:7a:a4:64:75:e7:25:18:
                    de:a9:93:b7:5f:ad:8a:60:72:f6:5c:f4:68:85:76:
                    3e:21:cb:e4:4b:91:97:c7:2f:4d:99:f6:fa:3c:f8:
                    49:f0:49:d8:7b:dc:46:5e:a9:63:39:88:6b:39:42:
                    c6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EC:E9:A2:E9:3E:01:0D:A0:BA:70:2A:4A:A5:FB:D5:C6:1D:85:AD
            X509v3 Authority Key Identifier:
                keyid:94:2D:D9:2F:42:0A:28:33:45:EA:93:C4:D3:1D:EA:AA:BF:B0:FA:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/Nuzpouk-AQ2gunAqSqX71cYdha0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.169.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:99:ae:90:dc:0f:fd:45:42:4b:98:03:0a:8f:24:b6:2f:22:
         f3:fa:c0:39:3f:20:30:1f:60:f9:1b:d4:bc:30:63:f9:04:a7:
         b4:3f:b3:91:e1:4e:c2:49:ff:17:8d:73:9b:03:61:15:67:fa:
         66:df:84:92:db:95:10:5c:46:21:26:e0:1f:d3:59:e2:5e:1e:
         65:42:22:ae:e4:6a:75:f6:d5:d9:b3:c3:aa:3b:bb:5a:37:ff:
         20:7b:47:5c:5c:29:d7:33:d1:a2:6e:c8:04:64:eb:22:59:93:
         59:31:b5:04:fe:f3:24:b5:a9:8a:06:b8:28:0e:fc:18:90:51:
         54:ad:74:a9:29:5f:a0:06:fd:61:39:76:99:37:71:a0:ce:22:
         04:24:cf:4b:1a:75:c1:09:8e:4f:4e:cf:90:89:b0:f7:c5:53:
         9d:af:cf:c1:1d:d3:d5:b6:82:ed:51:18:ee:38:d4:46:40:26:
         d3:0c:9e:e5:19:2b:0e:75:f0:ac:6f:86:cb:38:ae:fe:82:98:
         a6:ab:cd:da:e8:b5:2e:a3:5c:6b:70:be:0b:9e:dc:92:d3:b7:
         f5:31:bb:77:ae:0a:d7:81:85:ac:82:67:85:dc:71:a6:bc:7e:
         59:ee:d7:35:96:2d:3e:e8:d4:27:3b:57:8f:7f:87:5b:9e:89:
         3a:6e:37:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:38 2024 by rpki-client on console-fra.rpki-client.org