Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/deb0da-5609-4577-acf9-50f57507e2c6/1/sCvXhCyShiZX8JER_noi0vlepwM.roa
File:                     sCvXhCyShiZX8JER_noi0vlepwM.roa (raw, json)
Hash identifier:          CI329UKXIBukwZgCP39w2deIP3anLQsanfX1MuQsmrk=
Subject key identifier:   B0:2B:D7:84:2C:92:86:26:57:F0:91:11:FE:7A:22:D2:F9:5E:A7:03
Certificate issuer:       /CN=9235faa88988a0e549d2f99ea5cd00d8a3ce862c
Certificate serial:       05C702FD
Authority key identifier: 92:35:FA:A8:89:88:A0:E5:49:D2:F9:9E:A5:CD:00:D8:A3:CE:86:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjX6qImIoOVJ0vmepc0A2KPOhiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/deb0da-5609-4577-acf9-50f57507e2c6/1/sCvXhCyShiZX8JER_noi0vlepwM.roa
Signing time:             Tue 26 Apr 2022 09:03:45 +0000
ROA not before:           Tue 26 Apr 2022 09:03:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205216
IP address blocks:        193.104.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96928509 (0x5c702fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9235faa88988a0e549d2f99ea5cd00d8a3ce862c
        Validity
            Not Before: Apr 26 09:03:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b02bd7842c92862657f09111fe7a22d2f95ea703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:32:39:ca:f7:6c:03:55:26:e6:c6:92:8a:53:
                    d9:3d:f6:c5:e8:91:b5:0e:81:0c:6e:fa:8c:7b:7e:
                    f8:09:69:87:88:29:c9:66:4f:cd:a7:d5:6b:40:31:
                    7f:eb:0f:8c:09:f8:c3:56:d2:90:6f:99:38:eb:80:
                    d0:b9:b2:29:d2:bd:64:46:c4:ef:4a:3b:0e:4e:1b:
                    db:f0:88:fa:8d:51:88:97:d4:e3:74:39:7c:ed:39:
                    73:40:ec:a7:2e:67:ad:3d:0e:d4:5f:83:47:9c:98:
                    6c:67:7e:55:3d:3f:0f:6a:5d:5e:27:5e:76:a8:ae:
                    0b:6c:f3:2f:01:42:c3:0a:1a:7d:7d:c4:38:0d:ad:
                    e1:02:9c:32:76:d1:31:a3:68:8d:a9:90:e8:f4:11:
                    91:c9:32:42:46:d2:06:53:ba:9d:26:81:cd:5d:48:
                    b9:59:9d:22:0f:79:b5:90:d8:ca:f5:42:15:7e:09:
                    06:ad:0d:2f:4b:f5:07:09:34:42:6e:ae:eb:ef:e2:
                    78:ea:94:7d:37:40:09:57:8f:5e:fd:2f:a4:17:fc:
                    18:0e:38:93:aa:4f:80:22:c4:b1:12:6c:92:68:bb:
                    ee:06:f9:bf:43:e2:34:32:65:fb:ef:28:28:b1:72:
                    b4:bf:33:c2:ab:54:b3:ff:8e:a4:bb:39:96:a1:da:
                    ad:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2B:D7:84:2C:92:86:26:57:F0:91:11:FE:7A:22:D2:F9:5E:A7:03
            X509v3 Authority Key Identifier:
                keyid:92:35:FA:A8:89:88:A0:E5:49:D2:F9:9E:A5:CD:00:D8:A3:CE:86:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjX6qImIoOVJ0vmepc0A2KPOhiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/deb0da-5609-4577-acf9-50f57507e2c6/1/sCvXhCyShiZX8JER_noi0vlepwM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/deb0da-5609-4577-acf9-50f57507e2c6/1/kjX6qImIoOVJ0vmepc0A2KPOhiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:80:9c:f6:82:0c:a6:c5:38:86:42:4b:e4:b0:3e:49:6e:da:
         bf:b5:87:96:94:5e:ff:a3:ac:c3:ed:f0:e8:92:e6:52:30:12:
         a6:16:75:ef:e2:a5:63:f6:e2:86:1f:13:e6:e7:7f:7e:1b:29:
         46:0c:e8:ca:19:29:b3:89:5b:d7:6f:70:4a:80:4d:2d:62:31:
         b8:88:a5:ba:d7:e2:dd:49:42:f1:78:a9:6f:fb:d4:1d:e5:bc:
         be:6d:bc:41:3d:f9:45:9d:cd:0a:43:22:61:0b:99:b4:82:fd:
         97:6a:13:d3:5c:11:bd:95:a4:28:67:5c:ed:ad:c7:55:ed:30:
         76:fa:ca:57:32:f1:fe:bf:93:48:4f:61:8f:1e:70:06:ac:a8:
         2e:46:e3:fb:69:16:0f:2d:ab:86:64:ce:d2:14:c1:ad:86:22:
         ec:36:3c:15:20:05:d9:08:19:b0:4f:17:30:a1:f6:3a:91:04:
         9c:b1:e5:74:ce:80:a1:97:f1:c5:45:9c:2e:c4:8c:d0:cd:47:
         65:c3:f7:9d:f4:40:95:19:40:e7:9a:55:4d:40:89:54:f5:86:
         50:e0:b8:b1:30:22:c4:75:19:7d:53:c5:57:4d:34:39:ae:56:
         62:ed:15:bb:e0:4c:da:41:70:8b:36:d8:fa:0d:7d:be:8f:e1:
         9c:41:5d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:23 2024 by rpki-client on console-fra.rpki-client.org