Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/vuiqKsdW93sr2kXSIInQVb1w124.roa
File:                     vuiqKsdW93sr2kXSIInQVb1w124.roa (raw, json)
Hash identifier:          NMefXqhaoiuDEJ3IOWGhPw81XFpFegDY6X6xEBaLxPo=
Subject key identifier:   BE:E8:AA:2A:C7:56:F7:7B:2B:DA:45:D2:20:89:D0:55:BD:70:D7:6E
Certificate issuer:       /CN=7808aed6cfccf3daaf44fc4dca90ea513213908c
Certificate serial:       068729DC
Authority key identifier: 78:08:AE:D6:CF:CC:F3:DA:AF:44:FC:4D:CA:90:EA:51:32:13:90:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eAiu1s_M89qvRPxNypDqUTITkIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/vuiqKsdW93sr2kXSIInQVb1w124.roa
Signing time:             Sat 01 Jan 2022 12:56:28 +0000
ROA not before:           Sat 01 Jan 2022 12:56:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47837
IP address blocks:        193.105.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109521372 (0x68729dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7808aed6cfccf3daaf44fc4dca90ea513213908c
        Validity
            Not Before: Jan  1 12:56:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bee8aa2ac756f77b2bda45d22089d055bd70d76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:df:9e:af:f8:e2:76:03:ed:7f:e1:a3:0d:2c:
                    b6:75:09:37:82:05:44:89:43:5c:a9:91:40:4c:dc:
                    64:17:cd:b3:6e:64:60:0d:2a:5d:00:98:98:d1:f7:
                    c5:80:7b:e3:06:e8:30:fc:c0:4b:70:b9:af:92:5a:
                    57:df:68:2e:29:54:59:5d:17:26:ad:8d:36:2a:36:
                    5d:c3:95:e8:cc:46:51:85:0d:de:11:31:f4:3d:a9:
                    91:26:46:de:8c:cc:43:d4:86:e1:b8:dd:41:88:87:
                    5b:d6:98:7b:6f:5e:89:b4:bc:c6:60:9c:c5:6e:34:
                    7c:23:6f:e4:a5:1d:ee:92:e3:6c:4c:8e:b5:dd:3c:
                    a5:8f:c7:58:99:44:a0:e1:2f:04:68:07:b3:3f:37:
                    61:b2:35:d4:30:5a:5f:7b:d1:ac:8f:f9:7c:00:ac:
                    09:50:cc:5a:2e:87:3c:ac:b5:6f:98:22:1c:da:55:
                    8b:63:b8:b8:27:cf:ef:26:a8:d8:16:e2:ba:e7:a2:
                    3e:d5:8f:79:ff:81:b6:ec:be:d8:c8:c9:31:ef:87:
                    06:13:78:f3:50:fe:5c:4e:4d:15:35:e7:48:25:e0:
                    56:89:9a:a4:26:e0:54:cd:b2:7f:c2:74:30:89:1b:
                    ba:dc:31:86:b1:ec:f6:4c:6b:2b:4d:6b:77:f6:ed:
                    ca:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E8:AA:2A:C7:56:F7:7B:2B:DA:45:D2:20:89:D0:55:BD:70:D7:6E
            X509v3 Authority Key Identifier:
                keyid:78:08:AE:D6:CF:CC:F3:DA:AF:44:FC:4D:CA:90:EA:51:32:13:90:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAiu1s_M89qvRPxNypDqUTITkIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/vuiqKsdW93sr2kXSIInQVb1w124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/eAiu1s_M89qvRPxNypDqUTITkIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:5f:51:a7:c5:cc:66:3d:2c:4c:84:38:30:cf:83:d3:f2:45:
         6b:a9:3a:10:98:ed:73:4d:fd:ac:24:0e:11:69:fd:57:f8:38:
         5d:e4:50:bb:b6:f8:5e:93:74:57:e7:d5:7d:fc:b9:35:07:6c:
         26:db:49:a9:be:bf:5f:67:59:81:85:2c:25:6a:08:53:ee:8f:
         39:4b:96:a0:5b:a4:6e:cc:ad:ef:e1:29:5d:0f:95:b0:d5:d2:
         c9:a9:dc:93:7b:86:2c:d7:bb:53:92:89:7a:8e:ce:ac:75:38:
         64:8b:f5:22:32:f4:78:aa:df:f5:81:68:22:28:01:74:1d:f0:
         6c:8b:c8:db:24:cb:a5:01:8e:51:3a:96:cf:5e:0c:39:1f:b0:
         08:08:50:ec:4e:35:19:31:fe:38:cb:62:5e:0e:c6:44:ca:ac:
         f0:bd:bd:7c:92:7d:86:df:0f:81:7e:b3:39:70:4b:61:e9:5f:
         93:3d:8d:d2:d0:f9:f9:a0:6c:83:f4:d4:c0:2b:a6:68:e9:9c:
         df:9a:ae:a8:1a:b7:0e:97:3a:2c:62:aa:ea:71:5d:c7:1c:f8:
         34:d1:6b:86:0d:7b:a6:8d:37:62:c1:a6:02:c0:34:e9:9f:7a:
         b9:8f:4f:08:23:a5:1a:62:df:3a:0c:48:a8:ba:86:3d:26:c3:
         a6:cc:5d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:14 2023 by rpki-client on console-fra.rpki-client.org