Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/814f93-1f97-4d0b-b78e-09b2ec9446c8/1/stPpRRpcPGdUCP2I1euvA7MMDP8.roa
File:                     stPpRRpcPGdUCP2I1euvA7MMDP8.roa (raw, json)
Hash identifier:          JNFevMHTS4Etjgs3WvGoIWtzJSx0fqb9DOWoWAeDWlA=
Subject key identifier:   B2:D3:E9:45:1A:5C:3C:67:54:08:FD:88:D5:EB:AF:03:B3:0C:0C:FF
Certificate issuer:       /CN=9114002a4d41b544f55c346ff54e32e9385a9a70
Certificate serial:       01824B6C93EECB6D5874874DA40DF3B99AF4
Authority key identifier: 91:14:00:2A:4D:41:B5:44:F5:5C:34:6F:F5:4E:32:E9:38:5A:9A:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kRQAKk1BtUT1XDRv9U4y6ThamnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/814f93-1f97-4d0b-b78e-09b2ec9446c8/1/stPpRRpcPGdUCP2I1euvA7MMDP8.roa
Signing time:             Fri 29 Jul 2022 19:26:23 +0000
ROA not before:           Fri 29 Jul 2022 19:26:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     399587
IP address blocks:        193.187.140.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:4b:6c:93:ee:cb:6d:58:74:87:4d:a4:0d:f3:b9:9a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9114002a4d41b544f55c346ff54e32e9385a9a70
        Validity
            Not Before: Jul 29 19:26:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b2d3e9451a5c3c675408fd88d5ebaf03b30c0cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5e:fd:6e:12:25:4d:94:60:00:68:33:84:ef:
                    56:bc:86:4c:c8:8c:3c:0b:bf:18:e6:52:b4:f5:a8:
                    4c:b4:43:5e:7a:27:b2:99:14:7a:de:3c:0c:19:87:
                    c9:20:63:c0:2a:79:12:01:00:be:33:8c:96:09:ca:
                    39:de:7c:77:b1:58:a5:b9:c9:db:31:f5:ff:39:98:
                    bc:d6:18:eb:9c:4d:28:18:04:c2:eb:da:60:06:79:
                    ea:2b:d8:ac:a4:5e:d6:e0:31:83:e4:d4:ea:b3:57:
                    31:27:05:0a:94:54:c8:b4:69:5e:f4:37:92:04:4a:
                    1e:05:28:a2:6b:a0:fe:64:1b:e0:44:70:bb:d0:9b:
                    d3:90:76:27:dc:f8:48:c0:89:b7:84:bc:2e:13:3c:
                    05:65:61:f7:fa:7d:25:38:c0:36:e9:61:dd:42:7c:
                    63:f5:6a:f6:17:8f:72:30:34:e3:45:8b:60:b7:cc:
                    14:1b:7f:28:7e:f6:cb:06:30:c3:43:ac:2b:32:bd:
                    e3:7a:74:04:fe:51:0d:bf:67:38:78:c7:1d:be:f0:
                    6b:e0:11:10:76:4e:29:a2:0e:08:80:2f:77:99:89:
                    40:15:2b:f9:5a:fc:21:68:92:f8:11:c7:4b:ca:d0:
                    a9:49:89:99:4a:54:4c:73:91:cb:a5:b4:e8:80:b0:
                    e4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D3:E9:45:1A:5C:3C:67:54:08:FD:88:D5:EB:AF:03:B3:0C:0C:FF
            X509v3 Authority Key Identifier:
                keyid:91:14:00:2A:4D:41:B5:44:F5:5C:34:6F:F5:4E:32:E9:38:5A:9A:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRQAKk1BtUT1XDRv9U4y6ThamnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/814f93-1f97-4d0b-b78e-09b2ec9446c8/1/stPpRRpcPGdUCP2I1euvA7MMDP8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/814f93-1f97-4d0b-b78e-09b2ec9446c8/1/kRQAKk1BtUT1XDRv9U4y6ThamnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.187.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:e6:49:d6:d3:f3:8b:f8:31:b3:c6:83:fe:4c:8d:d9:b3:01:
         00:10:b7:87:25:94:97:1b:d5:e4:d7:56:56:1a:96:cb:7d:3a:
         4a:3f:8f:b2:e7:e0:b8:96:80:50:80:8a:b5:8d:d5:39:19:8e:
         f4:80:c0:c3:bb:63:54:48:01:a6:49:d8:d5:c3:c2:72:1a:b7:
         fc:70:4c:29:08:71:1d:b0:66:e4:c6:b1:87:4f:f6:21:90:7d:
         ab:2b:b5:e9:f3:76:41:32:a4:6b:73:0a:3a:4f:9e:1a:18:fa:
         fd:c1:7d:f0:ee:ed:5c:68:de:d0:60:1e:66:69:01:0e:46:f5:
         ed:e4:83:ff:d2:6f:31:a5:8b:2c:26:dd:e8:4a:28:c8:37:82:
         f6:40:cc:21:29:a6:fa:3d:11:8a:b5:aa:63:ab:c3:a1:0a:27:
         90:bc:0f:63:50:58:dd:19:46:47:53:8b:3e:24:98:e5:9b:fd:
         23:f4:ef:b1:a7:23:3b:7c:92:e3:f8:13:f7:5e:c2:11:51:32:
         57:ab:77:5e:3e:8d:cb:9c:84:8f:83:aa:c6:a2:eb:83:41:da:
         ce:67:98:98:ab:ff:a6:5f:6a:44:99:37:0d:8d:57:6c:f6:cf:
         4b:7a:7a:40:29:ea:08:47:fa:a5:af:14:e1:85:e5:71:a6:b4:
         53:9f:f9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:18 2024 by rpki-client on console-ams.rpki-client.org