Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/fa3318-c4e9-44cd-818c-4edac347a3b1/1/08PoaKrnmvW7PWM5Xa3h86xj4qM.roa
File:                     08PoaKrnmvW7PWM5Xa3h86xj4qM.roa (raw, json)
Hash identifier:          11uCHu+OWVxoLXGm0qFbrnyNdq+wfNxGTp6X0dqC+Ho=
Subject key identifier:   D3:C3:E8:68:AA:E7:9A:F5:BB:3D:63:39:5D:AD:E1:F3:AC:63:E2:A3
Certificate issuer:       /CN=134964bfa8680fa1a1b13664b878bfd4ff63aadd
Certificate serial:       0B1B0979
Authority key identifier: 13:49:64:BF:A8:68:0F:A1:A1:B1:36:64:B8:78:BF:D4:FF:63:AA:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0lkv6hoD6GhsTZkuHi_1P9jqt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/fa3318-c4e9-44cd-818c-4edac347a3b1/1/08PoaKrnmvW7PWM5Xa3h86xj4qM.roa
Signing time:             Sat 01 Jan 2022 07:58:08 +0000
ROA not before:           Sat 01 Jan 2022 07:58:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58273
IP address blocks:        194.113.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186321273 (0xb1b0979)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134964bfa8680fa1a1b13664b878bfd4ff63aadd
        Validity
            Not Before: Jan  1 07:58:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d3c3e868aae79af5bb3d63395dade1f3ac63e2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:db:6b:0b:91:28:9d:83:be:98:e5:d3:6e:91:
                    f3:fd:8e:3d:87:8a:ae:c7:63:8a:0a:b0:74:ea:83:
                    f2:18:bf:54:67:70:1d:f3:ac:5b:ce:45:ac:16:a5:
                    f1:e7:6d:8a:b2:f9:a0:a2:dd:bb:1b:57:ba:2a:64:
                    aa:a1:be:af:91:d7:9c:52:a0:19:dd:92:25:83:3f:
                    49:6d:db:13:b2:ce:6d:8f:ec:4a:69:db:55:c2:52:
                    af:f3:93:0a:1a:5a:6f:43:09:4e:58:b2:a6:01:c7:
                    06:26:bc:5e:50:34:db:e1:a9:64:98:73:38:2a:8a:
                    2d:2e:5a:4d:a0:60:90:8a:4a:28:5b:a9:41:9d:28:
                    e5:10:b1:26:e1:1f:ec:b5:14:41:82:55:5e:14:9f:
                    8e:8b:f3:0c:d9:ab:44:00:18:2a:3e:fa:3a:2f:cd:
                    6d:92:05:11:23:bb:de:00:33:b5:3f:09:7b:01:ca:
                    bd:4e:99:d9:73:11:ba:18:f3:32:b8:79:c6:d2:6d:
                    5b:7d:7e:46:d3:52:93:7a:57:b6:70:13:92:a0:2d:
                    73:fe:99:cc:24:21:c8:4e:9a:5e:a3:1d:f9:0e:b6:
                    c0:35:83:ff:27:b6:0a:e9:24:cf:14:f4:b2:f6:e1:
                    56:8c:5a:03:67:af:2d:af:20:e0:56:87:45:7d:01:
                    8c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C3:E8:68:AA:E7:9A:F5:BB:3D:63:39:5D:AD:E1:F3:AC:63:E2:A3
            X509v3 Authority Key Identifier:
                keyid:13:49:64:BF:A8:68:0F:A1:A1:B1:36:64:B8:78:BF:D4:FF:63:AA:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0lkv6hoD6GhsTZkuHi_1P9jqt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/fa3318-c4e9-44cd-818c-4edac347a3b1/1/08PoaKrnmvW7PWM5Xa3h86xj4qM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/fa3318-c4e9-44cd-818c-4edac347a3b1/1/E0lkv6hoD6GhsTZkuHi_1P9jqt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.113.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:2c:c2:c8:04:a8:32:4e:56:c8:57:c6:af:fe:31:5a:f3:68:
         5d:bd:a0:21:d8:ab:a7:10:ec:7d:db:9a:1d:f2:1e:7c:8d:c5:
         e8:d0:bd:5b:b4:bd:98:9c:c2:77:26:78:8c:5f:10:45:c3:c8:
         6b:0c:56:e3:33:71:60:07:9c:e7:0d:6b:42:ad:49:8b:db:cd:
         b8:20:86:05:17:92:02:20:f0:af:7c:2a:11:d4:18:0c:6e:f5:
         1a:21:04:d2:d9:cb:15:d6:c2:0a:cb:e9:59:d8:20:2e:2d:eb:
         08:ad:59:fb:d4:93:39:b2:e7:ae:15:01:18:01:34:60:fb:52:
         3b:32:f5:6a:d9:90:78:25:f0:29:0f:b1:68:b1:fd:95:dc:5d:
         61:13:5e:9a:66:7f:84:82:42:bb:f6:63:66:d3:6b:49:d0:96:
         34:47:66:d4:f5:01:b6:c2:dd:b7:80:84:a7:d2:89:4d:2a:cb:
         7b:61:47:f4:db:48:c9:4d:a8:dd:40:fc:5f:0c:04:dc:38:d4:
         2e:8b:d3:25:0a:32:17:61:8f:49:e2:93:22:8d:e1:8c:93:fc:
         9f:98:f1:a6:40:d3:e4:ed:02:88:2b:e5:3b:bf:79:be:89:73:
         18:18:da:59:9f:b9:a5:27:9e:97:b7:3d:e0:75:6d:6a:3f:71:
         a9:62:a4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:21 2024 by rpki-client on console-fra.rpki-client.org