Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/15d1be-0353-4e2b-b8a9-e1b90d5665fc/1/xUtrMibGj6v4tb015TUEAA70jRI.roa
File:                     xUtrMibGj6v4tb015TUEAA70jRI.roa (raw, json)
Hash identifier:          x8YhkntOTvdpKsIpLb/99wVJBpw40C/7cDsIKkgCOas=
Subject key identifier:   C5:4B:6B:32:26:C6:8F:AB:F8:B5:BD:35:E5:35:04:00:0E:F4:8D:12
Certificate issuer:       /CN=7f7a8875274853b0707c36501152f890588cdb21
Certificate serial:       012A2B25
Authority key identifier: 7F:7A:88:75:27:48:53:B0:70:7C:36:50:11:52:F8:90:58:8C:DB:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f3qIdSdIU7BwfDZQEVL4kFiM2yE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/15d1be-0353-4e2b-b8a9-e1b90d5665fc/1/xUtrMibGj6v4tb015TUEAA70jRI.roa
Signing time:             Sat 01 Jan 2022 03:56:26 +0000
ROA not before:           Sat 01 Jan 2022 03:56:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34665
IP address blocks:        93.190.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19540773 (0x12a2b25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f7a8875274853b0707c36501152f890588cdb21
        Validity
            Not Before: Jan  1 03:56:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c54b6b3226c68fabf8b5bd35e53504000ef48d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:af:67:1b:81:28:38:4a:ef:e6:29:a1:a7:5f:
                    b8:a1:a2:11:9a:bb:6a:2e:ee:41:55:18:48:cf:cd:
                    33:a9:a3:b3:fb:2d:5a:66:24:30:e5:12:4d:76:83:
                    b3:e5:2f:a6:1c:6c:75:d0:c5:9a:5e:8f:b5:e4:2d:
                    b1:2b:1e:3e:b7:81:b9:fb:7d:08:54:da:4c:14:e3:
                    f6:0e:11:f7:20:9e:f7:a9:ea:1f:8a:b1:5a:d5:04:
                    cf:60:89:60:00:c4:19:8f:bc:da:d2:e4:6f:23:f0:
                    55:57:ee:f4:53:64:45:91:a8:8e:80:db:ca:d9:87:
                    f5:b7:5d:c9:ce:1b:ce:a8:aa:70:1c:06:7d:48:a4:
                    37:9c:75:e4:4d:40:e5:b6:d2:48:b1:4e:fe:17:be:
                    14:e8:49:2b:ef:73:40:9a:15:ca:0c:b5:81:5a:6b:
                    6f:87:a2:ec:f9:83:f0:36:52:23:57:93:10:0e:a5:
                    e1:9e:d2:fc:d9:15:d8:b1:70:10:04:e7:c1:73:0d:
                    1b:dc:81:83:7b:ad:f0:b4:31:56:0d:83:94:fb:85:
                    31:c9:5e:54:8a:ac:e6:36:bf:ff:43:6c:18:de:37:
                    05:93:c3:da:9c:e6:18:1b:68:81:95:fc:e5:2a:66:
                    1e:00:4d:54:ed:28:25:17:15:75:5b:66:39:b5:b5:
                    4e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4B:6B:32:26:C6:8F:AB:F8:B5:BD:35:E5:35:04:00:0E:F4:8D:12
            X509v3 Authority Key Identifier:
                keyid:7F:7A:88:75:27:48:53:B0:70:7C:36:50:11:52:F8:90:58:8C:DB:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3qIdSdIU7BwfDZQEVL4kFiM2yE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/15d1be-0353-4e2b-b8a9-e1b90d5665fc/1/xUtrMibGj6v4tb015TUEAA70jRI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/15d1be-0353-4e2b-b8a9-e1b90d5665fc/1/f3qIdSdIU7BwfDZQEVL4kFiM2yE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.190.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:d3:0e:3a:a6:9d:7d:ea:58:6e:f3:0d:b5:52:f1:b4:e1:3c:
         78:a3:a8:3f:c2:78:eb:22:17:98:93:29:95:c4:86:90:6e:00:
         2f:d6:ad:16:9a:10:be:dc:29:bb:43:18:96:31:d5:1f:d5:57:
         02:3a:1b:c6:4b:f5:18:63:03:f2:c9:98:e3:f0:54:4f:17:f8:
         c0:c8:5e:30:89:0d:77:b4:09:2f:b7:a8:c7:f3:cd:b5:e2:b2:
         9d:21:10:26:da:57:59:fa:8b:5f:40:50:10:b4:78:84:8a:d2:
         26:9b:27:9d:b0:7c:38:9c:6e:aa:fc:cc:29:8d:fe:87:ec:ea:
         59:ef:81:11:6b:ad:66:f5:62:45:74:b1:70:90:be:32:7b:0f:
         26:64:6d:92:12:9f:53:5d:99:da:9b:14:fd:cb:62:d3:af:1c:
         a1:86:36:71:b7:b0:32:9b:c5:3f:71:e4:e1:14:30:7c:5c:33:
         5a:45:82:d6:04:95:0f:80:38:9e:e3:81:b2:22:63:a3:44:a9:
         06:ec:9c:9e:28:05:84:fb:f5:d2:53:0b:eb:ac:bc:1e:6e:43:
         6c:3c:ec:8f:dd:78:d3:a6:9a:e1:e5:84:99:37:ac:9f:cf:fd:
         e7:44:bc:0e:50:a2:ac:2f:6b:07:cb:d9:10:f7:31:30:2b:b5:
         0c:40:a6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:35 2024 by rpki-client on console-ams.rpki-client.org