Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/49e0d3-771c-4ebf-9abd-8dc98796b2d6/1/_W99gErepgjL5uxPV0OfSHmtXWU.roa
File:                     _W99gErepgjL5uxPV0OfSHmtXWU.roa (raw, json)
Hash identifier:          JVjbeIafeyjxcc9EcsXHQQ7Sud9Qkubc9jjKMuK0Be0=
Subject key identifier:   FD:6F:7D:80:4A:DE:A6:08:CB:E6:EC:4F:57:43:9F:48:79:AD:5D:65
Certificate issuer:       /CN=f14bd49d65b3c7902b7fd5a33694cd31bd8606e7
Certificate serial:       E8495B
Authority key identifier: F1:4B:D4:9D:65:B3:C7:90:2B:7F:D5:A3:36:94:CD:31:BD:86:06:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UvUnWWzx5Arf9WjNpTNMb2GBuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/49e0d3-771c-4ebf-9abd-8dc98796b2d6/1/_W99gErepgjL5uxPV0OfSHmtXWU.roa
Signing time:             Fri 18 Feb 2022 20:46:30 +0000
ROA not before:           Fri 18 Feb 2022 20:46:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48031
IP address blocks:        193.163.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15223131 (0xe8495b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f14bd49d65b3c7902b7fd5a33694cd31bd8606e7
        Validity
            Not Before: Feb 18 20:46:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fd6f7d804adea608cbe6ec4f57439f4879ad5d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d0:c4:66:eb:b6:bc:b3:30:43:76:01:3d:80:
                    71:a0:e7:02:49:7b:f9:9b:cd:af:ee:2c:ec:76:4d:
                    d0:f4:64:9d:93:2b:63:b2:77:bb:62:76:d6:15:5d:
                    13:33:c3:a8:e8:b8:16:9b:f7:e9:74:d9:93:1f:b6:
                    07:09:f2:26:50:fb:47:1f:d6:2a:5d:07:c2:0d:8d:
                    23:4c:41:f4:31:8f:0d:94:b3:bb:4d:f6:47:bf:5b:
                    cf:00:78:6e:07:ea:18:53:27:1b:ed:57:72:85:52:
                    92:09:c8:18:ed:b5:41:7a:05:22:e6:a1:a0:07:7e:
                    e1:2f:f2:15:c1:62:16:a3:5e:f8:3e:c6:34:1f:69:
                    28:55:00:12:d1:06:fa:17:a8:d9:b8:aa:d3:17:64:
                    3d:a9:e9:fa:08:f6:80:96:0b:80:47:6c:f3:8c:64:
                    6d:29:ea:b0:d8:21:29:06:87:3e:54:f1:5c:a6:a9:
                    47:9e:ba:67:c0:7c:a3:b2:cb:81:58:a3:0a:64:49:
                    46:4f:e6:f0:6d:99:18:3b:00:67:7d:1f:ec:91:9f:
                    28:03:4d:6c:bd:1a:34:d4:b7:42:61:33:0b:5e:15:
                    67:41:9f:0d:3a:04:de:60:81:84:77:bc:75:9d:0f:
                    6c:0f:69:74:d8:50:b8:00:e0:4b:fe:cd:8d:d6:84:
                    2f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6F:7D:80:4A:DE:A6:08:CB:E6:EC:4F:57:43:9F:48:79:AD:5D:65
            X509v3 Authority Key Identifier:
                keyid:F1:4B:D4:9D:65:B3:C7:90:2B:7F:D5:A3:36:94:CD:31:BD:86:06:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UvUnWWzx5Arf9WjNpTNMb2GBuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/49e0d3-771c-4ebf-9abd-8dc98796b2d6/1/_W99gErepgjL5uxPV0OfSHmtXWU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/49e0d3-771c-4ebf-9abd-8dc98796b2d6/1/8UvUnWWzx5Arf9WjNpTNMb2GBuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:29:b7:de:16:c5:54:5d:56:56:cf:48:ff:73:b2:92:b3:d8:
         a8:8c:8f:34:ee:06:d2:35:32:f5:60:cb:f3:08:a8:cd:08:f3:
         34:ba:88:f6:c9:2e:38:83:1c:a4:48:c7:56:35:5a:84:44:47:
         d2:4c:af:60:34:f0:49:36:a3:9e:06:4f:53:89:ed:a6:12:82:
         ab:9a:24:15:cf:30:57:a3:b3:46:2d:e7:d8:b0:f3:2d:92:67:
         2f:0e:c5:41:69:28:da:ea:a1:b2:59:88:97:03:fc:f7:a7:da:
         a5:5e:ef:0d:aa:97:f6:ba:29:ac:df:80:51:97:6a:09:79:c5:
         47:f8:61:39:ff:dc:c5:70:53:9f:4a:a5:d9:e0:f7:63:d6:6c:
         3d:75:ed:9c:62:c5:af:4a:33:c1:c6:1c:05:f0:82:fa:dd:2b:
         6e:ce:05:33:46:77:cd:38:6d:b0:17:95:54:23:6e:03:51:2e:
         a2:cf:1c:ea:a3:27:88:cd:05:95:c6:9e:4b:ce:75:c4:d2:ad:
         79:46:52:5a:f1:79:ea:b1:93:51:13:b8:6f:ed:37:7c:c4:a2:
         bb:6f:21:c1:15:e0:a1:2f:65:1b:d9:0e:37:f4:3e:d1:c3:2d:
         b2:2a:62:8e:83:3d:5b:74:fc:8d:0c:01:c9:8a:cc:8a:2d:da:
         27:6b:51:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:13 2024 by rpki-client on console-fra.rpki-client.org