Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d11f09-8f53-4a45-84e5-38f520ac7966/1/e4o1Av31Ub9MuhO8wH-aXZCKs3g.roa
File:                     e4o1Av31Ub9MuhO8wH-aXZCKs3g.roa (raw, json)
Hash identifier:          JBLCMoiZPAiVtYz6P2Yr24yOBsw6Bcv7l5/oJ4YnczM=
Subject key identifier:   7B:8A:35:02:FD:F5:51:BF:4C:BA:13:BC:C0:7F:9A:5D:90:8A:B3:78
Certificate issuer:       /CN=313f49d36296a1565b85107c29aea38920df0dfa
Certificate serial:       046B57A9
Authority key identifier: 31:3F:49:D3:62:96:A1:56:5B:85:10:7C:29:AE:A3:89:20:DF:0D:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MT9J02KWoVZbhRB8Ka6jiSDfDfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/d11f09-8f53-4a45-84e5-38f520ac7966/1/e4o1Av31Ub9MuhO8wH-aXZCKs3g.roa
Signing time:             Sat 01 Jan 2022 13:59:52 +0000
ROA not before:           Sat 01 Jan 2022 13:59:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15577
IP address blocks:        193.57.127.0/24 maxlen: 24
                          193.57.140.0/24 maxlen: 24
                          193.57.104.0/24 maxlen: 24
                          193.57.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74143657 (0x46b57a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=313f49d36296a1565b85107c29aea38920df0dfa
        Validity
            Not Before: Jan  1 13:59:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7b8a3502fdf551bf4cba13bcc07f9a5d908ab378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2e:92:30:04:57:c2:52:39:f7:3c:87:73:07:
                    a7:3c:0f:e6:00:fa:f8:c2:0d:d4:0d:da:80:0b:ca:
                    9f:29:63:ae:79:30:6c:45:13:a6:25:5b:29:32:bf:
                    4b:b5:cd:4d:3e:b1:cf:a6:8f:7d:c7:66:48:82:ca:
                    a3:ec:1d:a0:4d:2b:e6:20:d4:b9:ee:48:23:40:d1:
                    41:48:e0:97:fb:8c:98:c4:f6:54:09:49:0d:7b:75:
                    e9:82:1f:4f:5d:42:3f:15:0c:a1:0b:3b:b1:68:49:
                    25:f4:ec:3d:84:af:5c:c6:47:b9:8b:2f:90:9d:50:
                    38:55:4c:38:b9:cf:46:5d:31:2f:b7:e5:3c:52:07:
                    32:0c:3e:f3:c3:fe:da:f8:2b:99:05:2f:20:b5:78:
                    19:e8:9b:21:d2:81:34:9e:62:2b:6e:3b:c0:7f:75:
                    c1:26:a3:78:14:f8:e6:e0:47:14:c9:1b:67:92:37:
                    2d:c6:a0:55:a2:c7:22:ea:91:4c:9c:f0:39:fd:f8:
                    1f:0b:6a:b9:e3:b4:1a:d7:f1:d8:63:9a:4f:27:f0:
                    ff:0b:65:ab:fb:9e:4b:15:43:56:45:ae:bd:77:96:
                    0b:f4:79:7c:87:01:c1:86:e1:89:86:8f:48:e7:19:
                    04:9a:12:87:59:1c:04:3a:64:bd:9e:7e:d1:42:86:
                    83:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8A:35:02:FD:F5:51:BF:4C:BA:13:BC:C0:7F:9A:5D:90:8A:B3:78
            X509v3 Authority Key Identifier:
                keyid:31:3F:49:D3:62:96:A1:56:5B:85:10:7C:29:AE:A3:89:20:DF:0D:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT9J02KWoVZbhRB8Ka6jiSDfDfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d11f09-8f53-4a45-84e5-38f520ac7966/1/e4o1Av31Ub9MuhO8wH-aXZCKs3g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d11f09-8f53-4a45-84e5-38f520ac7966/1/MT9J02KWoVZbhRB8Ka6jiSDfDfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.57.104.0/24
                  193.57.108.0/24
                  193.57.127.0/24
                  193.57.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:90:0c:3e:34:71:fd:f3:fd:f4:e1:0d:7e:12:a1:dc:70:84:
         6a:9f:86:68:bf:89:80:6b:a3:c9:05:54:0f:96:b4:09:b8:79:
         c1:1a:4e:11:9a:4a:d5:2f:89:94:8c:e1:04:10:a3:14:74:82:
         2c:12:a0:7f:f9:fb:02:99:78:a8:7c:e3:a0:ef:5c:9b:57:7f:
         82:48:08:b5:87:4c:50:56:e2:b9:40:34:1c:17:62:d9:dc:50:
         3d:93:b8:ea:23:f5:24:9d:0a:03:38:5f:64:9b:07:9d:3e:13:
         d3:82:82:cb:56:df:41:84:a4:6e:b1:4e:a4:f7:20:37:c6:8a:
         17:c6:c8:a9:70:42:b0:65:c2:4c:1f:22:ab:4a:98:fb:70:59:
         9f:08:32:b9:27:93:45:16:c5:ae:09:44:e3:02:c6:e6:8e:f0:
         1b:4b:9e:aa:d3:cf:bc:15:2c:35:b6:96:e9:27:50:4c:56:2e:
         f9:cd:8b:ff:3e:6c:e3:fb:9a:4b:08:f4:42:93:c2:30:de:06:
         ac:db:31:e6:4f:54:08:11:cb:fa:9f:1c:b5:ee:68:3a:91:69:
         2a:03:a2:ed:d8:9c:25:eb:fe:7b:5b:5d:a1:84:ac:23:4a:6d:
         e7:e1:14:08:dc:9b:3f:9c:90:65:14:57:23:34:9a:49:82:fb:
         c9:b5:4d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:49 2024 by rpki-client on console-fra.rpki-client.org