Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/cf59fc-653f-44eb-aca1-c5d1f27b532d/1/YGMfwHKNx1tTEbkx6W-dAlyeOfs.roa
File:                     YGMfwHKNx1tTEbkx6W-dAlyeOfs.roa (raw, json)
Hash identifier:          5hn9c1d1Qw2YP647OzzURSmt+js4ZwN1Il6+X2G2C84=
Subject key identifier:   60:63:1F:C0:72:8D:C7:5B:53:11:B9:31:E9:6F:9D:02:5C:9E:39:FB
Certificate issuer:       /CN=fc18de6e57903c243ca2fd14154f55ebe61ce56a
Certificate serial:       37BE37A1
Authority key identifier: FC:18:DE:6E:57:90:3C:24:3C:A2:FD:14:15:4F:55:EB:E6:1C:E5:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_BjebleQPCQ8ov0UFU9V6-Yc5Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/cf59fc-653f-44eb-aca1-c5d1f27b532d/1/YGMfwHKNx1tTEbkx6W-dAlyeOfs.roa
Signing time:             Sat 01 Jan 2022 09:03:36 +0000
ROA not before:           Sat 01 Jan 2022 09:03:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1828
IP address blocks:        164.93.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 935212961 (0x37be37a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc18de6e57903c243ca2fd14154f55ebe61ce56a
        Validity
            Not Before: Jan  1 09:03:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=60631fc0728dc75b5311b931e96f9d025c9e39fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:76:d9:69:d7:f2:c4:40:6d:72:b2:63:c7:2a:
                    44:e6:66:ac:52:f1:d6:76:30:dc:b9:63:30:42:ab:
                    0d:4a:60:f6:ff:3e:8a:24:de:0e:ad:80:4e:1c:4c:
                    9c:68:4d:ae:19:bc:ec:61:24:4a:49:2c:13:17:b0:
                    b3:4d:9a:24:17:8c:40:a9:e9:37:60:38:6d:f7:f2:
                    8d:c2:c5:a4:4e:ab:91:a1:a5:7d:45:e8:34:08:b4:
                    80:82:95:4b:e2:a0:6e:d2:cc:cf:42:a4:fc:04:a8:
                    a9:71:6d:0d:44:dd:34:fa:43:46:de:96:e6:56:52:
                    d4:f1:65:54:c6:19:b5:21:e4:20:88:45:48:64:9e:
                    d1:3c:46:66:c8:cb:2e:ba:7e:6f:d5:6d:e6:78:b8:
                    1d:23:4f:5d:81:c2:c9:ab:1e:d0:ef:a3:e6:20:f2:
                    40:ec:4e:04:1c:20:6f:98:0e:c1:17:00:58:b3:19:
                    f8:5f:2c:2d:cd:5f:b6:a2:dd:cb:3c:1d:da:f8:5d:
                    d8:f1:48:f9:c8:5c:26:e6:69:a2:b6:3a:59:56:6e:
                    94:21:a7:7f:29:4e:dc:d8:9c:24:30:1a:f0:66:b5:
                    84:d4:60:4e:44:3e:37:5e:bb:26:e5:6a:01:78:67:
                    02:f2:fe:36:6c:c4:c5:02:8f:94:a1:78:bb:ab:77:
                    c6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:63:1F:C0:72:8D:C7:5B:53:11:B9:31:E9:6F:9D:02:5C:9E:39:FB
            X509v3 Authority Key Identifier:
                keyid:FC:18:DE:6E:57:90:3C:24:3C:A2:FD:14:15:4F:55:EB:E6:1C:E5:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BjebleQPCQ8ov0UFU9V6-Yc5Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cf59fc-653f-44eb-aca1-c5d1f27b532d/1/YGMfwHKNx1tTEbkx6W-dAlyeOfs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cf59fc-653f-44eb-aca1-c5d1f27b532d/1/_BjebleQPCQ8ov0UFU9V6-Yc5Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.93.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6e:97:aa:ad:01:06:8e:a2:85:03:20:ff:7a:36:e3:bb:aa:b1:
         7b:36:1b:fd:32:2d:88:55:55:a8:a0:cd:7e:cb:6f:a2:6d:29:
         f7:36:52:e2:c2:80:34:cf:b8:ed:25:78:0c:78:fc:f8:9c:22:
         a1:29:32:cb:82:46:2a:4a:0a:bb:25:6c:0e:0d:77:aa:a5:9f:
         2b:eb:41:1d:9b:8c:9f:1b:e7:34:a6:a5:7f:52:cf:25:61:6a:
         19:73:7f:ff:a7:0f:7f:15:e0:67:24:5a:e3:f8:de:17:4a:97:
         82:76:ed:31:74:30:74:d7:ea:ab:7a:8d:a7:71:cf:c9:62:64:
         42:29:eb:3d:c4:94:25:a9:7f:01:7e:1e:52:92:07:2b:4b:72:
         8e:cd:75:d2:f0:0a:6c:f0:44:a8:f4:03:ba:36:53:d2:84:f8:
         52:ec:95:1d:44:74:28:00:f4:b2:6b:33:8e:ae:84:04:46:0d:
         97:f4:f8:bb:10:26:98:e4:fc:af:89:7d:de:7f:4f:1f:a0:c8:
         18:9e:e6:23:de:2b:b5:5f:65:8d:5f:ae:0d:81:bb:82:f8:2d:
         d1:ec:02:56:ec:16:32:64:87:c6:64:94:14:35:e9:3f:1a:d2:
         2e:52:f2:a2:f6:f4:e7:fb:93:4a:cc:87:bd:2f:6e:5f:60:57:
         f5:cd:41:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:17 2024 by rpki-client on console-fra.rpki-client.org