Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/DKCys4KRYdnrGXDLl1nVf9nVmRA.roa
File:                     DKCys4KRYdnrGXDLl1nVf9nVmRA.roa (raw, json)
Hash identifier:          IaLK2xfRNIne0nZPaZ2/jfh45tolOprh7fcjo3irVI8=
Subject key identifier:   0C:A0:B2:B3:82:91:61:D9:EB:19:70:CB:97:59:D5:7F:D9:D5:99:10
Certificate issuer:       /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial:       0195898BB6FAB4791A897FDBB23D4F960356
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/DKCys4KRYdnrGXDLl1nVf9nVmRA.roa
Signing time:             Wed 12 Mar 2025 08:49:49 +0000
ROA not before:           Wed 12 Mar 2025 08:49:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     216054
IP address blocks:        193.84.255.0/24 maxlen: 24
                          2a14:4f80::/29 maxlen: 39
                          2a14:4f85::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:89:8b:b6:fa:b4:79:1a:89:7f:db:b2:3d:4f:96:03:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
        Validity
            Not Before: Mar 12 08:49:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0ca0b2b3829161d9eb1970cb9759d57fd9d59910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:00:0d:39:b6:a7:53:13:83:3b:52:a8:21:e6:
                    89:08:4d:94:af:72:81:44:c6:38:e8:fc:17:6c:48:
                    b0:83:b5:7e:c7:a1:a6:bd:00:d4:39:40:03:4f:a0:
                    df:d0:ed:88:78:ce:e1:94:ad:4d:ff:2b:4e:fe:4f:
                    8c:42:da:3e:26:e8:aa:74:b1:f2:68:e2:91:59:e0:
                    bf:86:91:e1:8e:4d:93:76:d9:cc:42:29:ae:d5:83:
                    43:56:83:19:51:79:fa:5c:c5:04:9e:69:d0:0e:b0:
                    fc:16:5a:a6:51:d2:20:67:22:b4:98:c3:4b:dd:83:
                    57:f9:60:c1:87:22:ac:0c:16:71:2b:89:74:df:04:
                    ac:44:33:cb:1f:ce:c9:e6:b4:86:5f:5b:11:39:55:
                    a9:e3:11:7e:99:23:d0:c5:2b:ad:52:34:f5:1a:87:
                    2a:34:d3:06:de:16:7a:19:86:6e:ea:ba:f3:14:1c:
                    d1:bd:e3:60:54:88:7d:b8:17:d4:0c:d0:49:26:c1:
                    82:b3:58:6f:7e:dc:08:d4:d3:db:a8:2c:53:d8:5e:
                    4f:41:1e:a2:dd:d6:e1:da:ea:71:50:b5:9c:75:bd:
                    5e:ba:20:9a:c3:26:d1:21:16:5f:da:97:04:36:a8:
                    35:42:3f:02:6d:56:4c:11:fb:11:a5:a4:4e:c7:c5:
                    e0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A0:B2:B3:82:91:61:D9:EB:19:70:CB:97:59:D5:7F:D9:D5:99:10
            X509v3 Authority Key Identifier:
                keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/DKCys4KRYdnrGXDLl1nVf9nVmRA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.84.255.0/24
                IPv6:
                  2a14:4f80::/29

    Signature Algorithm: sha256WithRSAEncryption
         5d:7f:db:5d:b2:ae:8c:0b:24:8d:46:ee:aa:d9:78:0e:81:12:
         5c:2f:4e:37:27:c2:d0:29:9c:39:fb:cd:5d:b1:f2:ec:ef:f6:
         0a:50:43:f8:fe:2e:93:16:16:86:87:0e:91:ee:8d:07:04:dc:
         5f:cc:bc:a0:0c:cd:df:3b:cb:d9:fe:75:c9:a1:4a:6e:fa:15:
         70:a8:dd:85:09:78:9d:b3:a2:9d:6a:83:6b:9d:31:fc:1c:bb:
         4f:f9:6d:ad:3a:a5:2b:72:ec:aa:bd:bd:be:1b:c7:fa:93:57:
         e2:82:04:c5:66:ce:c3:7c:72:a7:b1:f8:6e:70:e4:22:26:e1:
         11:6b:df:fd:48:0d:54:b6:b3:d6:ba:6b:75:b5:99:79:1a:3e:
         47:29:db:7b:ad:25:c5:c1:57:76:83:ee:9c:2b:46:a9:4f:ac:
         d6:b9:4b:73:6b:ea:db:09:ad:83:a2:82:e3:8f:e0:cb:95:b5:
         96:0f:92:92:83:72:24:09:ae:ba:70:f9:5a:e4:b3:7d:ba:8b:
         2b:2e:c2:37:0b:a9:0f:6f:38:f1:c0:62:aa:33:78:f5:a4:86:
         26:49:d7:e6:1a:fa:fe:56:9b:32:93:3e:17:8c:5c:f2:22:35:
         d6:b5:46:cd:0b:01:fa:a3:f4:bd:ca:e8:90:6e:33:9f:8b:ad:
         db:ea:4a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----