Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/42d89c-00dd-4a95-8c02-dc15a3bd3fd8/1/FeDToFGXSFaZP6W2cnkR7IgoNSo.roa
File:                     FeDToFGXSFaZP6W2cnkR7IgoNSo.roa (raw, json)
Hash identifier:          dbUHt8nuyZq4YYDsfkgrnSLDIIUf5EnSN5IVA6Cn/8U=
Subject key identifier:   15:E0:D3:A0:51:97:48:56:99:3F:A5:B6:72:79:11:EC:88:28:35:2A
Certificate issuer:       /CN=d6142a2c320aaff0dddbfc3a0ba38faccbc1267b
Certificate serial:       0D67725E
Authority key identifier: D6:14:2A:2C:32:0A:AF:F0:DD:DB:FC:3A:0B:A3:8F:AC:CB:C1:26:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1hQqLDIKr_Dd2_w6C6OPrMvBJns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/42d89c-00dd-4a95-8c02-dc15a3bd3fd8/1/FeDToFGXSFaZP6W2cnkR7IgoNSo.roa
Signing time:             Sat 01 Jan 2022 11:57:22 +0000
ROA not before:           Sat 01 Jan 2022 11:57:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197393
IP address blocks:        193.138.152.0/22 maxlen: 32
                          185.138.68.0/22 maxlen: 32
                          2a07:bc0::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224883294 (0xd67725e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6142a2c320aaff0dddbfc3a0ba38faccbc1267b
        Validity
            Not Before: Jan  1 11:57:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15e0d3a051974856993fa5b6727911ec8828352a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:86:03:f0:61:a1:d1:ad:f1:b9:8d:4e:18:e0:
                    07:68:01:2c:41:18:fd:5b:65:a0:72:bf:53:8c:60:
                    9f:47:a3:fe:4f:6c:60:03:0a:18:23:97:59:b4:3a:
                    66:7f:29:11:61:e9:4e:73:bc:08:96:d4:8e:71:54:
                    03:61:45:7e:6b:56:d2:b7:25:c4:fc:53:61:0d:b9:
                    97:01:47:89:b2:56:58:52:ab:da:f0:a8:c3:a1:0f:
                    e0:ce:01:30:62:6b:b4:c8:d5:08:70:76:85:4c:13:
                    bd:1c:5f:77:a4:34:0b:ce:38:f2:68:dd:25:57:b1:
                    04:b7:1f:75:2b:c1:b7:08:73:e1:6b:a4:79:53:f0:
                    49:9b:ac:4d:84:06:82:e1:0a:3d:a5:0d:bd:22:e2:
                    68:40:4f:17:ce:af:13:36:d8:4c:4f:6c:1f:78:de:
                    dd:b1:82:51:46:2e:27:01:ba:d8:93:f0:df:49:dc:
                    c5:e0:8b:a1:f1:33:50:8d:fd:18:e2:79:34:b0:b0:
                    b4:09:a6:66:38:ea:c3:0a:a2:d1:76:04:37:e8:7c:
                    6d:1f:26:78:ff:f3:57:c7:f4:08:69:4d:2f:bd:d3:
                    45:cc:2e:ec:14:fb:6e:e3:a1:9d:2e:74:0b:eb:b6:
                    f0:d3:47:2d:5b:e8:e6:4c:46:55:4f:a2:2d:4e:ea:
                    3b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E0:D3:A0:51:97:48:56:99:3F:A5:B6:72:79:11:EC:88:28:35:2A
            X509v3 Authority Key Identifier:
                keyid:D6:14:2A:2C:32:0A:AF:F0:DD:DB:FC:3A:0B:A3:8F:AC:CB:C1:26:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hQqLDIKr_Dd2_w6C6OPrMvBJns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42d89c-00dd-4a95-8c02-dc15a3bd3fd8/1/FeDToFGXSFaZP6W2cnkR7IgoNSo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42d89c-00dd-4a95-8c02-dc15a3bd3fd8/1/1hQqLDIKr_Dd2_w6C6OPrMvBJns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.138.68.0/22
                  193.138.152.0/22
                IPv6:
                  2a07:bc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         1a:00:92:e9:eb:b5:1b:a0:0b:46:d4:1c:6c:87:9a:3e:97:0f:
         15:dc:59:08:c0:0e:c1:a9:88:30:75:3f:ee:46:a0:87:ca:3c:
         f3:89:5b:ef:62:a4:66:5f:eb:87:fe:70:4b:a5:26:c2:4c:88:
         8d:e0:60:fd:a7:ec:58:9f:4f:3a:fd:3a:72:12:ef:26:65:52:
         07:6e:28:a7:9f:53:62:9f:29:0f:0b:9f:2e:06:61:7d:31:f5:
         ba:39:63:3f:2f:7d:06:c7:0c:22:d1:cf:69:ac:3f:66:78:8f:
         de:00:83:c4:1b:d4:cc:99:41:5c:fb:35:d6:cb:f8:c4:50:89:
         0c:5f:4b:f7:d3:d4:cc:4c:2c:19:5e:ae:ad:2a:11:80:9b:c5:
         71:33:68:e0:3c:3e:a5:5a:42:f3:71:e0:b4:b3:e7:c2:33:12:
         2c:43:95:9d:ff:83:e1:84:52:11:08:0a:98:e0:76:36:f2:69:
         93:d0:cd:d0:4f:d5:65:3e:20:b6:77:72:37:95:70:6f:5d:b4:
         fa:32:9e:02:4a:cb:70:3f:41:b8:58:7b:79:83:6c:8d:1d:fc:
         2b:f0:d1:ef:6f:89:10:8c:b1:29:f1:f7:ee:57:6e:c9:2d:5f:
         87:0e:c3:60:04:08:ce:2e:db:4e:13:1f:f9:8e:a5:e4:25:0a:
         bb:49:fd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:46 2023 by rpki-client on console.sobornost.net