Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/ePHNQLG4dv0_0DwFtmAsKfev5Dk.roa
File:                     ePHNQLG4dv0_0DwFtmAsKfev5Dk.roa (raw, json)
Hash identifier:          xW10zOzXCBMcNZcUICHbYvoBovHos5ruyMOagqLeZ8s=
Subject key identifier:   78:F1:CD:40:B1:B8:76:FD:3F:D0:3C:05:B6:60:2C:29:F7:AF:E4:39
Certificate issuer:       /CN=54334e53a20624ee7f0a0d88c1a9f0af05bf166e
Certificate serial:       0102AC07
Authority key identifier: 54:33:4E:53:A2:06:24:EE:7F:0A:0D:88:C1:A9:F0:AF:05:BF:16:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VDNOU6IGJO5_Cg2IwanwrwW_Fm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/ePHNQLG4dv0_0DwFtmAsKfev5Dk.roa
Signing time:             Mon 02 May 2022 11:45:04 +0000
ROA not before:           Mon 02 May 2022 11:45:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        195.69.163.0/24 maxlen: 24
                          2a12:3e40::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16952327 (0x102ac07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54334e53a20624ee7f0a0d88c1a9f0af05bf166e
        Validity
            Not Before: May  2 11:45:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=78f1cd40b1b876fd3fd03c05b6602c29f7afe439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bb:23:54:63:2e:b1:02:e7:48:64:43:9e:e8:
                    5d:c7:71:4b:eb:53:73:80:eb:07:3b:db:bd:cb:b3:
                    72:83:cf:a0:df:1b:64:f9:b7:88:dc:5a:48:4d:3a:
                    7c:a4:95:76:85:da:97:aa:af:02:8b:d0:54:60:4d:
                    70:bc:5d:78:27:0e:ef:97:19:b1:9d:4c:4c:56:09:
                    21:ba:9d:22:0c:8b:1b:8e:11:c8:4c:d7:bf:2d:9e:
                    94:38:8d:9f:45:b6:d1:72:b1:65:7e:b0:f7:8c:93:
                    d3:20:f9:38:fb:6b:13:2a:a1:64:cc:bd:83:b5:2b:
                    44:0d:f0:44:cf:6c:83:df:ce:3f:88:b8:27:75:6a:
                    73:a5:3b:7a:7c:1c:67:69:cc:c8:b7:9e:da:e7:84:
                    b9:24:12:63:be:88:8d:20:47:40:3d:c3:f5:5d:f5:
                    8b:b2:4f:b7:99:09:32:57:02:ea:12:82:c4:28:ac:
                    ba:f9:81:b7:05:99:ec:b5:8a:77:80:f9:9b:52:3b:
                    50:cc:76:58:d9:d8:50:08:ad:f9:d6:e4:32:e7:a2:
                    d9:26:11:a1:24:fa:04:14:4f:e4:f9:c4:4f:93:d0:
                    c4:81:75:9e:5d:c5:d7:42:73:08:24:f8:72:f9:46:
                    21:60:d3:1d:e7:40:c7:4d:6d:da:cd:5f:c8:6b:62:
                    e9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F1:CD:40:B1:B8:76:FD:3F:D0:3C:05:B6:60:2C:29:F7:AF:E4:39
            X509v3 Authority Key Identifier:
                keyid:54:33:4E:53:A2:06:24:EE:7F:0A:0D:88:C1:A9:F0:AF:05:BF:16:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDNOU6IGJO5_Cg2IwanwrwW_Fm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/ePHNQLG4dv0_0DwFtmAsKfev5Dk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/VDNOU6IGJO5_Cg2IwanwrwW_Fm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.69.163.0/24
                IPv6:
                  2a12:3e40::/44

    Signature Algorithm: sha256WithRSAEncryption
         51:96:ff:9c:d5:41:2f:b3:52:51:b7:d8:77:15:3e:6b:13:fb:
         ab:b4:7a:00:43:2f:e6:12:df:6d:27:b8:b9:3d:43:b6:57:e0:
         db:2f:e7:f7:ae:47:00:9d:24:ab:1e:e5:d8:32:61:f1:f1:da:
         49:af:81:8b:9d:6f:59:dd:b5:cf:7e:26:10:d3:ec:df:fc:b1:
         6d:c2:2b:3b:b7:75:86:e3:2c:44:8b:70:ba:49:70:3a:0f:f9:
         bf:f9:29:28:99:96:fd:fe:2e:0c:db:c1:22:a3:98:8f:fd:3e:
         a4:71:cf:cb:dc:fb:c8:65:3d:01:be:72:c8:29:06:f8:63:4c:
         ef:80:78:df:5b:c0:46:b1:15:4e:0a:d0:45:d0:d1:6d:bb:cf:
         d7:37:7b:e6:e5:c0:9d:29:bb:43:b6:47:76:c1:74:2a:c4:4d:
         c4:75:ad:a7:b3:49:97:ac:89:7e:f6:c4:6f:ed:01:5e:68:48:
         a5:45:f7:9a:03:15:fe:a8:31:4a:75:18:62:c0:a3:36:a4:fb:
         26:12:8d:ef:a2:f4:20:ab:19:79:ea:6c:b2:0b:7f:ec:7c:98:
         61:2f:d8:c9:02:42:98:9f:8c:08:7f:d5:08:9b:30:1e:08:65:
         1a:1b:17:05:67:b1:17:42:88:24:8f:35:95:08:8d:9d:4b:19:
         68:a2:43:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:53 2024 by rpki-client on console-ams.rpki-client.org