Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/FUlgsDmX5jSOQVIrHLiBh3G65M0.roa
File:                     FUlgsDmX5jSOQVIrHLiBh3G65M0.roa (raw, json)
Hash identifier:          vZt/Rr2w/RSV2naAABsEc53Ygnv1nUp2eqM53FymB1o=
Subject key identifier:   15:49:60:B0:39:97:E6:34:8E:41:52:2B:1C:B8:81:87:71:BA:E4:CD
Certificate issuer:       /CN=33980d41e32a5616382e906840264945af02d67e
Certificate serial:       018E8A21
Authority key identifier: 33:98:0D:41:E3:2A:56:16:38:2E:90:68:40:26:49:45:AF:02:D6:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M5gNQeMqVhY4LpBoQCZJRa8C1n4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/FUlgsDmX5jSOQVIrHLiBh3G65M0.roa
Signing time:             Fri 18 Mar 2022 09:29:06 +0000
ROA not before:           Fri 18 Mar 2022 09:29:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        94.103.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26118689 (0x18e8a21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33980d41e32a5616382e906840264945af02d67e
        Validity
            Not Before: Mar 18 09:29:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=154960b03997e6348e41522b1cb8818771bae4cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5a:7f:16:32:f4:95:94:0c:ab:b0:c0:08:cf:
                    33:d6:68:04:b7:eb:f0:65:3b:59:ad:14:9c:c0:73:
                    88:f6:1d:3e:91:d5:4a:ed:d4:8d:c9:4f:13:46:6f:
                    b5:5a:7f:76:79:79:be:aa:64:c3:a2:f3:29:dc:0c:
                    5e:86:f6:cf:c2:dc:c3:65:20:a8:8d:ef:77:8d:2f:
                    71:c9:2c:47:64:6e:d5:22:f5:5d:da:37:96:06:59:
                    fa:56:6a:1f:62:0f:ec:4d:c5:47:b7:ff:b7:18:68:
                    8e:ac:3d:5e:04:de:ac:ab:99:b5:d8:86:34:44:0e:
                    34:80:2c:98:52:1f:af:eb:77:51:cf:f7:a0:76:07:
                    97:55:f0:e3:ad:be:e3:f7:36:13:ec:28:ae:fa:0f:
                    34:f2:46:8a:7d:f6:49:0b:71:1e:88:81:8f:00:ff:
                    fa:46:85:51:07:e5:67:11:f8:c6:d3:4f:27:a2:b8:
                    62:7e:9d:be:59:bd:85:eb:fc:3f:cc:c6:11:73:47:
                    0e:08:32:01:06:99:a2:5a:95:c6:92:57:9a:a4:a8:
                    50:b3:67:41:c9:51:77:e8:94:0e:8f:06:d5:2d:47:
                    db:d6:f1:5e:7c:7e:86:a0:1b:85:fa:61:07:6a:e0:
                    99:ab:38:c7:5c:2a:ee:bd:6b:87:3e:71:0e:90:6a:
                    c3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:49:60:B0:39:97:E6:34:8E:41:52:2B:1C:B8:81:87:71:BA:E4:CD
            X509v3 Authority Key Identifier:
                keyid:33:98:0D:41:E3:2A:56:16:38:2E:90:68:40:26:49:45:AF:02:D6:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5gNQeMqVhY4LpBoQCZJRa8C1n4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/FUlgsDmX5jSOQVIrHLiBh3G65M0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/M5gNQeMqVhY4LpBoQCZJRa8C1n4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:e8:9a:d8:28:31:b2:10:ea:da:08:2d:61:7d:7b:fa:61:6a:
         c3:d2:d5:a6:2a:93:e4:f4:9f:04:42:21:b6:af:c0:dc:39:6d:
         45:35:09:fc:c4:76:f4:20:d9:e5:89:c3:ba:18:87:e8:c1:f3:
         95:32:1f:31:1f:a8:3b:1d:8f:f1:5a:0f:68:7e:9f:5c:c0:93:
         f3:75:bf:79:0c:13:8a:83:bf:bb:f5:01:aa:63:b8:fe:82:41:
         21:e1:ec:d2:30:48:12:e6:fa:7b:5b:54:99:e1:41:eb:8f:17:
         49:db:8e:17:3d:8f:3f:c1:a6:1b:4e:94:e7:b9:d2:08:0a:87:
         8a:cc:ca:53:4e:6c:16:f8:3b:e1:11:20:f5:ff:bb:a0:6e:ad:
         89:f8:71:96:c6:09:b0:23:a1:99:cb:0a:d6:d3:f3:3c:d2:ae:
         8b:d6:91:2d:80:99:88:07:6e:0c:f1:1f:ac:e7:eb:d0:0d:97:
         da:95:9d:15:3d:dd:8f:49:c5:2c:40:76:d7:c2:0d:90:ae:21:
         33:39:19:ef:00:2e:59:e1:9e:7b:8a:2f:d5:0e:f3:a8:12:c6:
         ee:87:95:4e:8b:3c:71:01:a4:c7:e8:f3:f5:c5:db:50:18:57:
         9e:d0:be:87:91:18:86:bb:b9:b9:8c:91:7e:37:36:84:87:88:
         9b:67:b3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:54 2024 by rpki-client on console-ams.rpki-client.org