Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/1eTIFLFVDHqeNr7u2AiJWYM0j5E.roa
File:                     1eTIFLFVDHqeNr7u2AiJWYM0j5E.roa (raw, json)
Hash identifier:          SK9e7LT9ZcgwwUBh4giNwVwoKIcTjUY6a4JIOQ7W0J8=
Subject key identifier:   D5:E4:C8:14:B1:55:0C:7A:9E:36:BE:EE:D8:08:89:59:83:34:8F:91
Certificate issuer:       /CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
Certificate serial:       080027C7
Authority key identifier: BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/1eTIFLFVDHqeNr7u2AiJWYM0j5E.roa
Signing time:             Sat 01 Jan 2022 03:55:28 +0000
ROA not before:           Sat 01 Jan 2022 03:55:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29262
IP address blocks:        185.254.55.0/24 maxlen: 24
                          185.254.54.0/24 maxlen: 24
                          185.254.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134227911 (0x80027c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
        Validity
            Not Before: Jan  1 03:55:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d5e4c814b1550c7a9e36beeed808895983348f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d1:80:ba:9c:b8:3f:c4:ae:79:c8:98:39:eb:
                    b4:39:26:64:47:de:b8:8d:db:8c:e9:77:9e:53:e0:
                    28:97:a3:e2:e6:df:71:c3:d8:aa:f7:48:50:f9:94:
                    1d:0d:e1:5f:6e:94:7f:22:93:b4:7b:a0:50:fc:37:
                    c4:38:a4:89:ce:74:f5:8a:e0:48:d8:4f:79:a2:d6:
                    40:fb:75:5f:8e:19:6c:43:84:f8:1c:6e:a0:c4:dd:
                    a0:ca:ca:d7:a4:c4:35:f5:7b:e2:ee:a8:eb:23:e4:
                    d8:91:07:3b:8a:d1:ec:50:45:73:3a:48:d1:d1:d4:
                    a4:72:db:a3:12:ec:2c:88:78:73:d1:65:df:a5:96:
                    2b:51:48:37:d7:0c:f1:48:dc:67:2b:76:3c:8a:b2:
                    a4:c3:d0:14:27:72:20:9c:40:b4:1f:40:8f:78:be:
                    8f:ef:88:64:70:39:ca:cc:c5:8f:3a:6d:74:c3:87:
                    bc:50:3a:45:e3:6f:cb:c8:31:04:52:c5:d9:a0:79:
                    5e:51:62:b7:2d:2d:4d:43:b7:d2:c9:0d:f6:12:a8:
                    07:ec:d7:35:7a:0d:01:08:fd:3a:26:61:33:f9:12:
                    4c:f6:9d:0d:67:2c:20:3d:ae:e3:25:d7:07:72:61:
                    b0:4d:41:b2:82:74:e3:6f:69:b0:36:9b:82:c5:ba:
                    16:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E4:C8:14:B1:55:0C:7A:9E:36:BE:EE:D8:08:89:59:83:34:8F:91
            X509v3 Authority Key Identifier:
                keyid:BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/1eTIFLFVDHqeNr7u2AiJWYM0j5E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/vGniBh6MfO5C76T--fMPe_b20FM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.254.53.0-185.254.55.255

    Signature Algorithm: sha256WithRSAEncryption
         32:c2:de:c5:09:76:1b:6b:ba:fc:8e:1d:94:e7:24:4a:c1:a6:
         3a:78:6d:f7:60:f3:54:09:11:65:bb:bd:4b:fe:b9:ee:27:20:
         78:19:58:72:e2:1f:a5:3d:2b:58:fb:f2:9f:77:70:37:7e:b0:
         96:0b:83:6c:32:44:dd:9d:af:29:ba:3a:94:6a:fa:06:20:47:
         35:2e:b6:4a:62:7a:57:1c:71:78:c6:43:4f:9e:c3:12:00:63:
         ef:83:e4:db:d7:00:cf:3b:4e:7b:55:a7:cd:4d:f3:81:ab:4f:
         8f:c5:8a:4f:3a:fe:ca:6b:79:57:da:b2:2f:4b:04:b7:0a:61:
         1b:a8:f3:30:62:9f:61:19:78:fb:b9:37:e5:23:24:72:09:55:
         75:93:12:4d:40:6c:dd:c9:59:11:4f:51:7e:c5:ab:5f:bd:8a:
         ad:94:78:b6:c4:3a:48:62:46:66:55:06:3d:46:3c:6c:68:ef:
         fa:3d:0b:e1:52:ec:39:c8:ac:78:35:22:7e:a3:3d:b3:2d:1b:
         cb:5a:7a:b1:7a:63:ce:85:6d:4b:08:c5:c2:7b:a6:56:ca:3f:
         b8:24:a2:51:ce:14:3b:d0:42:c0:fa:8c:a7:0e:e5:7e:b7:a6:
         60:2e:3c:1a:3c:a9:6f:9b:f4:b2:b4:1a:ef:95:15:d4:a2:8e:
         b2:85:b1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:16 2024 by rpki-client on console-ams.rpki-client.org