Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/813d16-d6ab-4ea1-a414-0fa6907cba12/1/pVDswIaeQoUNlSy9cNtqXjgNeZ8.roa
File:                     pVDswIaeQoUNlSy9cNtqXjgNeZ8.roa (raw, json)
Hash identifier:          Ez1l6KK16ELi8S35F030TUkQyF5LDJhGSj/SUaPZcDA=
Subject key identifier:   A5:50:EC:C0:86:9E:42:85:0D:95:2C:BD:70:DB:6A:5E:38:0D:79:9F
Certificate issuer:       /CN=c40939a28c4b00489a92b42161aa82366acdc453
Certificate serial:       1B75B6
Authority key identifier: C4:09:39:A2:8C:4B:00:48:9A:92:B4:21:61:AA:82:36:6A:CD:C4:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xAk5ooxLAEiakrQhYaqCNmrNxFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/813d16-d6ab-4ea1-a414-0fa6907cba12/1/pVDswIaeQoUNlSy9cNtqXjgNeZ8.roa
Signing time:             Sat 01 Jan 2022 01:03:20 +0000
ROA not before:           Sat 01 Jan 2022 01:03:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57271
IP address blocks:        178.212.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1799606 (0x1b75b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c40939a28c4b00489a92b42161aa82366acdc453
        Validity
            Not Before: Jan  1 01:03:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a550ecc0869e42850d952cbd70db6a5e380d799f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0a:8b:9a:6e:63:7e:db:bd:44:7e:82:ab:8c:
                    09:2a:b8:f0:8c:d0:48:f1:fb:0c:69:69:49:07:a5:
                    27:d8:1f:84:97:91:ea:9e:79:07:4a:07:df:98:51:
                    a9:f5:b2:f2:a9:2e:79:fc:45:47:ac:c4:e0:98:86:
                    2e:77:a7:a6:db:b4:88:e4:fb:fe:58:8b:0e:5f:4c:
                    cf:9a:58:98:86:87:b0:14:e1:d1:f1:2f:86:53:5d:
                    a5:d3:9a:ca:21:c8:05:2a:dd:93:e7:32:8f:58:07:
                    4c:56:72:2f:52:4a:e3:bc:fc:b9:26:0a:c0:56:5f:
                    8a:de:54:55:ba:fc:1c:f6:e8:e3:4b:65:fc:42:5b:
                    82:46:8e:76:d2:d0:bd:da:59:19:d0:8d:e8:d7:3d:
                    eb:e8:e9:fb:7d:db:d6:3c:52:6d:f3:30:e6:86:97:
                    04:c3:fc:d8:e4:e7:d1:75:71:c9:59:f8:79:15:f7:
                    6b:15:90:3f:91:90:ee:41:c3:aa:fc:e8:9d:a7:bc:
                    91:29:df:9b:f4:21:20:89:33:35:1b:d4:d2:e5:9f:
                    d3:b9:f6:8f:5e:0b:56:71:09:30:4b:f6:de:74:22:
                    be:aa:e2:29:79:69:5e:76:9e:22:49:1f:9e:d1:55:
                    b6:19:e6:d9:95:f0:8b:23:33:7e:7f:fd:81:f5:7e:
                    53:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:50:EC:C0:86:9E:42:85:0D:95:2C:BD:70:DB:6A:5E:38:0D:79:9F
            X509v3 Authority Key Identifier:
                keyid:C4:09:39:A2:8C:4B:00:48:9A:92:B4:21:61:AA:82:36:6A:CD:C4:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAk5ooxLAEiakrQhYaqCNmrNxFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/813d16-d6ab-4ea1-a414-0fa6907cba12/1/pVDswIaeQoUNlSy9cNtqXjgNeZ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/813d16-d6ab-4ea1-a414-0fa6907cba12/1/xAk5ooxLAEiakrQhYaqCNmrNxFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:5f:e9:1a:0a:b8:f1:94:1f:d4:4d:64:45:bd:49:14:9a:c9:
         5d:8c:0d:9b:ff:bd:94:ac:71:ce:97:e4:b2:65:bc:4b:9d:38:
         f0:00:6e:2b:a9:5f:c3:94:aa:71:5b:0d:fc:83:a3:1f:73:48:
         f6:11:2a:cc:2e:bb:96:87:1b:aa:59:c9:89:70:43:ad:86:5d:
         16:4c:a5:d6:1c:f1:3d:9b:19:18:2a:eb:71:37:12:9f:d2:5d:
         f0:a0:77:c1:52:ec:d1:18:33:3e:96:61:ac:00:4c:bc:7d:7e:
         38:e9:ba:a5:15:c8:d1:b9:99:ad:db:58:c8:d9:0b:c8:ce:e7:
         15:7f:f9:e9:01:48:51:6b:1c:7e:8b:1a:ac:70:c2:74:d1:79:
         c9:1f:99:90:55:37:f2:8e:7e:13:d2:50:98:e8:da:ac:04:30:
         91:7d:b5:26:77:a8:fc:e8:8e:90:a9:35:4a:0c:b9:82:b1:96:
         a0:9f:df:c4:a2:20:0a:69:f1:70:98:62:42:00:a0:f2:76:8c:
         ea:23:27:2e:94:e3:dd:a3:46:67:18:47:3f:29:4f:ef:43:d5:
         bd:7c:4a:cd:69:5e:0e:2a:0c:34:75:77:da:bb:96:b8:ac:d7:
         f4:4c:d3:5b:49:29:c8:eb:0d:9e:26:8e:5f:e5:24:93:83:4c:
         c1:f0:ce:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:03 2024 by rpki-client on console-fra.rpki-client.org