Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/ff1697-8993-45fb-95cf-b99e22cd1338/1/SvKBnXs-twTQOZ3jZq_gUmIG3jI.roa
File:                     SvKBnXs-twTQOZ3jZq_gUmIG3jI.roa (raw, json)
Hash identifier:          7rmGKb+svdzZCeFJk+fwQgjRRfEc/ZYWG6SuvRLB28o=
Subject key identifier:   4A:F2:81:9D:7B:3E:B7:04:D0:39:9D:E3:66:AF:E0:52:62:06:DE:32
Certificate issuer:       /CN=aee70e72bdff01301bc3bffbf521343d1014cd06
Certificate serial:       082D2131
Authority key identifier: AE:E7:0E:72:BD:FF:01:30:1B:C3:BF:FB:F5:21:34:3D:10:14:CD:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rucOcr3_ATAbw7_79SE0PRAUzQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/ff1697-8993-45fb-95cf-b99e22cd1338/1/SvKBnXs-twTQOZ3jZq_gUmIG3jI.roa
Signing time:             Sat 01 Jan 2022 13:07:52 +0000
ROA not before:           Sat 01 Jan 2022 13:07:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57752
IP address blocks:        83.136.148.0/23 maxlen: 23
                          83.136.150.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137175345 (0x82d2131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee70e72bdff01301bc3bffbf521343d1014cd06
        Validity
            Not Before: Jan  1 13:07:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4af2819d7b3eb704d0399de366afe0526206de32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1f:4c:ae:26:3a:db:0a:8c:82:69:37:37:41:
                    74:24:db:95:8e:1a:b8:de:2e:a1:ed:73:eb:52:9f:
                    55:6d:ed:f4:7b:48:e6:c0:4a:24:2b:d2:01:4d:78:
                    1b:18:2a:4b:5c:9b:a7:ca:25:0b:38:04:5b:c9:68:
                    33:2c:c5:68:29:1d:07:3e:04:2e:c4:fc:0b:1a:73:
                    ad:9a:3e:e2:46:2d:87:ad:2a:86:48:bf:b7:5f:ca:
                    bc:8c:e2:4b:0d:c4:ca:54:db:5f:16:e3:02:ec:bb:
                    ed:0d:34:16:3a:ca:3b:c1:b0:35:1e:18:04:a8:ff:
                    c7:1a:87:7d:dc:0d:b3:03:28:1c:a4:1c:93:a0:d8:
                    85:58:f8:f5:4e:c9:35:5c:6b:c3:f0:fb:13:4e:ca:
                    bd:1c:ad:e1:20:cb:90:2c:8a:64:95:30:ef:dd:09:
                    01:5f:ac:b3:4c:5e:f5:a9:d8:fa:89:1f:ad:49:f9:
                    7c:c3:48:09:8b:fe:57:ba:c3:98:81:a5:5a:64:9a:
                    53:71:37:b2:21:e7:a4:d6:31:d0:83:58:7f:49:44:
                    73:fc:b1:29:b7:04:5e:19:b5:a6:0a:16:18:36:f2:
                    54:f2:27:89:e1:17:fe:86:fc:45:9e:67:b9:4b:aa:
                    6a:81:cf:ae:0d:42:83:64:b4:47:9e:04:d0:43:7b:
                    ea:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F2:81:9D:7B:3E:B7:04:D0:39:9D:E3:66:AF:E0:52:62:06:DE:32
            X509v3 Authority Key Identifier:
                keyid:AE:E7:0E:72:BD:FF:01:30:1B:C3:BF:FB:F5:21:34:3D:10:14:CD:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rucOcr3_ATAbw7_79SE0PRAUzQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ff1697-8993-45fb-95cf-b99e22cd1338/1/SvKBnXs-twTQOZ3jZq_gUmIG3jI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ff1697-8993-45fb-95cf-b99e22cd1338/1/rucOcr3_ATAbw7_79SE0PRAUzQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.136.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:57:1a:c9:86:7f:94:4d:de:e4:fa:e3:ac:87:13:1c:1f:53:
         1c:cc:65:7f:ab:7e:d3:bb:32:19:be:6b:c2:72:08:c2:d7:67:
         f2:d2:f0:7f:9b:1f:c2:41:cc:f8:cf:60:3e:7c:cf:e4:aa:ec:
         3b:f7:01:9d:04:12:52:1a:32:57:0e:ff:af:e9:17:25:b3:01:
         74:27:38:ac:7d:ad:84:72:22:f5:a4:3b:2c:3f:2b:69:20:3e:
         9b:0f:9c:ba:c8:34:a2:5a:56:92:cf:50:7f:29:f7:40:13:24:
         38:0c:db:5c:35:fb:8a:cf:10:ee:a3:fa:d0:e4:a4:b0:45:6f:
         62:f2:47:de:1b:b3:d0:39:aa:e5:a5:93:2a:a4:f2:89:c6:6e:
         41:5a:7e:f6:33:9d:25:54:6d:69:bf:4b:5a:7b:a0:8b:80:b1:
         89:ce:8f:7d:dc:3c:5d:3d:aa:b4:bb:3e:27:46:bc:17:08:2f:
         bb:77:0f:1b:02:30:a2:77:a8:a6:37:84:b5:42:6e:cd:b9:10:
         b5:30:1d:e4:4d:e6:a9:55:0a:df:2f:a1:05:49:d4:e7:99:6d:
         5b:15:00:ea:1c:63:aa:e4:6f:e3:96:02:6e:68:74:37:7d:2c:
         d4:4e:f8:dc:33:0e:ae:40:2a:95:1a:d2:9b:67:26:a8:7a:0f:
         67:1a:dc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:43 2024 by rpki-client on console-fra.rpki-client.org