Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/77f670-f4f8-4b04-931f-5fd32e7b435f/1/SIpXYDoU8wkjvsDq9UlsTpd9qNQ.roa
File:                     SIpXYDoU8wkjvsDq9UlsTpd9qNQ.roa (raw, json)
Hash identifier:          ePlbWIcA9gOnfAAgH9xgGezDm7WaHQ6mbrqzQmRvq5k=
Subject key identifier:   48:8A:57:60:3A:14:F3:09:23:BE:C0:EA:F5:49:6C:4E:97:7D:A8:D4
Certificate issuer:       /CN=3fd3cfd0aac2af0933f7f72455c8f886f46aa1a3
Certificate serial:       04F4F835
Authority key identifier: 3F:D3:CF:D0:AA:C2:AF:09:33:F7:F7:24:55:C8:F8:86:F4:6A:A1:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9PP0KrCrwkz9_ckVcj4hvRqoaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/77f670-f4f8-4b04-931f-5fd32e7b435f/1/SIpXYDoU8wkjvsDq9UlsTpd9qNQ.roa
Signing time:             Sat 01 Jan 2022 06:58:06 +0000
ROA not before:           Sat 01 Jan 2022 06:58:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39889
IP address blocks:        195.189.182.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83163189 (0x4f4f835)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd3cfd0aac2af0933f7f72455c8f886f46aa1a3
        Validity
            Not Before: Jan  1 06:58:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=488a57603a14f30923bec0eaf5496c4e977da8d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1c:0a:21:d5:fb:e9:2c:09:cf:e9:2a:04:ce:
                    4c:bb:dc:fa:7c:6d:85:2c:c2:5f:67:f7:97:c1:5f:
                    5e:fd:33:33:10:5c:69:a0:d8:22:a4:02:63:85:6e:
                    e6:29:3b:7a:bd:ed:c1:d5:43:f3:2f:dc:d2:e8:00:
                    85:05:81:01:77:54:da:a2:97:0c:47:81:63:39:4f:
                    96:3c:1e:d7:0e:b8:75:a0:ee:6f:33:f3:6e:c2:1d:
                    d5:0f:73:56:f0:a8:b6:93:df:68:7c:3d:5d:1c:8e:
                    78:a8:cd:19:3f:6a:28:e6:b2:47:a2:97:b5:d0:81:
                    47:31:08:ad:08:8c:7e:24:01:4a:a1:3d:19:2f:b1:
                    e7:d6:c3:2f:16:38:83:d0:e1:d3:7c:fa:c2:98:8b:
                    45:ee:b3:3c:e4:98:36:1c:ca:0a:6a:20:ec:f7:de:
                    ec:43:9f:b4:e3:0c:15:e6:6b:99:d2:f7:72:0e:e5:
                    c4:6a:f5:5d:cb:3e:8f:2f:b9:ef:4d:9b:57:bf:45:
                    da:0a:35:29:f9:44:61:0c:a5:25:af:b0:1b:67:03:
                    ce:e0:c9:e4:7e:ff:58:c8:c4:a7:fe:d7:88:a1:e2:
                    89:ca:fc:c5:cb:55:b3:8d:62:d6:97:da:85:bf:b3:
                    d3:7c:1d:e9:d6:33:3e:37:c8:de:bf:b7:a2:6f:b7:
                    2c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8A:57:60:3A:14:F3:09:23:BE:C0:EA:F5:49:6C:4E:97:7D:A8:D4
            X509v3 Authority Key Identifier:
                keyid:3F:D3:CF:D0:AA:C2:AF:09:33:F7:F7:24:55:C8:F8:86:F4:6A:A1:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9PP0KrCrwkz9_ckVcj4hvRqoaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/77f670-f4f8-4b04-931f-5fd32e7b435f/1/SIpXYDoU8wkjvsDq9UlsTpd9qNQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/77f670-f4f8-4b04-931f-5fd32e7b435f/1/P9PP0KrCrwkz9_ckVcj4hvRqoaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.189.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:e6:67:5f:ec:40:60:7a:9f:51:c7:74:ff:fa:ab:7d:c3:20:
         a7:76:79:5a:40:3c:9c:0a:42:b8:9f:ce:e2:d6:34:6b:eb:65:
         85:db:41:5b:ce:e8:96:60:03:b2:0e:33:43:1f:f1:0a:99:e9:
         03:e4:f8:d6:4d:52:ce:74:32:d1:92:cd:67:87:a7:56:1e:c2:
         6b:e1:f9:cf:52:d2:84:e1:2c:a2:db:5e:e4:6c:5c:a1:84:99:
         0f:37:a0:c8:33:eb:ea:14:29:98:b5:a5:e7:db:ed:f1:64:bb:
         f6:70:7a:f1:f1:7d:70:9b:8c:c0:e5:fb:95:61:0a:77:dc:4b:
         b2:a3:c7:e5:e9:e2:80:af:a6:b5:bb:52:26:0b:68:96:d8:ef:
         d8:ae:b5:c2:1e:3d:64:5a:bf:3c:eb:b9:28:d7:61:ed:c2:2d:
         d5:c9:a2:bc:11:ec:0f:15:e6:bd:c5:42:79:e0:fc:ab:bf:d6:
         4c:a0:50:d3:b2:b3:75:f6:68:8b:63:b1:a0:0d:6b:8d:3a:4b:
         e1:d9:01:30:d9:2f:3a:a2:5d:68:36:57:80:4e:50:3f:7b:52:
         4c:6a:c3:3b:b5:ee:0d:59:98:4e:c5:4c:9a:ed:39:aa:16:d9:
         64:3c:e3:53:c7:08:6e:80:59:1a:89:0f:b5:c5:76:37:a3:e6:
         a9:55:93:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:19 2024 by rpki-client on console-ams.rpki-client.org