Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/_6nfdfi4WxQvNa8fUnsCntQ5SVY.roa
File:                     _6nfdfi4WxQvNa8fUnsCntQ5SVY.roa (raw, json)
Hash identifier:          PYeS1rcdh4O89FCwTGHtTHVnDY64kWhW+VURTyQFc40=
Subject key identifier:   FF:A9:DF:75:F8:B8:5B:14:2F:35:AF:1F:52:7B:02:9E:D4:39:49:56
Certificate issuer:       /CN=8102d3e0d5f21ec72c745731a641fb7903787de0
Certificate serial:       10E43F47
Authority key identifier: 81:02:D3:E0:D5:F2:1E:C7:2C:74:57:31:A6:41:FB:79:03:78:7D:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQLT4NXyHscsdFcxpkH7eQN4feA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/_6nfdfi4WxQvNa8fUnsCntQ5SVY.roa
Signing time:             Sat 01 Jan 2022 07:02:36 +0000
ROA not before:           Sat 01 Jan 2022 07:02:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43402
IP address blocks:        83.142.240.0/21 maxlen: 21
                          95.131.160.0/21 maxlen: 21
                          95.131.166.0/24 maxlen: 24
                          95.131.167.0/24 maxlen: 24
                          185.127.144.0/22 maxlen: 22
                          2a03:62c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283393863 (0x10e43f47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8102d3e0d5f21ec72c745731a641fb7903787de0
        Validity
            Not Before: Jan  1 07:02:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ffa9df75f8b85b142f35af1f527b029ed4394956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:81:ba:35:59:d6:d9:bd:cf:cf:80:74:f9:
                    43:ff:8a:5b:c2:6e:88:55:41:35:e7:67:b2:cf:48:
                    8a:ac:d6:fd:ce:27:a1:02:32:db:b6:94:f0:e7:9f:
                    2e:3b:bd:4e:30:91:07:d3:66:57:45:73:80:ad:84:
                    09:1c:6d:f8:fd:2a:69:77:eb:a2:60:d9:a3:e1:33:
                    0e:30:bc:6c:4c:c6:52:d7:b9:20:55:b2:fd:49:b5:
                    1e:f5:c9:3e:13:1a:55:a0:e4:ef:ad:57:0d:85:07:
                    49:3d:7b:9e:e9:7a:5e:9b:df:c4:38:6e:cf:08:c4:
                    f9:91:91:10:e6:aa:e9:57:3b:f7:f8:26:96:82:44:
                    90:70:30:ac:29:8c:c7:ae:b9:d8:20:ed:2f:ad:c2:
                    55:f8:ac:88:4d:3a:96:25:e3:34:56:1f:65:be:39:
                    75:8e:4a:21:e6:93:b6:14:b4:e8:be:c5:4d:aa:4e:
                    bc:e8:71:6e:99:74:45:e7:0e:43:96:9a:75:09:90:
                    a5:b5:76:11:63:47:33:0a:93:89:b2:66:54:37:25:
                    0f:53:d4:9f:ff:3f:99:cf:aa:be:0b:2a:89:2b:7d:
                    5d:c1:5f:2c:8a:20:fc:52:f1:23:13:5f:4f:7d:36:
                    00:d1:de:56:e7:88:63:0e:9e:46:1c:0e:60:94:3c:
                    1f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A9:DF:75:F8:B8:5B:14:2F:35:AF:1F:52:7B:02:9E:D4:39:49:56
            X509v3 Authority Key Identifier:
                keyid:81:02:D3:E0:D5:F2:1E:C7:2C:74:57:31:A6:41:FB:79:03:78:7D:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQLT4NXyHscsdFcxpkH7eQN4feA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/_6nfdfi4WxQvNa8fUnsCntQ5SVY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/gQLT4NXyHscsdFcxpkH7eQN4feA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.142.240.0/21
                  95.131.160.0/21
                  185.127.144.0/22
                IPv6:
                  2a03:62c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:26:c6:1e:24:da:50:2f:14:f7:57:27:a8:d9:91:28:6f:88:
         1f:d1:12:20:76:cd:e4:e5:1a:c1:37:16:58:48:99:74:24:29:
         f8:c5:28:f0:20:f6:60:fd:47:ca:5a:29:53:ff:89:79:63:10:
         b0:2b:d8:31:d0:ce:3b:9f:81:27:60:51:1e:01:d0:21:1a:c5:
         dc:f0:d6:2d:f6:e6:a1:d8:f6:87:f4:e9:5e:8c:ab:9d:64:07:
         8f:83:f6:8b:e7:e1:4c:ed:87:09:3a:72:ab:bc:1d:94:e7:d5:
         87:5d:b9:0d:f4:73:03:b8:56:33:69:50:68:4d:50:7a:73:a4:
         83:ea:f4:51:07:d8:50:13:a5:05:bf:43:2a:46:f8:58:d1:6a:
         fe:9c:2f:2e:87:b9:3e:26:4e:50:59:c3:42:fc:c8:3c:d1:c2:
         19:44:e3:5e:10:f8:2b:13:9b:d1:1a:1b:2e:83:5b:a4:c0:19:
         b5:b3:a0:38:54:4e:b8:f0:35:b9:6d:d8:85:75:da:ef:96:af:
         f9:e3:09:29:cc:25:2e:27:68:25:4d:81:d4:36:69:57:c5:ad:
         ce:e4:d8:90:36:ab:8b:10:2b:b4:94:53:cc:7a:37:f3:81:dd:
         c4:a0:30:70:55:9e:8b:6d:18:d9:ff:f8:e1:a0:da:bd:a9:9f:
         69:89:ce:d6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:18 2024 by rpki-client on console-fra.rpki-client.org