Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/jnPInYm7Kn8hBnr39VxT0fa-3jo.roa
File:                     jnPInYm7Kn8hBnr39VxT0fa-3jo.roa (raw, json)
Hash identifier:          x5akOieyT7XWAWGWhyQltCct/O+kU1A/3YiZPQuDK0M=
Subject key identifier:   8E:73:C8:9D:89:BB:2A:7F:21:06:7A:F7:F5:5C:53:D1:F6:BE:DE:3A
Certificate issuer:       /CN=8102d3e0d5f21ec72c745731a641fb7903787de0
Certificate serial:       11577F46
Authority key identifier: 81:02:D3:E0:D5:F2:1E:C7:2C:74:57:31:A6:41:FB:79:03:78:7D:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQLT4NXyHscsdFcxpkH7eQN4feA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/jnPInYm7Kn8hBnr39VxT0fa-3jo.roa
Signing time:             Wed 16 Feb 2022 10:27:46 +0000
ROA not before:           Wed 16 Feb 2022 10:27:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200845
IP address blocks:        83.142.240.0/21 maxlen: 24
                          95.131.160.0/21 maxlen: 24
                          185.127.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290946886 (0x11577f46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8102d3e0d5f21ec72c745731a641fb7903787de0
        Validity
            Not Before: Feb 16 10:27:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8e73c89d89bb2a7f21067af7f55c53d1f6bede3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5e:b9:1c:af:00:49:46:b6:45:12:aa:55:f3:
                    d8:16:c4:b5:6c:5d:cf:ef:30:a9:bf:e1:37:93:b3:
                    c4:2a:bc:f6:21:5a:60:8f:7a:da:ef:e8:65:5f:50:
                    43:6f:0c:b5:6d:bc:06:15:00:89:68:63:7d:f2:bd:
                    3d:e2:dc:a8:a4:e7:46:04:04:e7:6f:88:8e:00:bc:
                    17:6e:db:eb:62:b4:2e:44:32:76:0d:1d:6e:38:6a:
                    7c:fd:0a:fe:05:49:fb:d6:ec:7f:9c:50:c1:f4:4f:
                    5e:00:e7:b0:b1:47:02:7d:a4:cc:c8:55:41:78:73:
                    cd:95:f1:20:3c:77:f8:f3:cc:0c:5d:0d:1f:d2:0c:
                    a6:25:0f:ce:a6:08:4c:67:05:e4:e3:1e:9c:53:72:
                    fc:b0:4d:3a:58:e4:a9:47:d7:79:bc:3e:0c:e5:ff:
                    45:eb:dd:dc:45:94:69:21:fc:1b:72:98:e4:dc:6f:
                    45:dc:8f:04:45:f6:cd:9c:43:8f:1c:6c:70:7e:40:
                    c1:f9:c3:74:e2:c9:8a:0c:a6:f1:99:7b:9c:11:cc:
                    e3:d9:36:d4:99:ca:34:76:8a:05:f0:0d:92:01:3e:
                    83:06:a6:96:4b:2a:fc:25:ba:4d:56:80:f4:66:06:
                    ed:68:6f:d4:30:d0:eb:da:42:68:13:f9:4c:33:ef:
                    72:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:73:C8:9D:89:BB:2A:7F:21:06:7A:F7:F5:5C:53:D1:F6:BE:DE:3A
            X509v3 Authority Key Identifier:
                keyid:81:02:D3:E0:D5:F2:1E:C7:2C:74:57:31:A6:41:FB:79:03:78:7D:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQLT4NXyHscsdFcxpkH7eQN4feA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/jnPInYm7Kn8hBnr39VxT0fa-3jo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/gQLT4NXyHscsdFcxpkH7eQN4feA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.142.240.0/21
                  95.131.160.0/21
                  185.127.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:9b:53:22:02:e5:08:4d:53:f6:1d:1b:f3:59:05:eb:e0:ec:
         7b:13:1f:f3:b8:e1:c2:81:68:ce:1d:f5:78:bd:c3:ae:0c:d5:
         2e:65:2f:af:00:c4:60:b4:b7:50:c3:24:84:99:d9:58:73:91:
         36:68:00:1b:eb:a8:d1:06:cc:e2:89:56:14:af:c6:93:7f:f4:
         84:4c:06:c2:1c:db:18:f0:44:65:58:d4:f4:1f:90:70:bd:6c:
         97:4f:07:06:92:1f:d8:8b:cd:ec:9a:61:83:9f:8a:1d:ef:c7:
         2a:4c:30:47:dd:55:0f:e4:26:8b:4e:bc:94:68:4e:e1:f3:73:
         10:3c:58:66:67:85:ca:4b:9d:a8:fb:d6:e4:0d:31:95:6f:a2:
         84:8e:e2:43:38:06:90:94:bc:a4:a8:ab:28:34:85:76:ed:1f:
         61:7f:f0:70:1a:b4:21:0b:79:fc:69:ba:f1:97:85:93:4c:b6:
         ee:1d:59:23:37:50:41:d4:9e:0d:eb:d1:b9:24:bb:7a:90:a7:
         84:56:60:22:97:a9:67:b4:35:ff:c6:94:13:69:e0:c2:d6:6f:
         0e:92:05:29:87:ea:d8:18:67:b0:a9:c7:88:a0:c1:d6:96:86:
         02:c7:03:5c:b2:bd:21:3c:74:98:8a:6e:2b:13:57:15:8e:70:
         a1:a2:82:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:18 2024 by rpki-client on console-fra.rpki-client.org