Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/cWRIVzMSL8XBcO2QTXIQw_51AkM.roa
File:                     cWRIVzMSL8XBcO2QTXIQw_51AkM.roa (raw, json)
Hash identifier:          VnRhjRboik+WznMeeCLFoJpZuETx+sv6KJ+K4bCwxC8=
Subject key identifier:   71:64:48:57:33:12:2F:C5:C1:70:ED:90:4D:72:10:C3:FE:75:02:43
Certificate issuer:       /CN=51783c6de2933a3075abaa2d8bad23f03ea79c10
Certificate serial:       0173A153
Authority key identifier: 51:78:3C:6D:E2:93:3A:30:75:AB:AA:2D:8B:AD:23:F0:3E:A7:9C:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UXg8beKTOjB1q6oti60j8D6nnBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/cWRIVzMSL8XBcO2QTXIQw_51AkM.roa
Signing time:             Thu 03 Feb 2022 15:46:31 +0000
ROA not before:           Thu 03 Feb 2022 15:46:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     397373
IP address blocks:        195.178.110.0/24 maxlen: 24
                          195.178.111.0/24 maxlen: 24
                          195.178.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24355155 (0x173a153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51783c6de2933a3075abaa2d8bad23f03ea79c10
        Validity
            Not Before: Feb  3 15:46:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7164485733122fc5c170ed904d7210c3fe750243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:57:fe:e8:b8:09:69:82:2f:49:f9:7b:8c:4e:
                    43:63:82:73:fa:53:fa:b5:f5:a0:98:6f:30:41:59:
                    24:4b:64:c9:87:b6:4a:ca:4a:fe:37:61:4b:69:14:
                    79:44:9d:84:a0:a9:dc:58:85:34:75:83:21:62:7b:
                    1f:47:ea:83:7c:61:49:16:f6:a7:c2:72:70:c6:74:
                    a4:e7:a7:56:05:61:a8:08:79:7a:14:bc:13:61:6e:
                    aa:e2:3a:d6:6e:13:04:98:24:f9:b2:b4:36:62:aa:
                    ca:81:c1:eb:f7:ed:be:7f:f7:27:3f:aa:2a:a6:53:
                    e2:34:f8:aa:1e:0f:d5:7b:d9:24:dc:52:9a:d3:8f:
                    e4:11:0a:69:7b:c3:e4:13:cb:57:f8:50:18:f0:d8:
                    da:d6:0e:70:fd:9e:3f:df:75:5e:47:dd:7e:51:f8:
                    d6:92:2c:3f:5c:e7:0f:f9:b6:49:62:1e:71:77:fa:
                    f8:c9:86:f0:1a:f5:f8:5a:ef:b3:83:a0:99:31:e5:
                    99:06:72:42:7b:ea:35:50:34:ac:aa:e7:62:3f:6e:
                    c6:3d:ed:5a:ec:7c:98:9d:c0:b4:a2:d3:60:d5:e3:
                    c8:25:e5:60:2a:65:0c:2a:dd:42:c3:0c:7e:8a:71:
                    33:f6:e8:6e:dd:a2:83:62:d9:a0:e7:a4:90:ad:ad:
                    74:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:64:48:57:33:12:2F:C5:C1:70:ED:90:4D:72:10:C3:FE:75:02:43
            X509v3 Authority Key Identifier:
                keyid:51:78:3C:6D:E2:93:3A:30:75:AB:AA:2D:8B:AD:23:F0:3E:A7:9C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXg8beKTOjB1q6oti60j8D6nnBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/cWRIVzMSL8XBcO2QTXIQw_51AkM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/UXg8beKTOjB1q6oti60j8D6nnBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.178.110.0/23
                  195.178.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:a4:d0:67:8d:95:15:d8:b1:54:13:5e:7e:f2:d0:fc:ae:95:
         99:48:3d:28:cb:c1:bb:34:f7:7a:49:9d:ee:87:7a:57:70:de:
         25:a7:d6:54:b6:47:fb:a7:0b:00:ae:f1:ef:2e:48:17:07:9d:
         cc:23:61:cc:d0:94:18:c3:77:f2:6f:0d:d8:5f:2d:93:fb:44:
         d1:31:4d:b1:df:54:90:91:69:be:75:c4:11:69:b1:6a:a6:a6:
         57:fc:b8:ce:9b:08:98:87:1d:4c:e3:83:6b:30:3e:01:e2:71:
         43:2c:8a:b3:39:c8:8f:b2:ef:9b:89:9c:62:e7:1e:e0:ae:ea:
         18:0b:a2:71:19:6a:31:aa:89:75:43:68:03:5a:aa:b9:95:77:
         52:16:fb:25:e4:d7:4e:2b:b1:39:5d:5e:a8:02:c3:55:d2:9e:
         d3:6d:e0:8d:2f:7c:ec:7c:79:2b:70:cd:30:e3:6f:97:10:77:
         ed:a5:cf:24:b3:56:cb:13:98:bd:13:7c:72:d7:fa:12:92:a6:
         66:14:fa:05:c7:9e:d1:78:b6:3a:82:cb:55:7a:c4:3e:90:b8:
         21:2b:c1:c0:f9:04:48:94:61:43:65:bb:b9:fd:aa:c8:a5:30:
         60:f5:da:25:87:9a:6e:eb:55:32:44:e4:28:98:04:ed:8f:6a:
         d0:0b:d0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:08 2024 by rpki-client on console-ams.rpki-client.org