Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/fFpacduf-cA0KluIVgqfe8e3nVo.roa
File:                     fFpacduf-cA0KluIVgqfe8e3nVo.roa (raw, json)
Hash identifier:          Zi29PNTI5szlrQy09yl+lve5CrGafo8adikCEmTIvxQ=
Subject key identifier:   7C:5A:5A:71:DB:9F:F9:C0:34:2A:5B:88:56:0A:9F:7B:C7:B7:9D:5A
Certificate issuer:       /CN=51783c6de2933a3075abaa2d8bad23f03ea79c10
Certificate serial:       01826DEF6B3467CFBC9D9FA178BBBF22EAC7
Authority key identifier: 51:78:3C:6D:E2:93:3A:30:75:AB:AA:2D:8B:AD:23:F0:3E:A7:9C:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UXg8beKTOjB1q6oti60j8D6nnBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/fFpacduf-cA0KluIVgqfe8e3nVo.roa
Signing time:             Fri 05 Aug 2022 12:16:23 +0000
ROA not before:           Fri 05 Aug 2022 12:16:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8100
IP address blocks:        195.178.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:6d:ef:6b:34:67:cf:bc:9d:9f:a1:78:bb:bf:22:ea:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51783c6de2933a3075abaa2d8bad23f03ea79c10
        Validity
            Not Before: Aug  5 12:16:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7c5a5a71db9ff9c0342a5b88560a9f7bc7b79d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:00:23:4c:1c:89:e2:28:d8:6d:bc:6f:ab:9d:
                    f6:18:d9:62:58:8f:6b:3b:e3:1f:52:65:39:d2:3a:
                    94:9f:97:ae:f8:25:c2:84:a4:92:66:7f:d4:5d:87:
                    25:3f:71:31:b8:98:75:86:8c:6c:c4:3f:a7:7d:04:
                    b9:03:17:7b:fc:d6:4d:56:7a:65:09:6e:dc:cb:a6:
                    10:52:b2:8b:f7:f9:cc:4f:87:79:be:09:c2:bf:f6:
                    79:a3:c5:9d:b4:cd:a2:f9:88:51:56:bc:85:66:c1:
                    9e:66:b9:d1:6f:98:f5:ae:f9:97:0e:7a:1b:48:86:
                    23:8c:da:8c:df:cc:64:35:e2:48:12:b5:f1:25:7e:
                    a0:f5:19:c5:b4:ad:e4:bb:58:04:99:51:45:8b:74:
                    bc:f7:ce:f8:8c:9c:55:87:aa:f1:11:16:ae:f0:7c:
                    ac:e7:06:30:29:29:1c:64:dd:a5:df:23:0b:75:b5:
                    a9:c7:53:ba:8b:21:e9:b4:5b:73:b1:66:2e:c5:0c:
                    23:03:fa:d3:ef:8a:f4:a3:3c:99:24:ab:19:3f:98:
                    89:01:37:b5:48:4c:69:de:a8:e0:cc:3f:01:24:78:
                    ae:31:73:7d:eb:5a:4a:c9:87:cc:51:f3:02:3f:02:
                    5d:98:29:7b:1b:23:37:43:09:d6:52:88:92:0c:07:
                    ff:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:5A:5A:71:DB:9F:F9:C0:34:2A:5B:88:56:0A:9F:7B:C7:B7:9D:5A
            X509v3 Authority Key Identifier:
                keyid:51:78:3C:6D:E2:93:3A:30:75:AB:AA:2D:8B:AD:23:F0:3E:A7:9C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXg8beKTOjB1q6oti60j8D6nnBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/fFpacduf-cA0KluIVgqfe8e3nVo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/UXg8beKTOjB1q6oti60j8D6nnBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.178.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:af:c3:b3:85:1d:00:f2:e1:9e:a0:c4:c7:ee:8b:b8:46:1e:
         ed:6a:dd:fa:d5:8b:c0:f4:8a:77:2b:95:1c:4c:6d:65:ad:4f:
         17:2d:b6:d6:27:7a:f6:0f:85:12:47:a9:a1:2c:40:4b:7a:2c:
         d3:d9:71:e5:38:95:25:e2:05:f0:76:91:e0:5b:68:6d:c6:f9:
         cf:83:0f:ac:f9:38:c4:ca:be:35:69:ff:79:50:70:54:f1:d5:
         60:b5:d1:ca:f5:23:f4:d6:56:0f:03:63:f6:64:c9:57:f4:7c:
         9a:09:5d:29:06:88:68:af:c6:26:1a:4c:23:fb:05:ff:4b:2c:
         7c:a2:bb:16:4d:a8:19:94:38:1b:3e:52:fa:55:25:19:ea:9a:
         06:1a:31:e4:04:2f:75:87:29:57:ad:6f:82:c9:98:7b:a4:03:
         fe:2d:55:b7:62:97:8f:39:6e:fe:1c:17:09:36:a2:2b:f7:70:
         19:9e:90:23:39:3c:21:6d:de:c6:e1:04:ce:bd:cb:6d:54:2c:
         d3:b7:9f:bd:7e:39:ec:fa:23:9b:0b:66:a2:cb:61:6a:8b:b3:
         dc:01:c9:14:ee:45:5b:50:65:4d:4b:6c:fd:ca:0a:57:93:bd:
         30:25:05:9d:91:6c:75:f9:fa:f7:50:d9:f0:c9:8d:03:52:0c:
         d1:e7:9c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:38 2024 by rpki-client on console-fra.rpki-client.org