Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fb305e-2dff-4e6b-8635-e886e3761127/1/d6W1LBfetfPSQjqFMoP2wbwzL7Q.roa
File:                     d6W1LBfetfPSQjqFMoP2wbwzL7Q.roa (raw, json)
Hash identifier:          9q+E/TMh3WrgW2j0oUvjRrAzs+Rlb54A8LJYxdPV5f0=
Subject key identifier:   77:A5:B5:2C:17:DE:B5:F3:D2:42:3A:85:32:83:F6:C1:BC:33:2F:B4
Certificate issuer:       /CN=4eca8de0118f67c17cefa2b3b4917c7efd099794
Certificate serial:       014040DC
Authority key identifier: 4E:CA:8D:E0:11:8F:67:C1:7C:EF:A2:B3:B4:91:7C:7E:FD:09:97:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TsqN4BGPZ8F876KztJF8fv0Jl5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/fb305e-2dff-4e6b-8635-e886e3761127/1/d6W1LBfetfPSQjqFMoP2wbwzL7Q.roa
Signing time:             Sat 01 Jan 2022 11:05:06 +0000
ROA not before:           Sat 01 Jan 2022 11:05:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     40994
IP address blocks:        83.138.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20988124 (0x14040dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eca8de0118f67c17cefa2b3b4917c7efd099794
        Validity
            Not Before: Jan  1 11:05:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=77a5b52c17deb5f3d2423a853283f6c1bc332fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:47:2f:3d:02:50:d6:64:a1:c0:72:30:85:fe:
                    2f:52:0b:70:e5:dd:00:f8:20:04:7c:ab:82:66:42:
                    b0:89:8b:dc:52:19:65:c4:c0:cd:da:9e:81:60:b5:
                    2c:03:f0:a7:2d:2f:75:56:b5:c5:f7:66:77:d5:aa:
                    a8:43:94:90:95:85:37:c0:c2:c1:e5:8e:95:36:54:
                    ba:16:ed:d1:65:c8:de:4a:f6:7f:3b:b8:ba:e4:76:
                    52:1d:51:ab:a8:b1:ef:ed:fa:1b:9d:6d:fb:21:cf:
                    62:d5:c3:d0:06:0c:a4:56:ce:70:01:59:da:bb:64:
                    e9:3d:cb:cd:0a:17:0d:b1:21:25:97:ea:ff:64:33:
                    8f:6d:05:75:87:36:d8:e5:26:2a:1b:53:83:c5:8e:
                    34:d6:d2:62:f0:b0:cb:4c:4e:61:db:24:d4:05:75:
                    7b:23:16:22:a0:7e:dd:b1:6d:0c:c8:27:d5:2e:39:
                    95:1a:92:e3:56:0d:57:1e:cf:64:f7:50:d4:d1:97:
                    97:45:ee:7c:3c:fb:16:b6:60:37:65:35:ea:f1:aa:
                    c0:54:8f:28:6c:68:f6:89:6e:d4:8e:b5:94:78:94:
                    ec:85:df:12:4f:4a:a3:84:2f:13:4f:1c:ec:88:50:
                    31:83:2d:81:14:e1:24:6f:8d:30:01:b4:04:b1:40:
                    03:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A5:B5:2C:17:DE:B5:F3:D2:42:3A:85:32:83:F6:C1:BC:33:2F:B4
            X509v3 Authority Key Identifier:
                keyid:4E:CA:8D:E0:11:8F:67:C1:7C:EF:A2:B3:B4:91:7C:7E:FD:09:97:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsqN4BGPZ8F876KztJF8fv0Jl5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fb305e-2dff-4e6b-8635-e886e3761127/1/d6W1LBfetfPSQjqFMoP2wbwzL7Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fb305e-2dff-4e6b-8635-e886e3761127/1/TsqN4BGPZ8F876KztJF8fv0Jl5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.138.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:c1:04:3a:8f:69:74:38:a4:c3:5d:18:d4:51:b1:0c:db:55:
         4b:e6:d6:c0:6d:37:80:55:35:18:a6:60:f6:e8:5f:e9:35:eb:
         2b:88:81:d1:54:35:38:86:f1:6a:2f:d5:1a:e1:a3:d2:9e:55:
         3e:2e:29:29:b6:09:b8:79:95:92:bf:d1:41:f2:1b:d1:d3:fa:
         1d:db:ee:42:f2:9d:5f:8f:36:2b:3c:41:4c:b6:ff:a6:29:cb:
         62:11:76:4f:7c:bf:8a:fc:5e:e6:5a:0c:05:34:5b:52:a9:53:
         fb:54:9d:a0:33:4f:7c:b3:be:23:4b:1b:84:e5:8b:70:44:79:
         2b:96:ce:85:51:6b:48:b8:6e:99:9a:b4:c9:b6:41:51:9b:f7:
         8b:74:72:b7:e3:d0:d0:ce:81:24:c1:4e:01:37:db:04:30:e4:
         03:f6:77:0a:a8:61:55:54:a8:83:fe:27:5b:35:5b:9d:ce:5b:
         7f:b2:e4:51:62:f6:2e:d8:92:22:2f:7d:1b:bf:ba:c3:1c:fa:
         c7:72:ce:f3:24:e0:9b:f8:ce:7e:e8:09:b4:55:b5:3a:9d:f4:
         4c:34:14:5f:72:4d:91:a3:29:43:5c:5b:29:0e:07:03:aa:4f:
         67:92:58:f9:28:3d:ec:bb:ec:29:33:16:1d:88:7c:8c:c4:ff:
         57:55:2f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:28 2024 by rpki-client on console-ams.rpki-client.org