Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FIPIRCF4148-4uHSVsTYTF0Vyvc.roa
File:                     FIPIRCF4148-4uHSVsTYTF0Vyvc.roa (raw, json)
Hash identifier:          O/YJAewpeiL0uAcZZtBDm5T0ZT8TaQJ94P+OAwWQVew=
Subject key identifier:   14:83:C8:44:21:78:D7:8F:3E:E2:E1:D2:56:C4:D8:4C:5D:15:CA:F7
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182C20C864ADB9EA69A02874248DA92F484
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FIPIRCF4148-4uHSVsTYTF0Vyvc.roa
Signing time:             Sun 21 Aug 2022 20:16:16 +0000
ROA not before:           Sun 21 Aug 2022 20:16:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203857
IP address blocks:        2a06:a005:5ec::/48 maxlen: 48
                          2a06:a005:851::/48 maxlen: 48
                          2a06:a005:11::/48 maxlen: 48
                          2a06:a005:a02::/48 maxlen: 48
                          2a06:a005:856::/48 maxlen: 48
                          2a06:a005:456::/48 maxlen: 48
                          2a06:a005:4d6::/48 maxlen: 48
                          2a06:a005:5e4::/48 maxlen: 48
                          2a06:a005:5e9::/48 maxlen: 48
                          2a06:a005:2df::/48 maxlen: 48
                          2a06:a005:5ee::/48 maxlen: 48
                          2a06:a005:4d3::/48 maxlen: 48
                          2a06:a005:a01::/48 maxlen: 48
                          2a06:a005:481::/48 maxlen: 48
                          2a06:a005:4d2::/48 maxlen: 48
                          2a06:a005:432::/48 maxlen: 48
                          2a06:a005:12::/48 maxlen: 48
                          2a06:a005:4d7::/48 maxlen: 48
                          2a06:a005:10::/48 maxlen: 48
                          2a06:a005:850::/48 maxlen: 48
                          2a06:a005:4d5::/48 maxlen: 48
                          2a06:a005:5eb::/48 maxlen: 48
                          2a06:a005:2d4::/48 maxlen: 48
                          2a06:a005:4d4::/48 maxlen: 48
                          2a06:a005:5ea::/48 maxlen: 48
                          2a06:a005:5ef::/48 maxlen: 48
                          2a06:a005:a08::/48 maxlen: 48
                          2a06:a005:5e8::/48 maxlen: 48
                          2a06:a005:5ed::/48 maxlen: 48
                          2a06:a005:5e3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:c2:0c:86:4a:db:9e:a6:9a:02:87:42:48:da:92:f4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 21 20:16:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1483c8442178d78f3ee2e1d256c4d84c5d15caf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2d:46:e0:52:c1:bf:80:a4:b2:ec:37:6e:80:
                    d8:f2:4d:5c:f1:84:46:a9:df:e0:1e:8c:b3:49:69:
                    da:cc:64:49:8e:58:a7:e8:55:4a:d7:16:7d:14:ba:
                    07:ab:32:ba:11:82:e6:11:4a:2a:73:2c:0a:f5:06:
                    95:bb:c2:99:6d:1b:14:54:ef:9f:18:b5:a5:14:dc:
                    b6:9e:e1:ab:4c:45:b4:ae:35:62:6c:69:c0:1e:ff:
                    d6:b3:74:6a:18:df:ce:51:23:85:49:be:2d:1e:38:
                    03:b0:92:8d:fa:ca:0b:25:00:03:4d:66:18:98:8d:
                    d6:dc:31:4f:25:63:63:a5:4c:84:45:dc:bc:ea:20:
                    a1:47:f9:20:31:b5:33:7f:79:11:ad:08:ab:81:a1:
                    4c:87:94:62:a3:f7:e6:22:52:e9:da:0e:e4:22:64:
                    b2:12:8b:e0:74:80:bc:9e:3e:7e:7b:58:aa:e8:c7:
                    0c:5c:c4:a7:41:59:ec:81:f9:73:fc:91:ab:07:e1:
                    2b:8c:1e:8b:57:5a:0b:63:c1:bf:f0:7f:03:08:3b:
                    3e:10:92:a5:73:eb:88:77:43:43:48:f9:7f:f4:ba:
                    a4:da:e3:04:96:c7:b4:4d:f9:21:93:cb:32:fa:bb:
                    75:4b:d8:b7:fd:03:ce:50:d8:d6:d3:32:12:d2:d1:
                    76:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:83:C8:44:21:78:D7:8F:3E:E2:E1:D2:56:C4:D8:4C:5D:15:CA:F7
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/FIPIRCF4148-4uHSVsTYTF0Vyvc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:10::-2a06:a005:12:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:2d4::/48
                  2a06:a005:2df::/48
                  2a06:a005:432::/48
                  2a06:a005:456::/48
                  2a06:a005:481::/48
                  2a06:a005:4d2::-2a06:a005:4d7:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:5e3::-2a06:a005:5e4:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:5e8::/45
                  2a06:a005:850::/47
                  2a06:a005:856::/48
                  2a06:a005:a01::-2a06:a005:a02:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:a08::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:d3:50:84:90:e5:69:c7:60:59:f2:b3:4f:d6:70:5a:18:9c:
         7f:07:88:64:9c:9e:18:6c:cf:4c:0d:31:1f:21:6f:9d:6f:f3:
         5b:a5:36:b9:2f:ea:a1:d7:2a:da:0c:cd:ae:71:55:0c:19:3f:
         f8:b2:72:c9:01:87:46:e3:fe:30:b1:6a:cc:3b:30:ce:96:e3:
         eb:59:ab:74:8b:ca:75:e1:10:2d:3f:62:5c:6a:45:80:8d:4e:
         3a:a8:55:43:8c:f0:ee:06:05:2b:5a:3b:60:54:25:7d:62:a6:
         f5:29:22:b9:27:e5:4c:f8:88:d8:1c:26:e5:69:c2:21:8e:5c:
         00:86:fd:37:75:b9:6f:be:0a:d8:a7:8c:af:64:ba:b0:d0:09:
         5b:57:7f:87:78:cf:ee:09:be:a4:94:a8:31:d6:f7:3b:35:3d:
         11:b8:5f:96:52:51:b5:26:c6:05:cf:d7:75:8b:c0:ab:2d:96:
         9e:bd:e8:87:8f:b8:76:c7:07:fc:6a:fe:6d:ee:f6:78:72:da:
         1a:06:a3:4c:f0:dc:f1:a6:13:bc:64:e8:8b:16:f3:1e:aa:ff:
         cd:70:78:09:2b:66:db:1c:eb:9a:09:1a:8a:62:0d:0b:f8:bc:
         b3:a0:79:dc:11:08:00:96:57:af:f9:28:0c:8b:7e:88:35:66:
         89:a8:5b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org