Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f97953-1656-4e2e-98cd-98d68bedc6f3/1/8mEaEafmc6A2hFX2VPEyrlXs7_E.roa
File:                     8mEaEafmc6A2hFX2VPEyrlXs7_E.roa (raw, json)
Hash identifier:          7EZLZptI3WsHkqJA44t2C6SgDITARKVBmYTvjja9LZM=
Subject key identifier:   F2:61:1A:11:A7:E6:73:A0:36:84:55:F6:54:F1:32:AE:55:EC:EF:F1
Certificate issuer:       /CN=c313fa4c5d53cbd4e9f0679d18580e8d4e9ec4bb
Certificate serial:       0A197489
Authority key identifier: C3:13:FA:4C:5D:53:CB:D4:E9:F0:67:9D:18:58:0E:8D:4E:9E:C4:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wxP6TF1Ty9Tp8GedGFgOjU6exLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/f97953-1656-4e2e-98cd-98d68bedc6f3/1/8mEaEafmc6A2hFX2VPEyrlXs7_E.roa
Signing time:             Sat 01 Jan 2022 08:06:04 +0000
ROA not before:           Sat 01 Jan 2022 08:06:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39790
IP address blocks:        81.91.80.0/20 maxlen: 20
                          185.14.224.0/22 maxlen: 22
                          2001:1568::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169440393 (0xa197489)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c313fa4c5d53cbd4e9f0679d18580e8d4e9ec4bb
        Validity
            Not Before: Jan  1 08:06:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f2611a11a7e673a0368455f654f132ae55eceff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0e:06:76:89:6e:57:39:3d:6d:68:77:a8:13:
                    b1:4d:be:1d:1c:16:2c:8b:ca:f7:03:12:7a:c2:38:
                    19:7e:92:a0:4c:93:18:a1:0e:7e:05:4f:02:85:4b:
                    9a:d1:8d:c0:aa:0c:50:46:98:63:4e:46:57:12:97:
                    45:7e:88:6d:1e:41:2e:c8:ac:a2:e6:90:ab:63:a8:
                    d2:be:2a:52:c5:9b:ce:38:ec:fc:e6:26:b3:be:f9:
                    20:b2:63:43:1b:cf:8d:16:39:25:51:bb:8f:a4:4a:
                    a9:80:44:f6:bd:f8:53:6d:89:46:08:a2:6a:e9:ba:
                    d8:38:68:77:d5:cb:73:e1:18:29:aa:44:c5:c4:f2:
                    65:72:ae:ac:bb:49:5b:b5:a7:ff:f1:41:11:ee:85:
                    60:cc:ee:9b:91:72:4e:ed:2f:e4:ba:eb:5d:76:23:
                    66:a5:a8:4b:60:fb:3d:9a:7c:65:77:61:dc:b5:15:
                    9e:b7:2e:c5:4d:88:cb:a6:8e:e5:18:ad:56:f0:6d:
                    94:5e:f3:be:e1:72:3f:29:03:8f:d2:aa:04:49:7c:
                    76:34:9b:6c:b4:d8:96:1b:ed:29:c8:15:13:b6:bf:
                    84:17:4c:cb:88:c4:1f:bc:13:f6:ca:0d:e1:41:be:
                    a8:f5:a3:b4:c7:e8:ae:a3:f9:11:f3:15:49:3a:63:
                    af:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:61:1A:11:A7:E6:73:A0:36:84:55:F6:54:F1:32:AE:55:EC:EF:F1
            X509v3 Authority Key Identifier:
                keyid:C3:13:FA:4C:5D:53:CB:D4:E9:F0:67:9D:18:58:0E:8D:4E:9E:C4:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxP6TF1Ty9Tp8GedGFgOjU6exLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f97953-1656-4e2e-98cd-98d68bedc6f3/1/8mEaEafmc6A2hFX2VPEyrlXs7_E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f97953-1656-4e2e-98cd-98d68bedc6f3/1/wxP6TF1Ty9Tp8GedGFgOjU6exLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.91.80.0/20
                  185.14.224.0/22
                IPv6:
                  2001:1568::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:84:2d:c1:21:9c:27:ac:cf:59:c7:ce:b4:df:44:98:3b:d1:
         02:86:0b:d5:d8:bd:df:f4:9a:91:8e:3d:11:2c:8e:5c:ba:69:
         29:a8:49:d6:06:22:ee:96:97:ed:21:64:a7:4e:c2:bd:1e:21:
         d2:a1:3d:f5:23:bc:e2:32:f3:c6:33:cd:29:cf:4a:63:51:b7:
         88:58:92:ef:1d:2b:7c:93:67:00:6c:69:16:02:0c:0f:05:74:
         1c:20:c2:e2:c2:28:39:2e:d1:57:8f:73:5a:8f:35:08:54:7b:
         cc:84:6d:3d:67:d4:10:a1:6f:e7:22:85:5d:42:2a:87:e8:5e:
         10:43:c1:5f:62:56:aa:2a:ce:10:13:1a:e6:0a:d2:65:b0:e3:
         ab:2d:4c:dc:2b:b5:cb:92:c1:b6:52:7c:cd:98:f2:40:04:c3:
         ca:d3:c3:90:0c:46:55:58:7f:ba:89:bc:63:c4:e2:c6:68:b5:
         d3:a1:82:96:f3:62:75:54:2b:26:08:aa:2a:e3:07:66:66:79:
         d8:e7:a2:d1:20:7e:17:50:cd:c1:f4:cf:cc:88:5b:98:a1:3e:
         a6:d4:b3:b7:b1:87:08:40:ae:a9:86:3f:b8:cf:73:a1:0b:d8:
         31:30:b9:c7:f9:18:37:39:ff:51:da:fd:a3:27:96:a8:8d:da:
         39:21:a3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:59 2024 by rpki-client on console-fra.rpki-client.org