Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0b8a72-7f7c-44e5-ad18-3d475e8e6c68/1/SCHNT7wPf1pEVLs8HG601rwKufs.roa
File:                     SCHNT7wPf1pEVLs8HG601rwKufs.roa (raw, json)
Hash identifier:          YzQm24/wnkSeJzcSXJXM8YBL6LlXzPg1ItRKw3G/Oyc=
Subject key identifier:   48:21:CD:4F:BC:0F:7F:5A:44:54:BB:3C:1C:6E:B4:D6:BC:0A:B9:FB
Certificate issuer:       /CN=5251cedc9387c6b3d37fd56461019ca52118aa73
Certificate serial:       EB7EAC
Authority key identifier: 52:51:CE:DC:93:87:C6:B3:D3:7F:D5:64:61:01:9C:A5:21:18:AA:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UlHO3JOHxrPTf9VkYQGcpSEYqnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0b8a72-7f7c-44e5-ad18-3d475e8e6c68/1/SCHNT7wPf1pEVLs8HG601rwKufs.roa
Signing time:             Thu 05 May 2022 13:27:39 +0000
ROA not before:           Thu 05 May 2022 13:27:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        195.64.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15433388 (0xeb7eac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5251cedc9387c6b3d37fd56461019ca52118aa73
        Validity
            Not Before: May  5 13:27:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4821cd4fbc0f7f5a4454bb3c1c6eb4d6bc0ab9fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e1:16:a2:e4:83:63:26:a1:1e:76:08:7f:12:
                    ef:d0:d5:d1:a0:6a:c6:63:b0:4d:d9:b5:d2:ed:e2:
                    4c:d3:c2:b1:92:a0:42:18:6a:ef:15:ea:d2:d5:d4:
                    0b:da:9e:34:29:3f:e6:9c:37:07:1a:39:20:79:a7:
                    b9:45:98:41:ce:92:a7:82:e5:41:5e:71:cc:b6:0a:
                    6e:ab:83:23:cc:05:61:f7:78:99:7f:33:e8:dc:71:
                    ab:29:d1:e9:b0:77:de:52:4d:62:36:c0:40:14:30:
                    55:99:ba:de:2c:d1:09:71:3a:bb:ed:1a:ad:ff:24:
                    02:44:af:80:8d:63:d0:31:18:84:10:d7:ac:41:53:
                    5e:16:f2:5f:4e:dc:5a:d4:2f:db:b9:e4:20:54:00:
                    d5:84:74:00:41:ea:ad:b2:ed:af:f8:6b:d0:ab:73:
                    5d:df:57:6c:dd:f5:02:62:ad:e1:ad:06:eb:cb:c0:
                    fa:bc:2c:6b:f8:c4:aa:d6:09:a3:26:c2:25:fe:c4:
                    fa:b0:7a:18:60:d7:54:0e:2e:02:51:57:0d:07:a8:
                    df:06:45:6a:16:40:fb:3a:53:b8:7b:15:60:91:f4:
                    c2:56:f1:7d:ad:94:90:b8:6b:9d:91:06:58:d1:13:
                    3d:54:07:63:ec:91:31:2f:d5:ed:3d:d4:3f:40:a4:
                    e5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:21:CD:4F:BC:0F:7F:5A:44:54:BB:3C:1C:6E:B4:D6:BC:0A:B9:FB
            X509v3 Authority Key Identifier:
                keyid:52:51:CE:DC:93:87:C6:B3:D3:7F:D5:64:61:01:9C:A5:21:18:AA:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlHO3JOHxrPTf9VkYQGcpSEYqnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b8a72-7f7c-44e5-ad18-3d475e8e6c68/1/SCHNT7wPf1pEVLs8HG601rwKufs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b8a72-7f7c-44e5-ad18-3d475e8e6c68/1/UlHO3JOHxrPTf9VkYQGcpSEYqnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.64.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:74:14:e3:7d:98:e1:98:c5:6d:53:d5:51:c1:70:a4:81:41:
         70:f5:0e:32:c6:b3:f8:95:4a:80:92:ef:fa:f7:e1:e7:79:99:
         08:81:2b:dc:21:10:6d:99:64:76:96:14:e3:d5:cf:e1:fe:09:
         a5:5f:3f:70:2f:51:83:7a:09:83:fc:0d:e0:bb:e9:f2:8e:66:
         18:02:51:cd:83:f8:0c:35:4c:8b:fb:f9:86:01:64:49:6a:b2:
         14:50:9d:2e:3d:bc:fb:af:33:0f:e7:a1:42:c8:05:1b:cd:bf:
         61:3f:28:40:4b:82:d9:f1:b7:fe:45:eb:c8:8f:74:98:b3:d2:
         79:6c:fe:34:30:6c:e7:04:c5:c1:73:f6:b2:f8:c7:4a:b5:5c:
         e5:18:8d:a0:67:63:e8:a6:9f:d8:e4:9c:5f:66:90:15:66:06:
         4a:b8:72:26:e6:13:3f:ca:5b:7c:c3:a4:29:6d:a8:ab:10:96:
         51:b8:17:3f:87:3f:5c:d8:54:2e:f9:8e:92:55:29:6c:f6:5f:
         a3:67:77:b2:f7:3e:1f:39:c2:d5:ac:00:2d:fd:0c:b0:1f:aa:
         5a:8c:6b:dc:a2:f8:9f:b0:7f:2c:be:b5:ef:03:34:44:73:a6:
         47:5c:d4:41:72:19:4a:7d:f0:5c:d5:f8:68:38:d5:2f:78:6f:
         d0:28:43:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:24 2024 by rpki-client on console-fra.rpki-client.org