Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/207823-8bc3-45be-af9c-3c5127926612/1/fKt-0GZBXisxwf9YlSfAug-F8ss.roa
File:                     fKt-0GZBXisxwf9YlSfAug-F8ss.roa (raw, json)
Hash identifier:          E32EcZVY0af1pFsEK7kiG9j4QW4jMmz67Oq0Jym7Hw0=
Subject key identifier:   7C:AB:7E:D0:66:41:5E:2B:31:C1:FF:58:95:27:C0:BA:0F:85:F2:CB
Certificate issuer:       /CN=9c68d58b2d658ff20fdd0a44272c1db6f3cf7fc6
Certificate serial:       4FADDA
Authority key identifier: 9C:68:D5:8B:2D:65:8F:F2:0F:DD:0A:44:27:2C:1D:B6:F3:CF:7F:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nGjViy1lj_IP3QpEJywdtvPPf8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/207823-8bc3-45be-af9c-3c5127926612/1/fKt-0GZBXisxwf9YlSfAug-F8ss.roa
Signing time:             Tue 26 Apr 2022 17:41:32 +0000
ROA not before:           Tue 26 Apr 2022 17:41:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209883
IP address blocks:        195.8.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5221850 (0x4fadda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c68d58b2d658ff20fdd0a44272c1db6f3cf7fc6
        Validity
            Not Before: Apr 26 17:41:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7cab7ed066415e2b31c1ff589527c0ba0f85f2cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7d:5c:c9:8d:50:20:63:4d:6e:ad:72:e0:a7:
                    0a:53:52:35:9c:a9:49:eb:7a:d7:2a:7b:76:6c:54:
                    51:ff:cf:26:9d:b5:5f:93:60:d3:5a:11:31:4a:4b:
                    87:f0:70:60:7b:80:37:f4:26:b5:e9:59:c0:14:8d:
                    8f:38:61:8b:f9:ef:0f:6f:63:12:7c:75:1f:ba:86:
                    80:92:06:21:4d:4f:82:9e:18:fc:1d:72:ac:ee:17:
                    2c:8a:46:f3:d0:37:34:67:27:a3:a4:7c:63:d2:fe:
                    8c:ba:56:44:73:02:6e:05:88:7b:9c:ec:fa:99:71:
                    c5:1d:c8:7d:36:87:43:c2:09:37:8a:eb:fb:33:ee:
                    2b:ad:2d:36:bb:08:85:ec:74:42:71:14:95:50:aa:
                    39:12:4a:92:54:6b:2b:d2:76:b2:ce:5b:b9:9c:52:
                    68:e6:97:41:e8:07:87:1c:07:56:a2:b7:e5:14:56:
                    2c:0a:dd:e8:e8:34:5f:cd:4b:d0:ce:5a:9d:14:f6:
                    65:10:22:05:ea:b0:1a:d7:e4:dd:54:de:b5:6a:38:
                    18:ab:6a:96:fc:dc:20:c1:f5:44:09:b1:fc:dc:87:
                    ea:76:9a:80:c4:3a:7a:e8:f1:f6:3b:37:f8:13:14:
                    e3:73:d6:6d:80:a9:ca:d3:dd:87:b3:67:95:11:42:
                    44:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AB:7E:D0:66:41:5E:2B:31:C1:FF:58:95:27:C0:BA:0F:85:F2:CB
            X509v3 Authority Key Identifier:
                keyid:9C:68:D5:8B:2D:65:8F:F2:0F:DD:0A:44:27:2C:1D:B6:F3:CF:7F:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGjViy1lj_IP3QpEJywdtvPPf8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/207823-8bc3-45be-af9c-3c5127926612/1/fKt-0GZBXisxwf9YlSfAug-F8ss.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/207823-8bc3-45be-af9c-3c5127926612/1/nGjViy1lj_IP3QpEJywdtvPPf8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.8.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:dd:52:84:7c:fd:87:db:3b:a7:44:77:13:a2:a5:1c:54:ad:
         0b:c9:10:28:f1:af:1f:b4:fe:e9:b8:fa:d0:65:7e:4f:df:20:
         d2:0e:2b:24:fd:94:15:cd:76:d5:25:eb:20:bb:e7:11:32:54:
         bd:64:99:55:79:fe:52:9d:cf:7f:c7:7b:67:b9:73:97:0e:69:
         1d:93:52:7a:7e:51:c0:d2:85:7b:bc:1a:f9:d8:19:7f:7d:50:
         f4:a8:11:1e:24:6c:6c:d9:9d:36:17:d4:2c:4d:2d:31:38:9b:
         9c:d7:8d:6f:52:19:df:e1:9f:ac:22:9d:95:36:32:3b:55:ac:
         fd:1c:0c:39:4e:2e:54:dc:8e:96:3f:af:0f:bc:6a:ee:96:9b:
         3c:36:ae:4a:41:56:08:89:08:40:93:74:5f:90:bd:ca:87:3e:
         7a:af:ca:db:84:b2:98:dd:5a:05:c3:43:ae:f0:dc:d1:8a:89:
         38:c0:3d:47:17:e1:57:80:ad:a7:7a:6b:c3:f8:3e:70:79:b5:
         cb:f2:46:86:5c:ae:1b:63:ea:31:4c:11:db:fc:ad:72:d9:1b:
         d4:d3:a0:cb:a5:d5:91:c2:71:6c:3e:67:b4:05:ac:b8:e2:0a:
         72:8b:1a:0b:11:80:df:1e:d5:cd:ba:6a:2c:aa:55:61:14:0c:
         5b:82:08:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:57 2023 by rpki-client on console-fra.rpki-client.org