Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ad195b-63cc-4fff-9e7f-5914438351b6/1/gtMJVMSNoMgyPyoxSHhyjEjGDFI.roa
File:                     gtMJVMSNoMgyPyoxSHhyjEjGDFI.roa (raw, json)
Hash identifier:          TvQY8q/VDuoiMGQDO1U6fnovToKcFe6UxWPDoF+6/nE=
Subject key identifier:   82:D3:09:54:C4:8D:A0:C8:32:3F:2A:31:48:78:72:8C:48:C6:0C:52
Certificate issuer:       /CN=2138c8ea76e06f82832fb252bee9c85c57edfbae
Certificate serial:       06C8FF73
Authority key identifier: 21:38:C8:EA:76:E0:6F:82:83:2F:B2:52:BE:E9:C8:5C:57:ED:FB:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITjI6nbgb4KDL7JSvunIXFft-64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/ad195b-63cc-4fff-9e7f-5914438351b6/1/gtMJVMSNoMgyPyoxSHhyjEjGDFI.roa
Signing time:             Sat 01 Jan 2022 08:55:59 +0000
ROA not before:           Sat 01 Jan 2022 08:55:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     45002
IP address blocks:        195.230.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113835891 (0x6c8ff73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2138c8ea76e06f82832fb252bee9c85c57edfbae
        Validity
            Not Before: Jan  1 08:55:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=82d30954c48da0c8323f2a314878728c48c60c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:06:ec:80:e0:07:a0:6a:c7:2a:f3:1e:02:39:
                    af:a2:87:81:05:10:4d:03:e9:da:53:ab:0b:e8:ff:
                    d7:39:b0:03:0a:5d:06:62:b2:c0:74:4c:c4:cb:3f:
                    80:14:7a:7a:c1:26:17:7e:a7:31:82:b0:92:f4:09:
                    89:c5:98:ca:79:91:25:a9:77:77:bc:01:51:e6:13:
                    6f:ae:16:78:87:98:93:19:84:8e:d7:fe:95:f8:53:
                    b0:1d:3b:1f:76:6c:ac:7f:f1:de:5d:cd:78:da:34:
                    7d:14:62:07:9a:94:0b:05:ce:71:39:d4:eb:7c:3e:
                    8b:7f:2e:f9:1a:28:69:67:d5:5f:3f:d8:69:00:af:
                    ad:90:ad:26:c4:0a:0b:60:c0:32:26:93:e9:b8:b6:
                    de:af:f9:ac:10:84:33:10:3f:4c:f3:a4:af:60:0c:
                    05:6a:e8:09:51:09:fc:19:c1:52:a1:51:b9:90:e2:
                    d9:16:04:24:3c:d3:65:0f:44:a3:02:c9:6c:16:3b:
                    53:51:51:2d:de:86:a9:31:4a:10:65:c9:07:30:16:
                    6f:e7:1e:df:7a:a0:2f:d6:23:53:1c:1c:93:b2:4a:
                    e2:c6:9b:f7:21:9b:d6:6b:9a:63:1f:80:15:0c:20:
                    2e:64:15:99:6f:d6:3d:b4:67:4b:2b:e0:00:6a:f9:
                    38:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D3:09:54:C4:8D:A0:C8:32:3F:2A:31:48:78:72:8C:48:C6:0C:52
            X509v3 Authority Key Identifier:
                keyid:21:38:C8:EA:76:E0:6F:82:83:2F:B2:52:BE:E9:C8:5C:57:ED:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITjI6nbgb4KDL7JSvunIXFft-64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ad195b-63cc-4fff-9e7f-5914438351b6/1/gtMJVMSNoMgyPyoxSHhyjEjGDFI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ad195b-63cc-4fff-9e7f-5914438351b6/1/ITjI6nbgb4KDL7JSvunIXFft-64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.230.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:ec:07:73:95:e3:3f:e1:5d:7e:b2:61:91:fc:85:90:00:0a:
         d5:ce:19:0c:bf:36:c8:1c:43:aa:2f:64:d0:c2:f7:3d:27:0b:
         80:93:d5:d4:ec:5a:55:6c:9c:f7:1d:61:23:a3:0d:ca:9e:88:
         3e:8c:74:32:d0:38:af:af:4f:59:d8:13:9c:58:67:9c:b9:ae:
         33:62:37:c3:d6:7f:08:26:e0:ec:e9:70:c0:75:42:af:1a:9b:
         17:40:80:8a:03:f2:9e:63:fb:09:f0:8e:f9:2e:27:d2:22:b2:
         6d:65:48:c1:9f:a2:3a:18:8d:b0:00:29:ba:e7:fb:70:9b:81:
         76:d7:c2:af:24:3b:c4:0c:29:fa:0d:69:98:70:f6:ac:45:a6:
         71:e0:ff:01:58:ca:54:df:0c:f8:06:e3:20:d8:7a:b6:90:e5:
         1c:7c:8c:75:fe:af:37:71:e2:40:23:cd:76:40:2d:57:41:b5:
         27:94:b8:9d:32:9a:d1:7c:00:98:ae:5a:49:87:f1:0c:1e:e7:
         a7:23:4d:5f:3f:47:bb:11:08:40:88:cf:27:75:71:a1:c3:81:
         25:75:d5:01:67:b5:8a:db:b2:98:a4:b6:d7:e8:3b:a2:26:f3:
         6e:27:bb:09:1f:c8:aa:bb:36:71:e9:11:68:10:63:55:39:d1:
         6d:41:4b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:09 2024 by rpki-client on console-fra.rpki-client.org