Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2fc150-ad36-4fe7-a6b0-d63b98ce1dd6/1/flujUf9TbBK--kNdjteCmQPJKnU.roa
File:                     flujUf9TbBK--kNdjteCmQPJKnU.roa (raw, json)
Hash identifier:          wmgUScCnAWgIUbHFBfThEWRfmIf+C5IcH7VOCiz+vQE=
Subject key identifier:   7E:5B:A3:51:FF:53:6C:12:BE:FA:43:5D:8E:D7:82:99:03:C9:2A:75
Certificate issuer:       /CN=1d7c51255cb0653562fb869911f05d45414e61c5
Certificate serial:       F6ECCB
Authority key identifier: 1D:7C:51:25:5C:B0:65:35:62:FB:86:99:11:F0:5D:45:41:4E:61:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HXxRJVywZTVi-4aZEfBdRUFOYcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/2fc150-ad36-4fe7-a6b0-d63b98ce1dd6/1/flujUf9TbBK--kNdjteCmQPJKnU.roa
Signing time:             Sat 01 Jan 2022 05:53:12 +0000
ROA not before:           Sat 01 Jan 2022 05:53:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        188.95.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16182475 (0xf6eccb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d7c51255cb0653562fb869911f05d45414e61c5
        Validity
            Not Before: Jan  1 05:53:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7e5ba351ff536c12befa435d8ed7829903c92a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ae:28:fb:b3:43:aa:02:65:0a:d6:78:16:ca:
                    f3:5f:08:8c:64:98:cc:b5:db:d4:0a:58:ab:54:37:
                    29:1a:ef:a1:4a:6c:58:fc:cc:e5:e9:49:df:c9:0e:
                    ea:45:a7:a1:be:8a:67:0d:e5:10:5a:24:e8:dc:75:
                    ed:f6:b9:41:23:44:c1:6b:f7:88:bc:88:a6:6a:3b:
                    b0:59:3b:d3:52:47:28:bc:de:d5:54:76:d4:90:f3:
                    5d:45:3b:50:c8:3c:56:7e:ac:78:73:97:3d:c2:48:
                    8f:a3:b0:f2:23:a8:b8:65:d2:81:a3:50:1a:f2:39:
                    7e:79:2f:1f:b9:4e:ea:65:de:89:53:46:32:a4:85:
                    38:44:bf:2f:ba:8f:8d:81:6f:29:26:8a:dd:ae:5d:
                    40:b1:ba:cb:4c:3c:e4:cd:9d:76:1b:52:34:8e:4e:
                    16:d1:05:38:94:ea:0c:6b:50:f2:53:37:d4:c8:67:
                    6b:60:a6:77:05:46:1d:69:01:0d:e6:f2:38:6a:ac:
                    51:e2:96:ee:c9:ba:f5:50:10:45:0e:96:66:b7:22:
                    61:c6:24:db:9a:8d:64:f3:a6:78:73:cd:af:88:99:
                    b4:6e:cc:74:08:d2:c3:70:04:fb:b3:22:83:c2:e1:
                    df:a4:d5:f8:eb:78:57:6a:2a:91:81:de:71:f5:17:
                    39:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5B:A3:51:FF:53:6C:12:BE:FA:43:5D:8E:D7:82:99:03:C9:2A:75
            X509v3 Authority Key Identifier:
                keyid:1D:7C:51:25:5C:B0:65:35:62:FB:86:99:11:F0:5D:45:41:4E:61:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HXxRJVywZTVi-4aZEfBdRUFOYcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2fc150-ad36-4fe7-a6b0-d63b98ce1dd6/1/flujUf9TbBK--kNdjteCmQPJKnU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2fc150-ad36-4fe7-a6b0-d63b98ce1dd6/1/HXxRJVywZTVi-4aZEfBdRUFOYcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.95.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:ce:12:01:36:72:b9:76:cb:87:d3:af:32:70:e8:0c:27:2e:
         79:36:c5:12:82:38:5c:1a:07:8c:3e:89:4d:2a:b4:97:11:44:
         19:bb:01:7d:cd:86:02:2c:4e:fd:03:48:de:ae:91:cc:4c:8b:
         a2:ea:07:11:fe:24:3a:b6:a6:10:17:88:af:5c:eb:68:ba:57:
         26:3f:73:88:67:19:cb:12:12:cc:8e:b6:08:c1:0e:26:1d:24:
         43:be:99:7f:17:ba:43:2c:e4:c1:bd:3b:bc:6e:ad:8a:00:12:
         bc:ae:f2:31:1a:82:ab:64:99:95:fd:e6:3d:04:5a:98:71:33:
         12:66:8e:04:be:47:3b:c7:1f:82:19:3e:b7:98:f7:84:94:58:
         bd:b1:9c:23:5c:23:99:e9:91:a2:02:dd:f2:da:99:e8:b9:3f:
         ad:51:99:f6:7d:c5:6d:8b:be:e6:be:34:3e:cc:91:d5:2f:32:
         d9:e6:43:66:07:6f:99:aa:f7:43:06:17:0e:76:87:63:7f:cf:
         fe:dc:f9:46:5d:95:d1:ff:2d:53:1f:b6:0c:dc:af:65:a0:96:
         49:0c:ca:da:46:da:0a:46:be:9d:58:ff:58:5c:bc:ef:29:c3:
         0a:10:7a:79:5f:8e:03:c6:87:b0:4d:20:b6:4d:f5:75:e6:64:
         a3:0d:aa:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:11 2024 by rpki-client on console-ams.rpki-client.org