Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/d281cd-ef77-4b0a-bd0c-6f87b96de0db/1/aumCCEFQ7UcsPjNVgzvf8nJugDI.roa
File:                     aumCCEFQ7UcsPjNVgzvf8nJugDI.roa (raw, json)
Hash identifier:          zj8/hQkg/k9Y6vqka1rC8XJ0ayXvbovkruD1C+hrOU8=
Subject key identifier:   6A:E9:82:08:41:50:ED:47:2C:3E:33:55:83:3B:DF:F2:72:6E:80:32
Certificate issuer:       /CN=b15e52fc773614a56fb83d8c883f9d7f913db87b
Certificate serial:       0A8A716C
Authority key identifier: B1:5E:52:FC:77:36:14:A5:6F:B8:3D:8C:88:3F:9D:7F:91:3D:B8:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sV5S_Hc2FKVvuD2MiD-df5E9uHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/d281cd-ef77-4b0a-bd0c-6f87b96de0db/1/aumCCEFQ7UcsPjNVgzvf8nJugDI.roa
Signing time:             Fri 18 Feb 2022 08:32:08 +0000
ROA not before:           Fri 18 Feb 2022 08:32:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44066
IP address blocks:        194.187.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176845164 (0xa8a716c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b15e52fc773614a56fb83d8c883f9d7f913db87b
        Validity
            Not Before: Feb 18 08:32:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6ae982084150ed472c3e3355833bdff2726e8032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a2:b2:b7:11:ae:96:a1:5e:e4:d3:8f:89:78:
                    14:a2:dd:83:19:17:d8:e3:12:cf:f8:41:6d:99:94:
                    c1:8a:62:54:d4:1b:dc:36:7f:e6:88:cf:cf:0b:c8:
                    a3:2a:02:02:6f:a8:75:e1:57:4c:28:91:1c:8d:0e:
                    39:a6:0d:02:fb:02:69:72:69:59:69:a4:29:32:df:
                    34:54:7a:8f:00:35:9a:b0:9d:fa:e9:0f:8a:f7:42:
                    22:d6:89:d1:82:54:b4:db:99:5e:f7:1a:82:21:7e:
                    7e:d8:d8:d4:ae:65:24:cd:1b:d0:5a:27:82:37:35:
                    92:66:24:cb:9b:ca:2f:00:56:c7:fb:ba:8b:18:cd:
                    25:01:45:0c:a1:75:3a:7e:eb:bd:9b:6d:78:32:7e:
                    33:33:2d:d9:70:53:45:91:6c:a8:3a:8e:d5:24:79:
                    1d:0a:58:af:b5:fc:f6:b6:b9:28:c5:12:a7:3e:a7:
                    e2:43:8d:ed:33:07:ba:ad:d5:8e:4c:1d:39:c3:fb:
                    06:7a:da:36:34:2e:01:bc:fd:19:38:86:11:ed:1b:
                    98:a3:28:d0:b9:2a:9e:d3:85:dd:f2:a6:70:64:e7:
                    b1:f1:de:ae:3f:48:95:a0:37:f6:4e:c4:cf:41:25:
                    3a:16:f8:ac:8a:a0:c1:79:02:6c:29:c0:7b:5c:0a:
                    01:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E9:82:08:41:50:ED:47:2C:3E:33:55:83:3B:DF:F2:72:6E:80:32
            X509v3 Authority Key Identifier:
                keyid:B1:5E:52:FC:77:36:14:A5:6F:B8:3D:8C:88:3F:9D:7F:91:3D:B8:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV5S_Hc2FKVvuD2MiD-df5E9uHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/d281cd-ef77-4b0a-bd0c-6f87b96de0db/1/aumCCEFQ7UcsPjNVgzvf8nJugDI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/d281cd-ef77-4b0a-bd0c-6f87b96de0db/1/sV5S_Hc2FKVvuD2MiD-df5E9uHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.187.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:40:a9:82:bd:d3:4d:e2:1f:07:70:5c:50:56:38:9b:49:d3:
         2c:fb:58:74:e0:f1:51:5c:f9:86:2a:9a:57:83:dc:41:2e:53:
         a5:10:b9:45:59:0a:66:0b:f5:ff:c7:20:16:58:54:dc:1c:57:
         d5:53:20:91:a6:bb:d2:79:45:1a:77:a5:d8:97:69:e4:67:9d:
         17:aa:e5:7d:64:ad:b1:0b:1c:dc:2d:86:c4:c6:12:70:64:91:
         d0:0c:42:63:71:53:20:35:1a:47:75:b9:e0:49:2f:6c:af:5c:
         56:4e:97:6a:29:92:08:a2:cb:25:cf:16:d9:e5:85:69:d1:c4:
         e7:1c:61:3f:43:81:5d:23:1d:2c:41:07:37:9c:af:27:c7:e0:
         a1:7d:14:3d:92:b8:bd:f1:4f:6e:2f:08:02:64:6b:13:65:55:
         8c:aa:86:36:ec:ca:74:8e:4d:bd:3a:a7:6a:57:d3:bd:57:f0:
         40:47:53:42:f9:ae:2a:d8:f8:a2:8d:52:38:51:80:01:26:cc:
         16:82:58:17:2f:19:e3:fa:4b:86:f9:19:cd:15:e0:a8:c5:34:
         72:2f:c7:4b:bc:19:8a:05:60:ea:6b:51:6d:bd:db:53:88:56:
         32:47:25:83:9e:a3:e4:9d:29:aa:7c:53:9c:db:e7:a2:1a:c8:
         61:98:0f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:17 2024 by rpki-client on console-ams.rpki-client.org