Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/1-n-eyGj5FtOjje9oT_akpkDNPY4.roa
File:                     1-n-eyGj5FtOjje9oT_akpkDNPY4.roa (raw, json)
Hash identifier:          VlX7tAgQZ7BxCDGfqE83SXFGBUbVPvSj78ELFyiUqUU=
Subject key identifier:   FA:7F:9E:C8:68:F9:16:D3:A3:8D:EF:68:4F:F6:A4:A6:40:CD:3D:8E
Certificate issuer:       /CN=537192cc8fcf52e81e8d0530466fe99a56aaf3d1
Certificate serial:       CD31F6
Authority key identifier: 53:71:92:CC:8F:CF:52:E8:1E:8D:05:30:46:6F:E9:9A:56:AA:F3:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U3GSzI_PUugejQUwRm_pmlaq89E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/1-n-eyGj5FtOjje9oT_akpkDNPY4.roa
Signing time:             Sat 01 Jan 2022 01:57:31 +0000
ROA not before:           Sat 01 Jan 2022 01:57:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208261
IP address blocks:        62.204.43.0/24 maxlen: 24
                          193.58.42.0/23 maxlen: 23
                          45.149.56.0/22 maxlen: 22
                          193.57.226.0/23 maxlen: 23
                          2a0f:ce00::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13447670 (0xcd31f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=537192cc8fcf52e81e8d0530466fe99a56aaf3d1
        Validity
            Not Before: Jan  1 01:57:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fa7f9ec868f916d3a38def684ff6a4a640cd3d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a4:80:59:c4:83:b8:5f:c4:df:19:be:32:53:
                    ea:bd:21:a0:b6:7f:03:e1:e8:14:f3:09:a7:07:1c:
                    5e:fd:51:76:c7:5b:3f:8a:d2:0e:0c:74:d1:b4:5a:
                    90:7d:8e:b6:ae:cd:8e:66:ff:e7:dd:82:03:74:db:
                    ea:3c:28:22:ef:51:4b:e6:0d:6a:45:f1:b3:7f:ab:
                    73:59:ba:a2:8e:8e:98:af:42:12:4f:43:d7:6d:c1:
                    9d:2b:f8:cf:7a:52:25:f5:89:fc:f5:76:c0:57:15:
                    69:89:a2:99:e3:2a:26:03:96:99:49:e2:e4:69:85:
                    e1:46:b3:ab:ba:30:51:1d:4a:b9:f2:bb:b3:4b:0f:
                    60:46:2e:09:1e:89:1d:a5:5f:e7:32:bf:04:ea:af:
                    3a:8e:e0:d0:94:09:69:90:ca:75:b4:c5:c9:3b:7d:
                    f0:93:39:91:ed:b8:b1:c0:48:21:93:ae:6a:ee:ef:
                    b2:40:51:e3:71:b7:41:b4:16:b5:f1:11:77:21:bb:
                    5e:0a:f4:ea:9f:c7:1f:f0:76:e5:d1:44:2d:20:85:
                    d5:3d:09:9b:e9:c2:87:f1:11:24:09:ca:b6:94:ee:
                    54:0d:4f:33:bd:7f:e9:82:48:6d:f1:0d:9d:17:c8:
                    82:fb:f5:27:06:ef:dd:db:4a:37:cf:46:4f:bb:8b:
                    1e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7F:9E:C8:68:F9:16:D3:A3:8D:EF:68:4F:F6:A4:A6:40:CD:3D:8E
            X509v3 Authority Key Identifier:
                keyid:53:71:92:CC:8F:CF:52:E8:1E:8D:05:30:46:6F:E9:9A:56:AA:F3:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3GSzI_PUugejQUwRm_pmlaq89E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/1-n-eyGj5FtOjje9oT_akpkDNPY4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/U3GSzI_PUugejQUwRm_pmlaq89E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.56.0/22
                  62.204.43.0/24
                  193.57.226.0/23
                  193.58.42.0/23
                IPv6:
                  2a0f:ce00::/29

    Signature Algorithm: sha256WithRSAEncryption
         45:a7:6b:5b:4b:7e:df:94:8c:cc:28:75:4a:25:5b:0a:56:81:
         bc:77:46:78:42:c5:cc:4d:33:ca:a4:49:90:0a:15:e9:4d:9b:
         66:8b:c3:3f:a8:76:39:92:0f:e9:e5:ff:b0:f1:ff:f8:a9:39:
         07:13:98:29:4d:b1:e4:bc:7e:dd:ed:f9:96:9c:8d:b0:a5:19:
         64:86:79:91:e9:f8:d3:b2:d9:bb:c5:a4:38:5b:1f:6b:24:c3:
         98:ca:fa:fc:17:17:a8:8f:df:76:7f:70:62:d0:2b:bd:31:e3:
         08:c6:60:3b:97:41:16:3b:7c:77:2c:df:9b:eb:26:1a:fa:b2:
         92:73:64:58:0a:ac:9e:14:be:5e:c2:ad:cd:e5:bb:9f:48:bf:
         f5:ef:57:9a:12:e4:b8:c5:ff:49:75:bf:c5:5b:7e:73:c8:c3:
         e0:2d:fd:27:e7:fb:d2:91:12:cb:1c:f4:ce:97:56:0a:fc:ae:
         42:e1:4d:c3:ba:3d:51:76:95:97:e1:68:3b:6c:56:b2:5c:0c:
         93:11:3b:b4:c9:8d:0d:b8:89:11:1b:92:64:bb:58:5d:e8:84:
         69:86:c0:b7:2f:92:18:b4:e0:16:ec:24:32:99:4e:31:14:a6:
         79:28:73:73:2f:90:df:00:1e:d8:66:e5:cc:42:d4:fb:74:29:
         f6:b6:fb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:10 2024 by rpki-client on console-ams.rpki-client.org