Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/81BSDg_SsslDgCFteLpAf3GT2hA.roa
File:                     81BSDg_SsslDgCFteLpAf3GT2hA.roa (raw, json)
Hash identifier:          rQ7mCSyblWSKCdR0rcSnTILJ8rgFd0cZBDON8Fwbyk4=
Subject key identifier:   F3:50:52:0E:0F:D2:B2:C9:43:80:21:6D:78:BA:40:7F:71:93:DA:10
Certificate issuer:       /CN=166c3820fb66505134c292f2c8f4badce4eb1ab5
Certificate serial:       02515FBC
Authority key identifier: 16:6C:38:20:FB:66:50:51:34:C2:92:F2:C8:F4:BA:DC:E4:EB:1A:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fmw4IPtmUFE0wpLyyPS63OTrGrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/81BSDg_SsslDgCFteLpAf3GT2hA.roa
Signing time:             Fri 24 Jun 2022 00:34:00 +0000
ROA not before:           Fri 24 Jun 2022 00:34:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44486
IP address blocks:        213.109.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38887356 (0x2515fbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166c3820fb66505134c292f2c8f4badce4eb1ab5
        Validity
            Not Before: Jun 24 00:34:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f350520e0fd2b2c94380216d78ba407f7193da10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d7:80:01:8c:c1:2b:d2:55:eb:c1:0a:1a:80:
                    b5:76:a7:e3:cb:17:54:35:d3:bf:06:e6:5f:f6:ff:
                    2a:6c:ec:fd:77:f9:4c:04:24:b5:32:fb:c4:b0:b3:
                    0f:71:82:a1:59:01:23:a0:60:46:e9:0d:92:b7:f4:
                    fa:65:a3:49:2f:7b:b1:0e:30:ae:82:e0:33:d8:84:
                    63:9e:7c:49:bb:88:b6:8a:2a:fa:09:2f:cc:ff:47:
                    4f:9d:2d:85:7f:72:91:49:6c:b4:93:e6:04:d7:08:
                    71:df:37:fc:19:48:0a:c3:d6:e7:8b:c2:9d:0e:75:
                    6b:08:9c:c9:3e:b3:f8:37:8d:29:07:56:3a:90:17:
                    9f:e8:47:2c:0d:b3:d2:6e:a0:77:d2:30:19:fd:63:
                    1f:c3:1c:9f:20:c6:f0:60:1a:ef:5f:67:e7:32:66:
                    36:7d:12:44:3d:38:51:52:91:e0:a9:23:7c:6e:aa:
                    7a:0b:7c:47:b0:80:a8:f8:39:5a:73:74:6d:1c:c2:
                    b3:49:23:2b:67:1a:f7:5f:5b:1f:93:dd:f1:8a:bc:
                    db:cf:9a:36:d9:f7:c2:00:61:58:f9:ec:f1:93:0a:
                    cc:71:49:79:04:61:9c:58:e7:2f:2b:59:b6:27:2d:
                    d8:7d:39:88:f6:78:51:5a:b5:6d:32:f6:97:1b:bb:
                    09:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:50:52:0E:0F:D2:B2:C9:43:80:21:6D:78:BA:40:7F:71:93:DA:10
            X509v3 Authority Key Identifier:
                keyid:16:6C:38:20:FB:66:50:51:34:C2:92:F2:C8:F4:BA:DC:E4:EB:1A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmw4IPtmUFE0wpLyyPS63OTrGrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/81BSDg_SsslDgCFteLpAf3GT2hA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fbbaab-3daf-42ab-b4f2-f00702d24ba0/1/Fmw4IPtmUFE0wpLyyPS63OTrGrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.109.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:fb:3e:4a:1a:74:27:b1:cc:cd:be:ac:f1:29:21:a4:be:97:
         f2:ef:06:3c:f3:07:2d:bf:09:df:62:66:6b:f1:96:79:35:ec:
         a7:b5:0f:11:1c:81:37:54:60:f0:22:99:50:41:a9:66:0a:c5:
         47:20:dd:e3:74:36:1f:8c:11:65:73:9a:9a:bb:d6:77:b3:b7:
         b2:ca:97:2e:96:d7:6d:fb:49:1b:0f:bf:e0:96:0a:2d:cd:1f:
         18:fa:c5:9d:1a:be:26:1f:10:91:f1:81:8d:4d:97:66:ef:7e:
         10:45:5f:94:6b:57:97:50:eb:79:99:40:2b:58:34:08:5d:6a:
         1b:91:f4:21:f5:79:70:64:09:dc:94:56:bb:e7:d9:16:4a:98:
         15:79:e7:a3:34:50:2b:32:ae:1f:b3:aa:99:0e:4a:bb:4a:4e:
         04:b3:19:ed:b4:01:65:65:84:da:45:0e:07:b9:bf:b0:a7:7e:
         5c:0f:d1:87:6e:7d:94:71:87:ff:28:ab:db:79:f8:52:e5:1f:
         bf:9c:3f:cb:3c:92:7a:12:86:e6:f7:0f:5f:7d:d0:ca:f8:6a:
         1b:c4:a8:29:c6:a3:0d:4f:e2:68:36:b2:ae:0c:c0:e9:ee:85:
         32:62:e8:22:93:d3:a1:6a:dd:47:b5:d9:31:99:f3:0d:c3:98:
         05:bc:e5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:42 2024 by rpki-client on console-ams.rpki-client.org