Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/f82cc3-00a3-4229-92ff-e5992b4b3fad/1/wYj5ihNwEqcT-Kh8_dAfbeNIlJY.roa
File:                     wYj5ihNwEqcT-Kh8_dAfbeNIlJY.roa (raw, json)
Hash identifier:          +nZ03xrpH1kT71F0gs7a77ye8fopaBCwyggqs0F31AU=
Subject key identifier:   C1:88:F9:8A:13:70:12:A7:13:F8:A8:7C:FD:D0:1F:6D:E3:48:94:96
Certificate issuer:       /CN=25b685a8efb8d625c7abaacbfa5f66182a7ae70c
Certificate serial:       37D70FA2
Authority key identifier: 25:B6:85:A8:EF:B8:D6:25:C7:AB:AA:CB:FA:5F:66:18:2A:7A:E7:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JbaFqO-41iXHq6rL-l9mGCp65ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/f82cc3-00a3-4229-92ff-e5992b4b3fad/1/wYj5ihNwEqcT-Kh8_dAfbeNIlJY.roa
Signing time:             Sat 01 Jan 2022 09:03:40 +0000
ROA not before:           Sat 01 Jan 2022 09:03:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24880
IP address blocks:        81.27.128.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 936841122 (0x37d70fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25b685a8efb8d625c7abaacbfa5f66182a7ae70c
        Validity
            Not Before: Jan  1 09:03:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c188f98a137012a713f8a87cfdd01f6de3489496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ef:d2:25:f8:8b:dc:0e:52:0b:72:35:70:ea:
                    be:89:7c:d7:16:fc:61:c4:ce:7d:49:96:fb:d9:b8:
                    da:4c:8d:ea:08:47:de:c6:3a:aa:60:1b:15:3f:d6:
                    53:75:b3:35:cd:f6:c9:d6:1b:fe:42:36:5c:27:ed:
                    0f:55:05:25:9f:2a:ff:37:20:dd:7f:59:d6:d6:bc:
                    0c:43:64:f6:58:87:80:76:98:57:f4:62:5a:07:04:
                    6b:f9:e4:d0:c8:0e:23:9b:9d:ff:d6:f1:74:e2:92:
                    21:9e:19:2c:53:b8:49:c6:bf:48:16:41:21:a5:9a:
                    70:ce:77:e8:fc:88:71:99:e0:a1:84:d6:26:4d:0f:
                    ec:55:2c:71:b2:3f:1f:08:dc:2b:5e:34:31:89:76:
                    53:85:0c:76:49:db:34:c5:2e:ad:08:07:eb:f3:c0:
                    84:5b:10:a8:09:f7:7d:4f:d2:5e:ff:9f:2a:6d:69:
                    27:9f:e4:b6:6c:bc:83:92:16:e4:90:ac:09:49:66:
                    ba:b1:a9:71:c0:81:30:55:e8:85:b4:d7:6e:86:3f:
                    e8:e8:bd:e1:0e:2c:b7:9b:d1:91:7e:55:6a:c1:27:
                    04:9c:96:f1:85:f7:77:dc:da:10:dc:f5:d8:65:0d:
                    2b:39:60:ca:21:1e:d4:06:27:50:b1:33:af:bd:8e:
                    31:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:88:F9:8A:13:70:12:A7:13:F8:A8:7C:FD:D0:1F:6D:E3:48:94:96
            X509v3 Authority Key Identifier:
                keyid:25:B6:85:A8:EF:B8:D6:25:C7:AB:AA:CB:FA:5F:66:18:2A:7A:E7:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbaFqO-41iXHq6rL-l9mGCp65ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f82cc3-00a3-4229-92ff-e5992b4b3fad/1/wYj5ihNwEqcT-Kh8_dAfbeNIlJY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f82cc3-00a3-4229-92ff-e5992b4b3fad/1/JbaFqO-41iXHq6rL-l9mGCp65ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.27.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5a:6d:a4:80:16:e3:ef:ba:8b:ce:41:21:ae:e5:62:50:75:35:
         01:57:84:6e:5c:2c:d3:75:52:11:5c:30:31:35:f0:20:27:b2:
         86:bf:fc:e3:53:58:a0:47:ca:e7:c4:b3:25:b1:a9:05:5a:55:
         15:f5:5f:94:31:92:50:2a:e3:03:f0:9f:ed:ea:1c:98:4d:ef:
         e3:00:d9:0f:02:b8:93:34:67:46:7e:1c:13:1e:2b:af:3a:7e:
         1d:eb:da:bb:cb:61:d8:a6:d3:36:9a:c7:f4:dd:32:bb:c2:8a:
         0f:f4:e4:a5:e9:44:9e:a8:d9:7c:90:a2:d4:41:7f:f2:97:c5:
         15:0c:63:36:b4:fe:de:28:0f:85:3f:65:3c:4b:aa:d6:77:91:
         82:c4:a8:be:d6:73:f2:2e:9c:36:f4:54:00:97:ae:69:3a:3b:
         7e:50:90:8e:63:7c:56:a2:c7:f9:a0:86:03:c2:e6:7f:0b:f7:
         96:b1:33:10:2d:48:4c:e0:1e:f2:20:01:da:fc:99:6e:ec:a4:
         77:b5:07:ff:8f:02:cd:cb:d4:df:73:da:e9:fe:71:36:ed:2f:
         32:9d:ef:69:2c:64:c6:e4:4c:64:3a:92:98:e8:df:1e:81:39:
         5b:68:5f:1a:e4:88:e9:9e:f3:32:f9:67:9e:d7:53:7a:d1:33:
         92:e4:d4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:50 2024 by rpki-client on console-ams.rpki-client.org