Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/97e08b-4b3e-481d-a6c3-9fe226dd670b/1/d8Jnu9P0a_wJ-m96CtRxIw8tPRM.roa
File:                     d8Jnu9P0a_wJ-m96CtRxIw8tPRM.roa (raw, json)
Hash identifier:          zRPn2QWzeZmwgI5wu2CvyWNyndtFzbur0gHZrA9TziA=
Subject key identifier:   77:C2:67:BB:D3:F4:6B:FC:09:FA:6F:7A:0A:D4:71:23:0F:2D:3D:13
Certificate issuer:       /CN=e5b809d3d4985affa6c3905d613e4631172936c3
Certificate serial:       02023C84
Authority key identifier: E5:B8:09:D3:D4:98:5A:FF:A6:C3:90:5D:61:3E:46:31:17:29:36:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5bgJ09SYWv-mw5BdYT5GMRcpNsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/97e08b-4b3e-481d-a6c3-9fe226dd670b/1/d8Jnu9P0a_wJ-m96CtRxIw8tPRM.roa
Signing time:             Sat 01 Jan 2022 06:55:38 +0000
ROA not before:           Sat 01 Jan 2022 06:55:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39537
IP address blocks:        195.189.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33700996 (0x2023c84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5b809d3d4985affa6c3905d613e4631172936c3
        Validity
            Not Before: Jan  1 06:55:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=77c267bbd3f46bfc09fa6f7a0ad471230f2d3d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:47:53:88:83:97:6a:07:3b:ca:1a:21:6b:2a:
                    a2:6d:78:46:5f:20:0e:20:39:d4:4a:03:1d:df:ae:
                    1e:24:d3:fd:d7:96:cd:ce:96:9b:db:74:ff:f9:28:
                    ec:67:f2:05:e4:bc:ec:da:89:67:c8:09:c4:13:81:
                    71:a3:de:dc:bf:c1:8f:8a:7e:5a:c2:85:b6:4c:10:
                    52:d1:c2:9e:70:70:b1:a3:dd:dc:80:53:c7:55:ae:
                    ab:3f:c1:a0:09:eb:02:44:9c:01:73:e8:fa:c1:af:
                    f1:f1:f5:b8:fc:d2:a0:b3:28:69:df:fa:b5:bb:3e:
                    61:a9:a0:11:d1:72:d5:39:67:60:86:24:91:de:0f:
                    b3:33:02:41:e4:ab:b9:92:f7:ce:52:98:0a:48:7f:
                    2b:57:73:9d:df:25:3c:e8:cc:8b:fa:fb:ab:ee:e8:
                    de:7c:a4:00:80:f7:75:c3:d5:04:d1:0d:ed:7a:92:
                    4e:ee:a1:d7:73:f1:6e:32:8f:5b:2f:da:09:f3:a1:
                    bd:bb:ad:f1:9b:0d:30:7a:6f:b4:6e:f6:28:82:b4:
                    45:b9:ad:a6:ad:68:4d:33:70:28:f7:3f:37:96:0b:
                    83:b7:75:64:82:c5:dc:43:dc:b6:77:c1:d3:d1:85:
                    25:e2:eb:85:f2:95:c2:bb:b0:b4:df:e5:a1:dc:33:
                    29:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C2:67:BB:D3:F4:6B:FC:09:FA:6F:7A:0A:D4:71:23:0F:2D:3D:13
            X509v3 Authority Key Identifier:
                keyid:E5:B8:09:D3:D4:98:5A:FF:A6:C3:90:5D:61:3E:46:31:17:29:36:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5bgJ09SYWv-mw5BdYT5GMRcpNsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97e08b-4b3e-481d-a6c3-9fe226dd670b/1/d8Jnu9P0a_wJ-m96CtRxIw8tPRM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97e08b-4b3e-481d-a6c3-9fe226dd670b/1/5bgJ09SYWv-mw5BdYT5GMRcpNsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.189.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:94:03:48:05:4b:20:f6:d1:2a:34:c7:78:15:9a:1d:4f:52:
         b8:1e:98:f5:5a:20:c7:e5:a9:bb:be:68:7d:e0:79:68:12:0d:
         40:72:b7:ba:81:a7:3b:77:9b:99:cb:bf:70:80:85:a6:3e:6c:
         c7:87:68:01:1f:12:9b:83:cf:10:c8:d3:54:d7:a6:73:65:e0:
         a2:c6:e9:13:78:e6:81:3d:80:a0:4d:50:78:3b:68:80:80:f6:
         1d:aa:6a:16:41:b0:22:aa:a4:eb:30:2f:b8:7b:b8:28:7f:2e:
         29:59:81:63:6b:10:59:bc:b0:60:48:3c:f5:a9:4e:87:1d:22:
         56:8e:2c:59:05:0c:39:38:95:95:a2:73:7d:17:01:b8:bf:8a:
         9b:a2:b3:33:99:a0:d2:ed:55:c2:a7:e9:ef:2a:84:f4:67:87:
         38:3e:47:7d:9a:aa:2a:48:a1:67:73:69:c9:40:2f:0e:cc:84:
         d5:08:ae:2e:aa:0d:d6:8e:cc:cc:85:b5:23:4b:c7:73:92:85:
         7c:19:1b:81:25:fd:eb:aa:73:2c:35:b5:17:31:4b:72:66:02:
         fb:53:f5:61:9b:60:e7:81:97:1b:ed:b3:94:c4:d7:b3:e5:00:
         e5:97:c6:dd:dc:55:25:8c:7c:33:47:5a:17:eb:46:8e:79:b1:
         3c:45:d8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:07 2024 by rpki-client on console-fra.rpki-client.org