Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/81f2a2-ad1b-4c91-b5fe-4cca4a4d9b2e/1/hFa317Iyu_xmLb7fZ-O7WAvX3Vk.roa
File:                     hFa317Iyu_xmLb7fZ-O7WAvX3Vk.roa (raw, json)
Hash identifier:          2wKphDK/3h3IInUTzEVeRfaGCiQbaOQtD/ZA9ayByek=
Subject key identifier:   84:56:B7:D7:B2:32:BB:FC:66:2D:BE:DF:67:E3:BB:58:0B:D7:DD:59
Certificate issuer:       /CN=692f2ec920381d8fdeda6d9da34bd4d4ee7167c0
Certificate serial:       02284063
Authority key identifier: 69:2F:2E:C9:20:38:1D:8F:DE:DA:6D:9D:A3:4B:D4:D4:EE:71:67:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aS8uySA4HY_e2m2do0vU1O5xZ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/81f2a2-ad1b-4c91-b5fe-4cca4a4d9b2e/1/hFa317Iyu_xmLb7fZ-O7WAvX3Vk.roa
Signing time:             Sat 01 Jan 2022 05:53:01 +0000
ROA not before:           Sat 01 Jan 2022 05:53:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        83.171.244.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36192355 (0x2284063)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=692f2ec920381d8fdeda6d9da34bd4d4ee7167c0
        Validity
            Not Before: Jan  1 05:53:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8456b7d7b232bbfc662dbedf67e3bb580bd7dd59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:09:95:0b:84:09:a5:d6:2c:e6:57:8c:46:
                    5e:92:3b:97:37:e5:74:6c:de:90:07:73:16:38:5a:
                    d5:c7:0f:e9:41:1e:2b:29:6c:37:68:31:43:4c:10:
                    87:a6:08:04:77:7d:ae:bd:27:16:a3:6f:2a:6e:ff:
                    5b:a6:ae:ca:17:7e:14:d3:97:67:03:9c:ed:7a:a2:
                    db:6c:a4:7d:df:1e:0d:bd:d7:6d:a5:4d:6c:24:6f:
                    7b:5e:bc:b2:d3:19:96:ad:26:18:93:27:e4:40:c3:
                    e1:60:45:ee:9b:f1:89:33:15:60:2e:0f:80:6b:b1:
                    2b:2f:07:ed:77:cb:48:d2:93:22:d9:30:e7:81:db:
                    d4:d3:96:ca:71:4a:9d:ef:2a:6f:ef:92:d8:d1:bc:
                    a3:ed:47:94:47:6a:d6:cf:f8:94:c0:8b:cd:25:fd:
                    a0:d5:1d:e8:20:9f:0a:c3:94:a6:73:11:fc:11:6f:
                    74:84:11:42:51:29:9b:f8:df:17:50:88:cc:7f:48:
                    0a:1f:98:81:62:83:4a:77:9e:9d:cd:75:04:6b:21:
                    bc:02:a9:d5:8d:ea:bf:a3:9f:d8:af:6e:6d:3c:b1:
                    4d:98:93:80:0e:58:fa:51:6f:f2:d5:60:c2:0f:70:
                    f1:66:0a:f8:c9:e8:aa:82:22:9c:4c:74:d7:c2:20:
                    79:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:56:B7:D7:B2:32:BB:FC:66:2D:BE:DF:67:E3:BB:58:0B:D7:DD:59
            X509v3 Authority Key Identifier:
                keyid:69:2F:2E:C9:20:38:1D:8F:DE:DA:6D:9D:A3:4B:D4:D4:EE:71:67:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aS8uySA4HY_e2m2do0vU1O5xZ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/81f2a2-ad1b-4c91-b5fe-4cca4a4d9b2e/1/hFa317Iyu_xmLb7fZ-O7WAvX3Vk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/81f2a2-ad1b-4c91-b5fe-4cca4a4d9b2e/1/aS8uySA4HY_e2m2do0vU1O5xZ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.171.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:04:fa:5f:22:f5:c3:ba:d9:90:10:31:86:35:0d:b6:f0:52:
         49:20:a6:40:e0:7e:a5:81:b0:3a:d2:96:6b:bb:1e:8f:d5:71:
         42:1d:e1:bb:33:5d:a8:23:82:6a:7b:75:b1:70:e3:d1:f3:ad:
         12:98:ae:06:7e:b2:68:ea:89:68:06:e2:44:87:13:8c:62:ac:
         29:45:82:d4:9e:8a:0b:b2:f5:ca:7d:fe:43:9a:cb:5c:1c:14:
         29:1c:79:4a:78:1f:61:ba:0d:d2:0e:d2:1b:6b:a7:65:15:57:
         f4:cd:1b:c6:77:73:aa:80:81:bd:cb:6d:f3:31:e4:db:4c:9e:
         02:54:1e:77:ce:15:43:b5:4b:33:1e:1a:7a:e6:a6:b1:8c:20:
         14:1f:0f:53:33:07:96:b5:20:53:1d:b9:4b:76:16:7e:f2:86:
         fb:f8:b0:69:70:01:6d:e9:49:91:06:63:0a:37:7c:15:db:71:
         3a:5d:64:ea:27:31:0f:7b:3f:97:42:d1:39:cb:8b:d9:a4:3e:
         f3:32:24:f8:77:f0:d2:ab:ef:2a:bf:c2:c5:cd:3d:3f:2c:55:
         23:84:ed:a9:f8:00:3e:fb:6d:ae:4c:a3:c3:de:3d:03:f0:65:
         5b:15:d7:58:50:a5:51:b1:3b:de:a3:6e:2a:d2:fc:7c:80:3b:
         e0:6c:bd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:14 2024 by rpki-client on console-fra.rpki-client.org