Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1940dc-37ad-4cb8-ad3c-56854cc3b4bf/1/Fe9zoX3UxXMtVn4itzCgljHS5_4.roa
File:                     Fe9zoX3UxXMtVn4itzCgljHS5_4.roa (raw, json)
Hash identifier:          esOG19FjqqF5xwmn/8gwIJzEDtB1TAyhDBFTnFWYNNU=
Subject key identifier:   15:EF:73:A1:7D:D4:C5:73:2D:56:7E:22:B7:30:A0:96:31:D2:E7:FE
Certificate issuer:       /CN=99c50f5110d95000de5cbf0113b2ad6d99cb8814
Certificate serial:       01F1D672
Authority key identifier: 99:C5:0F:51:10:D9:50:00:DE:5C:BF:01:13:B2:AD:6D:99:CB:88:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mcUPURDZUADeXL8BE7KtbZnLiBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/1940dc-37ad-4cb8-ad3c-56854cc3b4bf/1/Fe9zoX3UxXMtVn4itzCgljHS5_4.roa
Signing time:             Sat 01 Jan 2022 00:55:37 +0000
ROA not before:           Sat 01 Jan 2022 00:55:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43872
IP address blocks:        195.234.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32626290 (0x1f1d672)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99c50f5110d95000de5cbf0113b2ad6d99cb8814
        Validity
            Not Before: Jan  1 00:55:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15ef73a17dd4c5732d567e22b730a09631d2e7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4d:55:65:fa:97:4d:bd:5c:c3:68:19:ff:59:
                    65:fc:ed:fc:e9:e8:e9:b5:93:dc:31:68:51:ae:53:
                    48:90:b4:40:26:26:2f:61:d4:da:b8:ce:16:87:3c:
                    2c:66:a7:d8:4e:7f:15:aa:18:a1:68:83:1d:63:bc:
                    a1:35:b2:86:d8:96:6e:b9:99:cb:e5:40:a4:12:dd:
                    fd:1c:67:03:ae:72:aa:cc:f8:49:84:c6:1d:6b:13:
                    f1:9e:52:d8:0f:d4:1f:59:8d:01:9d:53:c9:31:ff:
                    1d:42:0f:3d:fd:f2:04:15:60:b0:51:e0:ba:fa:10:
                    20:2d:a9:97:65:33:55:31:f3:2a:07:90:54:e2:a3:
                    1d:6f:c1:a0:c9:a4:48:57:3d:16:04:ff:c6:14:db:
                    ac:b2:95:21:a4:bb:8f:b9:71:3d:14:66:d6:02:25:
                    aa:af:3e:75:4c:18:f8:8a:27:84:f9:2c:34:c6:b2:
                    ea:4f:84:2c:6b:ca:79:a7:99:b8:4e:8f:c1:9b:ea:
                    4f:5e:f1:8c:b2:f6:50:47:f9:78:da:22:0e:8f:c2:
                    7d:f3:b8:dc:a9:d6:64:90:31:b7:ae:24:d3:45:1d:
                    b8:9f:76:b3:ce:9e:58:8c:4b:19:22:74:10:2d:4d:
                    7f:09:87:fc:45:2b:fa:dc:e0:db:1d:fe:44:67:e9:
                    93:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EF:73:A1:7D:D4:C5:73:2D:56:7E:22:B7:30:A0:96:31:D2:E7:FE
            X509v3 Authority Key Identifier:
                keyid:99:C5:0F:51:10:D9:50:00:DE:5C:BF:01:13:B2:AD:6D:99:CB:88:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcUPURDZUADeXL8BE7KtbZnLiBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1940dc-37ad-4cb8-ad3c-56854cc3b4bf/1/Fe9zoX3UxXMtVn4itzCgljHS5_4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1940dc-37ad-4cb8-ad3c-56854cc3b4bf/1/mcUPURDZUADeXL8BE7KtbZnLiBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.234.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:86:0a:2b:47:ba:6c:3a:a1:69:15:78:41:ab:3c:cc:09:38:
         6f:df:8b:d9:0e:8d:a3:d0:1f:52:61:4d:04:b7:a7:6a:14:5d:
         06:38:20:6d:70:f3:f0:05:d5:3b:c5:c2:8e:84:80:ee:24:19:
         82:29:32:7e:ed:3d:ad:02:7a:a3:ee:3f:e2:b0:74:cf:20:93:
         5c:c6:db:89:8d:18:61:af:49:6c:ff:c5:89:69:94:c4:5d:75:
         44:a6:8b:10:b9:08:fc:81:c8:60:1d:74:30:0f:1f:9a:7f:27:
         c3:20:c1:a3:ec:e1:ed:c1:83:d7:2c:95:31:57:c0:6a:30:e2:
         ee:91:ef:7a:4a:03:73:15:8f:be:b6:b4:c4:58:47:0e:14:b0:
         15:e2:80:d5:cc:96:3f:a6:c0:bb:4f:9f:ec:ff:0a:96:e0:b0:
         22:54:ea:6c:31:81:61:3c:5e:73:c6:3e:8f:0e:d1:74:25:5d:
         a6:d4:f2:8a:cb:18:ba:14:3a:d7:3b:f8:21:51:64:bb:f9:e0:
         f9:2b:40:02:4d:2e:98:26:af:ce:4e:9d:d9:61:db:6e:5f:aa:
         71:91:5a:44:7e:99:f9:a4:0e:2b:54:26:99:1b:15:58:69:14:
         2c:5d:8d:03:65:5a:08:33:ad:83:bd:8d:98:ba:c9:c8:ef:fe:
         99:74:15:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:00 2024 by rpki-client on console-ams.rpki-client.org