Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a96d12-20db-4fdc-b7a1-24b5de33054c/1/unI0-UReqtTJXAq521kTO7xwBA4.roa
File:                     unI0-UReqtTJXAq521kTO7xwBA4.roa (raw, json)
Hash identifier:          k1pCohysrFM8mlMbcFbWGl1IzCfgKR4+eR4rvjJz/fE=
Subject key identifier:   BA:72:34:F9:44:5E:AA:D4:C9:5C:0A:B9:DB:59:13:3B:BC:70:04:0E
Certificate issuer:       /CN=6b20a80a6b31655d09f9305a4f0a59cd3313ddfb
Certificate serial:       0563EA8F
Authority key identifier: 6B:20:A8:0A:6B:31:65:5D:09:F9:30:5A:4F:0A:59:CD:33:13:DD:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ayCoCmsxZV0J-TBaTwpZzTMT3fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/a96d12-20db-4fdc-b7a1-24b5de33054c/1/unI0-UReqtTJXAq521kTO7xwBA4.roa
Signing time:             Fri 14 Jan 2022 15:42:04 +0000
ROA not before:           Fri 14 Jan 2022 15:42:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29137
IP address blocks:        195.234.250.0/23 maxlen: 23
                          195.234.248.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90434191 (0x563ea8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b20a80a6b31655d09f9305a4f0a59cd3313ddfb
        Validity
            Not Before: Jan 14 15:42:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ba7234f9445eaad4c95c0ab9db59133bbc70040e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ba:2c:95:c9:1f:fe:e9:b1:95:0c:f5:a4:4e:
                    be:2b:5c:ae:0a:eb:20:b3:e2:47:80:b7:e4:f1:f3:
                    52:df:5b:a5:b3:11:bd:6a:b1:67:5e:73:20:10:50:
                    8e:d7:8d:ac:62:83:e2:54:60:b7:71:b8:be:a5:fb:
                    72:75:2e:13:fd:75:a0:bd:af:01:5a:31:b7:2e:df:
                    3f:54:62:57:7c:1e:b5:da:50:45:35:2c:40:a1:dc:
                    b8:2d:80:89:98:51:00:92:76:3d:7d:de:9d:0a:f4:
                    f0:42:22:b4:d1:b4:26:21:60:33:d7:a4:f8:b2:98:
                    fe:c9:a8:34:59:0f:9f:ee:26:70:a4:b6:f1:9c:7c:
                    2f:fa:90:cd:5e:b0:ba:4c:cc:6f:16:7f:a7:a3:98:
                    41:04:58:5f:e7:83:97:ae:17:55:e7:58:55:08:2a:
                    4c:64:9b:66:53:cc:33:7e:9e:9a:eb:b2:04:c8:4f:
                    2b:4e:7d:22:5e:12:bc:8e:15:7b:cd:cf:9b:4d:fa:
                    cd:51:15:f6:bd:2b:10:ff:56:0f:54:14:8a:c6:32:
                    39:c6:ce:19:0a:e5:98:f1:06:96:62:9d:22:5b:47:
                    05:9d:83:cc:e8:b9:37:69:ab:36:6c:e9:58:d7:36:
                    e8:90:e3:7e:7a:71:14:b6:35:3b:b7:d4:b1:4a:a9:
                    43:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:72:34:F9:44:5E:AA:D4:C9:5C:0A:B9:DB:59:13:3B:BC:70:04:0E
            X509v3 Authority Key Identifier:
                keyid:6B:20:A8:0A:6B:31:65:5D:09:F9:30:5A:4F:0A:59:CD:33:13:DD:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayCoCmsxZV0J-TBaTwpZzTMT3fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a96d12-20db-4fdc-b7a1-24b5de33054c/1/unI0-UReqtTJXAq521kTO7xwBA4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a96d12-20db-4fdc-b7a1-24b5de33054c/1/ayCoCmsxZV0J-TBaTwpZzTMT3fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.234.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:94:be:48:86:35:7c:76:fa:39:f9:9c:bd:4c:75:75:d8:fd:
         bd:e6:ea:66:32:22:50:e7:39:11:c5:83:99:67:6f:fe:45:d9:
         fe:84:05:fa:91:81:14:29:88:c2:7a:57:fb:e5:62:c1:e9:af:
         88:91:7e:1b:c5:04:8e:2d:b3:77:1a:9b:ec:9b:ae:ac:fc:28:
         eb:62:e1:75:c7:f1:b0:c5:b9:3a:93:e9:a4:d4:7e:7e:5f:35:
         4c:5f:88:7b:fa:31:4d:2c:26:d8:73:39:45:8c:08:fa:9a:b7:
         b9:f9:aa:2a:b0:66:5d:07:d3:f3:2c:e4:e3:d0:63:1f:67:9b:
         19:15:d3:1b:dd:08:ac:36:c3:31:f4:ee:99:6c:d3:db:c8:58:
         a5:c9:f7:93:45:ee:2c:ab:bd:22:49:84:a5:cd:75:fb:81:c8:
         3d:2c:5d:86:92:00:ae:81:c7:13:2e:c6:b1:29:38:28:71:e3:
         96:37:14:2d:73:23:c3:45:31:61:82:e3:2e:b4:3c:2b:e9:75:
         12:0f:00:bf:b8:57:01:02:90:3f:21:4d:e6:84:e4:d3:56:f2:
         4b:e9:03:c8:3c:ad:5a:73:a0:4e:c4:b0:f5:e3:c6:73:d4:1d:
         e8:6f:ee:5d:16:93:05:23:ac:4b:3c:79:dc:18:da:2c:45:73:
         1b:a7:3e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:15 2024 by rpki-client on console-ams.rpki-client.org