Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/Fyt6Rn_KECQvk3c2p_9E9gMzJDI.roa
File:                     Fyt6Rn_KECQvk3c2p_9E9gMzJDI.roa (raw, json)
Hash identifier:          mbeZiPIJtHN/7dkb+K7xOAPcty5P0/rsxGsqkE4piC0=
Subject key identifier:   17:2B:7A:46:7F:CA:10:24:2F:93:77:36:A7:FF:44:F6:03:33:24:32
Certificate issuer:       /CN=a5915bc8a982fe61eb4aed5418323288329504d7
Certificate serial:       0653618B
Authority key identifier: A5:91:5B:C8:A9:82:FE:61:EB:4A:ED:54:18:32:32:88:32:95:04:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pZFbyKmC_mHrSu1UGDIyiDKVBNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/Fyt6Rn_KECQvk3c2p_9E9gMzJDI.roa
Signing time:             Sat 01 Jan 2022 15:01:54 +0000
ROA not before:           Sat 01 Jan 2022 15:01:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43046
IP address blocks:        195.225.58.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106127755 (0x653618b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5915bc8a982fe61eb4aed5418323288329504d7
        Validity
            Not Before: Jan  1 15:01:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=172b7a467fca10242f937736a7ff44f603332432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d3:34:e1:bd:ef:57:3d:fd:b9:74:31:b8:d8:
                    03:ae:e1:3a:ed:3e:38:23:6f:fb:95:c4:4c:75:10:
                    23:07:1c:ae:d1:81:d0:4e:77:66:82:2f:2f:2c:e4:
                    8e:b0:bc:89:83:4f:4c:1d:0e:35:ad:e2:21:9f:1e:
                    e6:eb:39:a3:23:31:05:e2:5c:d0:ce:9a:56:67:8b:
                    75:03:5e:be:78:ae:03:16:e5:e0:fc:1e:37:d6:f8:
                    92:1d:90:b0:f4:21:83:48:8b:b8:1d:b9:9b:94:06:
                    e0:fd:7a:50:b9:32:30:b4:fa:55:40:b7:5d:97:9e:
                    95:6f:d7:6d:0a:f7:a2:eb:df:fd:94:b8:11:de:b1:
                    e2:d6:3f:5e:55:26:cd:33:ac:d6:0a:70:89:15:43:
                    db:42:2b:e3:cc:b2:58:f8:b5:49:33:ab:03:66:ec:
                    b5:1a:36:ac:4b:ea:ac:3b:30:da:bd:60:c8:a0:40:
                    07:93:46:ae:93:a2:25:33:eb:b4:90:d2:fa:95:2e:
                    cb:e9:28:9c:29:01:10:0b:59:16:8b:9e:70:f1:c0:
                    3e:2b:cf:83:ec:6e:ae:aa:e5:de:3b:6c:72:c9:1c:
                    63:d6:77:9e:9e:0a:29:40:9b:64:8d:46:42:1f:cb:
                    69:da:6d:21:68:ab:99:40:e6:13:53:7d:48:12:9b:
                    ab:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2B:7A:46:7F:CA:10:24:2F:93:77:36:A7:FF:44:F6:03:33:24:32
            X509v3 Authority Key Identifier:
                keyid:A5:91:5B:C8:A9:82:FE:61:EB:4A:ED:54:18:32:32:88:32:95:04:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZFbyKmC_mHrSu1UGDIyiDKVBNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/Fyt6Rn_KECQvk3c2p_9E9gMzJDI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/pZFbyKmC_mHrSu1UGDIyiDKVBNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.225.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:aa:72:cd:39:c8:fa:df:49:62:c2:a1:be:75:4a:d0:c4:78:
         ae:31:5b:b1:16:5d:2f:93:fa:65:3c:62:86:99:44:8a:b1:fb:
         f8:92:21:eb:d9:67:88:5c:b5:99:fa:44:9f:85:67:2b:82:0f:
         30:45:ae:1f:54:d8:05:c2:55:2f:eb:6d:22:a3:bf:a8:ad:24:
         9c:3e:12:45:46:4f:4e:bd:16:97:61:fb:4d:d1:73:5e:a0:c7:
         d6:e4:21:6b:6e:cf:3b:36:85:0e:33:80:dc:5c:55:84:d4:8f:
         2b:87:54:db:af:42:93:46:23:68:ef:4c:15:89:25:94:e0:ca:
         13:96:4d:5d:8a:5f:b1:61:c5:06:11:0c:d9:a8:88:38:2e:66:
         4b:f3:d8:d5:14:c0:8b:93:d5:8f:50:80:a4:f7:a0:0e:ed:54:
         39:53:e8:72:8c:54:bf:0c:d5:f9:96:a3:9b:03:a0:9f:06:34:
         59:d7:6e:fe:78:93:32:56:4f:a3:72:65:82:62:33:ec:d3:f4:
         88:6c:6f:73:92:46:b8:ff:c2:85:76:55:0c:23:f2:25:39:3d:
         d3:fa:5c:e8:49:e8:23:78:76:78:7b:40:c4:3f:dd:a5:b1:d4:
         28:5e:f9:44:b4:35:22:21:71:45:b3:90:56:19:ae:33:2b:9a:
         91:ee:be:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:32 2024 by rpki-client on console-ams.rpki-client.org