Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/yDeP7tLx6KxGVi5QxbALDdjHwQ8.roa
File:                     yDeP7tLx6KxGVi5QxbALDdjHwQ8.roa (raw, json)
Hash identifier:          nsXu2Uw9YOqqYmwCil3KwWh+Ke0RE6CBmgfqIw54Hi0=
Subject key identifier:   C8:37:8F:EE:D2:F1:E8:AC:46:56:2E:50:C5:B0:0B:0D:D8:C7:C1:0F
Certificate issuer:       /CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Certificate serial:       0182438D81D14EF7C1D6D547B6055A66F92E
Authority key identifier: 62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/yDeP7tLx6KxGVi5QxbALDdjHwQ8.roa
Signing time:             Thu 28 Jul 2022 06:45:23 +0000
ROA not before:           Thu 28 Jul 2022 06:45:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24875
IP address blocks:        195.238.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:43:8d:81:d1:4e:f7:c1:d6:d5:47:b6:05:5a:66:f9:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
        Validity
            Not Before: Jul 28 06:45:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c8378feed2f1e8ac46562e50c5b00b0dd8c7c10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e7:c0:83:f7:10:04:50:4b:b3:19:89:c8:31:
                    10:c2:c2:5d:99:1e:a1:9f:69:44:bf:4d:43:9f:62:
                    c6:65:7d:fe:06:3d:f6:7c:6f:2d:fb:f6:d0:bf:f0:
                    68:0e:78:99:ed:0b:85:7a:20:ad:ec:9f:c7:9c:32:
                    37:bd:93:78:d6:e9:74:a7:5f:bd:6e:54:ac:67:df:
                    81:9a:76:90:39:fd:cb:12:6c:99:57:79:c7:2c:89:
                    24:94:d0:a8:31:66:cd:70:72:aa:77:8d:1f:41:48:
                    08:66:9f:9d:b6:9d:52:dd:71:f5:d4:60:dd:71:f7:
                    94:16:14:99:d4:c0:42:62:53:00:f7:4a:ea:c7:be:
                    71:56:3a:77:8a:97:6f:e0:12:51:5e:17:7d:5a:be:
                    7c:e1:62:9c:a3:c1:1d:fa:ca:32:00:6c:69:1d:13:
                    ad:a7:84:d5:21:df:a9:c5:7f:73:73:79:dc:dc:fe:
                    ee:9b:94:2e:78:aa:91:c2:e9:c7:0b:63:1d:3b:7f:
                    f1:f7:34:bb:34:4f:07:b7:3b:80:86:bc:49:6f:bd:
                    8d:ef:ff:cc:a4:d6:8b:8a:71:53:a8:e4:00:d9:20:
                    c1:f5:47:14:39:94:9e:79:41:0e:66:82:b5:16:98:
                    f1:7f:86:02:48:ff:da:4a:86:35:44:be:74:6f:c8:
                    15:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:37:8F:EE:D2:F1:E8:AC:46:56:2E:50:C5:B0:0B:0D:D8:C7:C1:0F
            X509v3 Authority Key Identifier:
                keyid:62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/yDeP7tLx6KxGVi5QxbALDdjHwQ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/YkHuLESs6KczhMJVrXfGwfBFJIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.238.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e7:4f:01:4c:4a:31:56:a0:0e:05:fd:73:59:be:44:01:a4:ac:
         75:90:18:86:5d:3b:59:14:61:31:5d:a1:f2:16:33:6b:8b:7f:
         d6:c2:e8:d0:3e:24:0e:fd:b9:ae:f9:73:e3:56:20:08:ba:2f:
         c2:ef:ed:51:56:e2:3e:4b:c6:a1:eb:e3:f2:39:68:a3:0b:f7:
         13:b9:5b:28:2e:37:ac:41:e8:84:1a:00:04:a2:bf:ff:cf:8c:
         f2:ef:9c:26:8b:6c:70:19:d3:d0:3d:2a:a5:42:51:41:33:39:
         ec:ab:82:28:d1:a9:cd:a7:8d:4d:ce:38:f2:9c:b9:13:f0:6b:
         73:8c:9f:78:c3:31:cf:d9:e1:1e:0f:29:16:41:1c:ea:79:62:
         33:68:0e:96:ea:65:21:c4:8e:ad:28:d2:23:57:96:41:61:19:
         8c:8a:af:4f:62:b6:d6:a3:d7:57:00:dd:2a:7b:61:42:60:cf:
         c6:77:d0:45:db:f0:85:f7:28:5c:1e:1b:2c:01:da:15:ff:36:
         3f:76:dd:9a:8f:9e:bb:7c:84:6a:1b:3d:57:73:15:dc:15:55:
         32:31:ef:5c:f0:36:df:03:f9:04:2a:4a:a0:e1:af:c1:cf:12:
         29:a7:70:31:98:23:5e:67:cc:c6:b9:2b:f8:bb:7c:46:d3:45:
         69:4f:c0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:07 2024 by rpki-client on console-fra.rpki-client.org