Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d4d68a-e7bd-4938-ad50-32fbf47781d3/1/VViXA8EaTkNcFxUUwvfu40JEh8U.roa
File:                     VViXA8EaTkNcFxUUwvfu40JEh8U.roa (raw, json)
Hash identifier:          EYi4/ntB80aVDIhLk/UOFdJERe+BTWeueFBtVm/t9rc=
Subject key identifier:   55:58:97:03:C1:1A:4E:43:5C:17:15:14:C2:F7:EE:E3:42:44:87:C5
Certificate issuer:       /CN=5ea5531451734961fc4e89cef3f09c76a33f423f
Certificate serial:       01A5E56D
Authority key identifier: 5E:A5:53:14:51:73:49:61:FC:4E:89:CE:F3:F0:9C:76:A3:3F:42:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XqVTFFFzSWH8TonO8_CcdqM_Qj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/d4d68a-e7bd-4938-ad50-32fbf47781d3/1/VViXA8EaTkNcFxUUwvfu40JEh8U.roa
Signing time:             Wed 11 May 2022 22:12:02 +0000
ROA not before:           Wed 11 May 2022 22:12:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        195.96.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27649389 (0x1a5e56d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ea5531451734961fc4e89cef3f09c76a33f423f
        Validity
            Not Before: May 11 22:12:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=55589703c11a4e435c171514c2f7eee3424487c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1e:60:c3:19:e8:ac:79:ad:83:22:d3:cc:88:
                    38:7d:ae:d3:7c:20:c4:c0:a4:0a:fc:79:0a:9f:ab:
                    eb:ae:eb:aa:fb:e2:e8:87:6e:51:b0:ad:6c:41:4b:
                    fd:f1:0e:72:06:6f:81:c1:a2:5d:08:e8:ae:59:a4:
                    dc:3f:36:04:f4:ec:0d:95:4a:bc:80:f1:a3:56:80:
                    8e:d1:2c:d7:f0:4a:0f:b3:bc:27:6c:8a:2e:d3:4c:
                    07:0e:83:be:8b:fc:17:55:f2:99:ff:f7:c4:f3:55:
                    90:a6:b3:72:46:6c:81:20:16:8b:3a:cf:a4:02:e6:
                    42:75:30:81:40:78:c4:f5:7c:92:d0:2e:29:90:da:
                    f4:b8:ff:34:38:eb:b8:25:3e:d6:7a:0c:dd:58:21:
                    e7:25:7c:9c:c4:78:ca:13:aa:3f:43:a5:97:71:41:
                    3f:a0:47:91:6f:23:8f:d1:2c:01:98:59:b5:32:80:
                    ff:49:3a:e6:aa:a9:05:61:16:4c:53:56:e7:54:01:
                    23:9e:a2:83:25:bd:1b:45:9f:87:56:c4:0c:d5:e5:
                    4d:b1:63:43:12:6a:b0:54:69:ac:ae:cb:ee:5b:f0:
                    b9:5d:e5:c4:8b:77:04:4e:8f:e8:45:88:c8:18:ea:
                    9f:3e:af:d0:8e:e1:08:9b:91:b1:f1:2d:d1:8e:2b:
                    90:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:58:97:03:C1:1A:4E:43:5C:17:15:14:C2:F7:EE:E3:42:44:87:C5
            X509v3 Authority Key Identifier:
                keyid:5E:A5:53:14:51:73:49:61:FC:4E:89:CE:F3:F0:9C:76:A3:3F:42:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqVTFFFzSWH8TonO8_CcdqM_Qj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4d68a-e7bd-4938-ad50-32fbf47781d3/1/VViXA8EaTkNcFxUUwvfu40JEh8U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4d68a-e7bd-4938-ad50-32fbf47781d3/1/XqVTFFFzSWH8TonO8_CcdqM_Qj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.96.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:81:73:2b:04:10:52:20:d1:fd:d5:e8:95:6c:8a:e9:47:94:
         a5:c6:e2:30:77:ea:ab:e4:f2:55:90:ae:94:29:64:a2:4c:ec:
         f4:fa:d1:9f:3f:27:59:98:76:67:01:47:4d:84:f1:34:89:fd:
         d2:d2:51:84:bb:97:93:b6:7b:35:8e:1d:71:cf:0a:5f:8d:e0:
         29:65:be:5c:27:12:f8:6d:d8:53:36:eb:6f:f1:c3:2f:54:49:
         e2:7d:cd:77:59:63:75:d7:82:bb:de:46:7d:04:2f:72:4f:8f:
         ad:e1:9a:e6:ec:f8:95:aa:da:5c:c2:86:39:5b:a3:5c:19:41:
         de:35:e3:03:e0:ed:c9:1b:4a:94:8a:16:9b:b9:5e:b5:a8:6e:
         97:ab:4c:f0:99:a0:9f:84:a5:87:6e:31:03:2a:6f:4e:0c:96:
         db:53:c5:ef:32:18:a3:05:bd:82:19:e5:0c:70:78:4b:ee:b0:
         20:42:a8:60:96:c7:35:d0:e9:1f:70:b0:24:45:2a:02:90:68:
         24:1b:3c:f4:f5:69:02:fc:ae:11:03:d9:9f:c3:03:3b:eb:89:
         7b:a6:35:20:69:d3:c3:8b:37:64:31:e1:08:c9:bb:57:3f:92:
         dd:48:18:ae:c1:9e:9c:d0:14:bb:4d:6b:ae:79:19:c6:59:47:
         56:bf:37:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:21 2024 by rpki-client on console-fra.rpki-client.org