Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d4d68a-e7bd-4938-ad50-32fbf47781d3/1/pVc9qe4nmfv3rSSdbdliY3OL1fs.roa
File:                     pVc9qe4nmfv3rSSdbdliY3OL1fs.roa (raw, json)
Hash identifier:          SkGWdOLGLXklgDTl0tOUn6rhLWxGH6nB2erh2bbtwKs=
Subject key identifier:   A5:57:3D:A9:EE:27:99:FB:F7:AD:24:9D:6D:D9:62:63:73:8B:D5:FB
Certificate issuer:       /CN=5ea5531451734961fc4e89cef3f09c76a33f423f
Certificate serial:       83F7F8
Authority key identifier: 5E:A5:53:14:51:73:49:61:FC:4E:89:CE:F3:F0:9C:76:A3:3F:42:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XqVTFFFzSWH8TonO8_CcdqM_Qj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/d4d68a-e7bd-4938-ad50-32fbf47781d3/1/pVc9qe4nmfv3rSSdbdliY3OL1fs.roa
Signing time:             Sat 01 Jan 2022 02:54:39 +0000
ROA not before:           Sat 01 Jan 2022 02:54:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212667
IP address blocks:        195.96.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8648696 (0x83f7f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ea5531451734961fc4e89cef3f09c76a33f423f
        Validity
            Not Before: Jan  1 02:54:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a5573da9ee2799fbf7ad249d6dd96263738bd5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:40:a6:65:76:77:f9:d5:42:a8:1b:70:2b:87:
                    c6:f0:80:ce:8c:00:f3:44:08:8a:23:3a:da:6f:4e:
                    42:fb:7d:5d:52:f9:20:6b:6a:84:a2:98:e1:08:21:
                    f5:da:e0:c0:08:0e:61:80:04:b7:32:b2:54:74:ee:
                    5a:1d:61:b1:af:c8:91:79:07:5e:30:b8:f9:f7:40:
                    6c:2a:01:2d:fd:6f:b5:d2:5c:5b:69:16:67:6d:2f:
                    ad:c3:88:2f:e4:fb:76:25:8f:d8:e9:2f:45:6c:1b:
                    8a:1c:07:ee:e3:14:28:87:11:29:a5:35:72:fa:39:
                    62:48:2d:f9:55:03:f5:62:d3:01:ca:86:cf:12:d9:
                    f3:dc:af:1f:7d:32:0f:e1:98:2a:16:c1:b5:13:32:
                    a6:94:83:f9:6d:99:d8:13:6e:68:54:67:11:de:6f:
                    ae:f6:0a:07:4a:d1:92:dc:82:af:11:af:7a:21:b2:
                    57:12:57:e1:92:4b:97:b3:9b:af:fe:42:7a:8a:57:
                    a8:0a:e3:ad:de:de:ef:e7:6c:d3:c1:88:df:24:dd:
                    84:c9:d9:36:4d:6f:ad:ce:db:04:49:c7:7b:4d:f5:
                    43:26:11:ed:67:c3:3f:06:1d:f7:d8:65:57:27:47:
                    1c:02:08:7b:52:87:a0:8a:0c:26:bb:d2:15:02:54:
                    25:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:57:3D:A9:EE:27:99:FB:F7:AD:24:9D:6D:D9:62:63:73:8B:D5:FB
            X509v3 Authority Key Identifier:
                keyid:5E:A5:53:14:51:73:49:61:FC:4E:89:CE:F3:F0:9C:76:A3:3F:42:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqVTFFFzSWH8TonO8_CcdqM_Qj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4d68a-e7bd-4938-ad50-32fbf47781d3/1/pVc9qe4nmfv3rSSdbdliY3OL1fs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4d68a-e7bd-4938-ad50-32fbf47781d3/1/XqVTFFFzSWH8TonO8_CcdqM_Qj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.96.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:cb:9f:fd:b0:90:93:af:79:44:43:e7:e4:ce:c9:1f:8b:7f:
         77:7e:e1:73:c3:3b:05:b3:37:21:6f:52:4f:44:dc:65:71:a6:
         26:d6:91:82:5a:07:8d:85:ee:ab:48:21:cb:28:22:c4:6f:9a:
         9a:f2:e6:98:2a:06:8c:0b:c0:bc:f8:e9:b0:c9:60:44:4a:d7:
         8a:3b:1c:bb:41:b4:33:7a:5f:c5:73:a8:34:62:38:a7:19:79:
         7d:f8:de:bd:81:f5:75:b5:8d:ca:83:f6:b9:e7:60:10:26:ff:
         76:09:b4:a6:30:2e:0c:17:e2:e7:ea:c2:44:58:94:38:3e:e9:
         3a:0c:7f:31:56:56:40:53:a5:5d:91:c7:b6:ff:b7:6a:d0:96:
         c6:68:ca:cb:ed:36:26:99:9d:eb:6f:d3:8b:ec:10:5a:37:73:
         56:f9:12:70:a2:c0:58:9b:d4:ce:85:8d:35:5b:4a:22:b4:d0:
         44:ff:24:36:04:f9:cf:71:3c:76:cd:6f:49:32:d4:c3:77:29:
         27:73:60:5e:cd:5d:30:9a:41:81:b3:6c:6f:1c:8a:8f:b8:20:
         73:6a:b4:fd:35:3c:c2:43:7a:31:e1:17:03:d8:1b:62:64:40:
         ad:fe:01:00:d0:9e:52:b7:a4:5f:69:6e:73:42:99:9e:02:df:
         4f:d0:a9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:31 2024 by rpki-client on console-ams.rpki-client.org