Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/Fdpf8eu6ZsFynv3FyrcrlLf8QWA.roa
File:                     Fdpf8eu6ZsFynv3FyrcrlLf8QWA.roa (raw, json)
Hash identifier:          NIXY4VTZ2R5HObJkpp9W5PbrB+espKYZU7Lqu77DKYY=
Subject key identifier:   15:DA:5F:F1:EB:BA:66:C1:72:9E:FD:C5:CA:B7:2B:94:B7:FC:41:60
Certificate issuer:       /CN=9990e74e57375cfb6218d52dc0601416fee1f328
Certificate serial:       02CED75D
Authority key identifier: 99:90:E7:4E:57:37:5C:FB:62:18:D5:2D:C0:60:14:16:FE:E1:F3:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZDnTlc3XPtiGNUtwGAUFv7h8yg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/Fdpf8eu6ZsFynv3FyrcrlLf8QWA.roa
Signing time:             Mon 04 Apr 2022 07:27:16 +0000
ROA not before:           Mon 04 Apr 2022 07:27:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200019
IP address blocks:        5.181.163.0/24 maxlen: 24
                          5.181.161.0/24 maxlen: 24
                          5.181.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47109981 (0x2ced75d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9990e74e57375cfb6218d52dc0601416fee1f328
        Validity
            Not Before: Apr  4 07:27:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15da5ff1ebba66c1729efdc5cab72b94b7fc4160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f7:0f:33:8e:98:6d:f0:aa:77:92:d5:e4:e3:
                    98:97:20:a9:8d:3f:97:9c:d1:3d:e2:13:f5:3f:03:
                    8c:d6:42:9a:64:ac:87:35:38:6c:63:f4:d8:11:e2:
                    7f:9a:b8:82:9e:a9:08:f4:3f:79:04:72:91:f0:bf:
                    60:70:75:b7:64:a0:2b:3f:eb:f2:c1:f9:76:5f:2b:
                    b5:4f:e7:23:1b:53:0f:97:d8:7b:86:f9:1f:c8:74:
                    73:6b:86:9f:b6:79:e3:22:55:4e:5f:3d:bd:0a:d9:
                    f5:15:47:f6:bc:43:78:74:4b:d2:19:df:9c:b0:30:
                    97:52:d1:5c:64:98:30:36:59:9f:59:c7:ea:9c:1a:
                    8d:06:2c:43:88:87:74:83:f0:58:86:63:b4:65:30:
                    bf:e9:ec:68:cf:3b:32:fb:a3:bb:8e:09:c7:90:0f:
                    9b:60:db:bc:2f:e4:fe:68:42:b7:41:43:09:a3:96:
                    3e:ed:9c:3c:99:25:cb:58:6c:88:19:e9:f4:d1:87:
                    06:d5:9c:86:97:36:97:7e:32:7e:47:f7:d8:70:77:
                    c9:b1:c5:f3:0b:37:a6:0e:54:e9:eb:6d:14:7b:24:
                    1d:a4:f7:60:c5:77:73:2b:b3:20:18:49:f1:48:76:
                    95:36:57:5d:a0:46:fa:f9:95:6a:b2:4c:10:b8:35:
                    28:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DA:5F:F1:EB:BA:66:C1:72:9E:FD:C5:CA:B7:2B:94:B7:FC:41:60
            X509v3 Authority Key Identifier:
                keyid:99:90:E7:4E:57:37:5C:FB:62:18:D5:2D:C0:60:14:16:FE:E1:F3:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZDnTlc3XPtiGNUtwGAUFv7h8yg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/Fdpf8eu6ZsFynv3FyrcrlLf8QWA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/mZDnTlc3XPtiGNUtwGAUFv7h8yg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.161.0-5.181.163.255

    Signature Algorithm: sha256WithRSAEncryption
         8c:67:a3:b7:08:fb:c7:e6:49:53:c9:82:d9:28:82:12:03:39:
         31:04:14:82:08:70:3d:1e:68:3b:52:8d:55:ba:df:7d:15:ba:
         71:a0:f9:da:81:15:a0:a5:fa:62:69:aa:7d:d3:6e:60:fd:4f:
         c7:03:42:57:87:cd:52:89:15:08:4a:cb:5b:2c:d3:72:29:b3:
         1e:db:61:4c:58:67:f4:c9:fc:e1:15:66:89:12:27:95:5e:c9:
         4b:99:dd:2c:a0:04:50:12:19:6d:75:cb:75:dc:55:c5:02:d8:
         e1:db:4c:92:67:58:4d:28:1b:49:2c:77:f3:50:eb:5b:d5:b2:
         7e:aa:41:06:5b:68:46:9a:4f:7e:12:ef:8d:65:b4:08:a7:89:
         20:ba:ee:ae:64:61:ac:89:cf:03:8a:aa:33:88:08:14:a1:6e:
         13:22:d2:98:77:e8:82:a5:d9:3d:78:1d:65:a9:aa:b3:dd:00:
         02:14:9a:40:bc:92:bf:da:df:51:0f:ab:28:90:99:98:cd:ff:
         a0:98:ea:f1:23:96:52:dc:db:72:62:ee:57:32:73:98:ef:b8:
         d4:a4:de:80:39:da:63:d1:19:87:4d:34:c9:8a:03:89:76:6d:
         45:09:d0:96:4a:e6:ed:7e:9c:f1:e8:15:76:9b:46:12:86:9e:
         34:ab:41:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:34 2024 by rpki-client on console-ams.rpki-client.org