Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/R_iL2JwYxUj57uL8utO_PMh_nE0.roa
File:                     R_iL2JwYxUj57uL8utO_PMh_nE0.roa (raw, json)
Hash identifier:          vIiTKmWdpBhNawy8K82UUNPrm1Y46lEJ60jgJ5paIGM=
Subject key identifier:   47:F8:8B:D8:9C:18:C5:48:F9:EE:E2:FC:BA:D3:BF:3C:C8:7F:9C:4D
Certificate issuer:       /CN=9990e74e57375cfb6218d52dc0601416fee1f328
Certificate serial:       01F87B5C
Authority key identifier: 99:90:E7:4E:57:37:5C:FB:62:18:D5:2D:C0:60:14:16:FE:E1:F3:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZDnTlc3XPtiGNUtwGAUFv7h8yg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/R_iL2JwYxUj57uL8utO_PMh_nE0.roa
Signing time:             Sat 01 Jan 2022 11:56:16 +0000
ROA not before:           Sat 01 Jan 2022 11:56:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        5.181.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33061724 (0x1f87b5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9990e74e57375cfb6218d52dc0601416fee1f328
        Validity
            Not Before: Jan  1 11:56:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=47f88bd89c18c548f9eee2fcbad3bf3cc87f9c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b9:71:4d:ff:ae:7c:9b:41:29:55:fd:6f:91:
                    01:0d:62:1b:56:02:90:26:76:1d:d8:c1:c6:21:5c:
                    f9:cf:38:0e:a1:f7:da:c2:41:37:90:63:39:8f:a8:
                    ba:06:7a:8f:7f:31:3d:f4:57:2d:9f:a3:36:4a:a6:
                    72:ff:20:48:b9:bc:ce:16:97:b1:10:ab:15:df:e8:
                    fe:13:94:bc:94:42:42:7a:d5:dc:5e:68:67:8a:54:
                    7a:8a:1e:1f:95:87:61:41:77:a8:b4:85:15:00:13:
                    2f:56:65:fb:62:9a:a9:6f:a2:7f:6e:d8:84:d4:73:
                    bf:1d:14:0c:36:15:8d:e4:7f:03:87:ed:32:2b:58:
                    1c:1b:43:ef:06:a6:1a:02:bf:01:63:98:bf:61:cd:
                    50:9d:bf:9f:9c:e5:4c:8b:11:a0:28:f3:90:45:f6:
                    23:07:2c:17:08:0a:de:14:bd:ed:a3:c8:b4:2c:a7:
                    fe:ea:0b:25:b5:52:e5:7b:91:13:2f:f1:f1:e7:af:
                    cc:01:55:4c:35:2e:df:9e:5f:82:ed:20:e4:0f:5e:
                    55:58:92:65:0c:b3:d6:a2:07:76:95:e2:3a:54:3d:
                    f0:55:34:ea:eb:64:ec:f1:71:ef:84:8c:de:2f:ee:
                    d3:83:dd:39:18:c2:ba:b0:fb:d0:2b:50:f2:04:26:
                    d1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F8:8B:D8:9C:18:C5:48:F9:EE:E2:FC:BA:D3:BF:3C:C8:7F:9C:4D
            X509v3 Authority Key Identifier:
                keyid:99:90:E7:4E:57:37:5C:FB:62:18:D5:2D:C0:60:14:16:FE:E1:F3:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZDnTlc3XPtiGNUtwGAUFv7h8yg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/R_iL2JwYxUj57uL8utO_PMh_nE0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/mZDnTlc3XPtiGNUtwGAUFv7h8yg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:cb:04:b3:c8:1b:ad:7c:44:4d:f2:80:4b:ea:91:b8:97:be:
         fa:5d:76:27:ef:f6:38:4d:81:c7:b5:94:38:e0:f5:c3:c1:0b:
         ba:6b:71:45:00:0e:06:1e:03:34:8a:a2:c1:16:f2:79:8f:a7:
         76:1f:4d:d5:e8:85:c3:7f:8c:26:08:3f:89:9b:d2:14:43:d6:
         36:05:41:75:8e:93:80:c5:a5:58:79:3b:5b:e9:ca:47:42:71:
         0d:56:b7:5b:cf:a7:ee:c8:1c:9c:39:a0:ab:c8:bf:ee:54:5c:
         5a:4a:85:db:f4:0f:bc:ae:e0:cf:43:6b:e7:36:f0:fa:c4:f5:
         54:df:db:2f:e5:d2:8d:23:f9:2a:2c:65:03:dc:0b:38:e4:f0:
         9b:cc:a8:ed:6c:68:ed:bc:9c:a5:f3:7c:4b:87:f8:ee:01:65:
         70:da:52:23:b3:3b:00:1c:f7:f7:6c:a8:bf:69:65:b9:8c:8a:
         a8:20:ed:3c:41:4d:a5:97:50:2d:66:6c:3c:29:31:ce:7d:1a:
         a1:c5:0a:ae:b6:c2:9c:92:99:68:11:64:bf:68:46:ae:15:13:
         b8:12:3a:e1:53:ff:3f:24:8b:15:df:82:a1:49:23:df:54:34:
         10:b5:e8:9f:d4:de:f1:4e:7d:1a:3e:f3:49:83:a5:4f:15:90:
         5a:a9:69:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:24 2024 by rpki-client on console-fra.rpki-client.org