Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/uu8GNL6-mdcCJcc-pvPWaVvYeng.roa
File:                     uu8GNL6-mdcCJcc-pvPWaVvYeng.roa (raw, json)
Hash identifier:          AlsYVbqDgzew8NWjEQyXWAz9GdnrMyDOi4XdZiouVLk=
Subject key identifier:   BA:EF:06:34:BE:BE:99:D7:02:25:C7:3E:A6:F3:D6:69:5B:D8:7A:78
Certificate issuer:       /CN=9990e74e57375cfb6218d52dc0601416fee1f328
Certificate serial:       025519E9
Authority key identifier: 99:90:E7:4E:57:37:5C:FB:62:18:D5:2D:C0:60:14:16:FE:E1:F3:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZDnTlc3XPtiGNUtwGAUFv7h8yg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/uu8GNL6-mdcCJcc-pvPWaVvYeng.roa
Signing time:             Mon 07 Feb 2022 08:14:41 +0000
ROA not before:           Mon 07 Feb 2022 08:14:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200019
IP address blocks:        5.181.160.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39131625 (0x25519e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9990e74e57375cfb6218d52dc0601416fee1f328
        Validity
            Not Before: Feb  7 08:14:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=baef0634bebe99d70225c73ea6f3d6695bd87a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0b:06:be:3f:01:3a:93:5c:e3:58:82:04:a5:
                    a3:27:51:0c:c7:f7:db:8e:aa:ef:44:4b:07:dc:74:
                    75:6b:53:c1:4c:04:1a:33:a4:fb:c0:12:15:de:99:
                    fc:59:49:6f:1e:05:aa:02:1d:f8:83:5a:e0:35:49:
                    d4:61:f0:7a:01:e5:c7:e3:80:f7:ad:45:a9:5f:2a:
                    0c:ad:7c:d3:32:5f:0c:92:b8:99:19:1b:2a:fe:08:
                    49:21:64:1a:dc:01:59:9e:1b:19:62:65:01:cd:53:
                    c0:72:93:14:47:97:c2:8f:3f:7c:e2:47:67:53:22:
                    4f:bb:0b:da:a9:64:3a:c3:18:8d:30:23:4e:1e:49:
                    4c:e2:df:92:7d:98:8e:d5:77:93:5a:98:7a:d3:bd:
                    48:fd:fb:87:4d:5b:71:06:54:51:c4:8a:19:ca:b3:
                    a9:f7:cb:0c:a5:4f:58:cd:77:9e:de:24:7b:9e:19:
                    03:5f:ce:fb:85:aa:1f:54:34:86:37:10:c6:fd:f0:
                    93:04:9b:07:b5:19:d3:6c:da:8f:e0:da:d3:aa:a2:
                    a6:94:2f:7f:7a:89:f0:8b:bb:f2:04:63:df:be:50:
                    0b:5e:2d:0d:6c:ee:e0:f7:36:e9:dc:b6:c9:36:02:
                    c5:78:6b:fd:96:a7:95:b1:2f:6a:be:46:81:d9:8a:
                    d8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EF:06:34:BE:BE:99:D7:02:25:C7:3E:A6:F3:D6:69:5B:D8:7A:78
            X509v3 Authority Key Identifier:
                keyid:99:90:E7:4E:57:37:5C:FB:62:18:D5:2D:C0:60:14:16:FE:E1:F3:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZDnTlc3XPtiGNUtwGAUFv7h8yg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/uu8GNL6-mdcCJcc-pvPWaVvYeng.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/mZDnTlc3XPtiGNUtwGAUFv7h8yg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:bf:99:d3:1e:42:39:ad:f0:89:3b:57:4f:9c:51:2e:28:da:
         9e:1b:e9:7f:a7:11:77:5f:b0:cb:e3:4a:2e:9d:fa:1c:24:8b:
         4d:2f:3c:b4:2b:00:90:02:a5:cf:a2:c5:96:e6:d6:f9:47:1e:
         c3:e7:7b:b1:a7:3a:e1:9e:0f:6a:76:4a:ee:be:40:64:76:eb:
         12:85:bf:02:18:1c:fb:13:18:8c:ba:be:b4:5c:fd:6b:a9:f6:
         70:4f:d6:66:b0:52:e1:dc:ab:96:53:6f:46:a9:1b:b1:bc:8e:
         38:62:ce:b8:c4:52:3a:57:80:e1:eb:3e:86:bd:c6:4f:0c:9f:
         35:6f:78:6c:bd:8f:43:6a:e5:95:a5:fa:12:8e:b6:c4:3e:2b:
         11:df:b3:58:ba:21:b4:22:9e:77:5c:9a:78:d3:b4:04:6a:8b:
         62:9d:1f:9d:3c:e8:e9:e2:d0:3a:e7:a0:c0:9b:d6:cd:3c:63:
         b6:51:37:b4:b5:7f:61:a5:f7:87:ad:cb:c4:fe:ae:2e:76:3a:
         9d:a0:46:71:9c:b0:8d:7b:4b:8c:43:cd:f9:d9:71:db:d5:ad:
         f2:a0:41:f0:63:26:7e:46:b7:10:23:35:d1:c4:a8:d1:15:33:
         d1:52:1d:99:0e:97:a2:df:9a:44:a0:92:08:b6:09:1f:d5:32:
         f4:38:f0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:35 2024 by rpki-client on console-ams.rpki-client.org