Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/82b8a4-9a4a-43ff-aae9-654b5520ae63/1/WF2KkGGf4hd6Vx53ZWaFKMfd21A.roa
File:                     WF2KkGGf4hd6Vx53ZWaFKMfd21A.roa (raw, json)
Hash identifier:          785U0ueZU2dO5rVm2buBr3iozedqDrsYSZ9hqi7H2PY=
Subject key identifier:   58:5D:8A:90:61:9F:E2:17:7A:57:1E:77:65:66:85:28:C7:DD:DB:50
Certificate issuer:       /CN=9468e49bb9530adb0844c3860dd7ef5cd8e4a1f8
Certificate serial:       06B3CFC3
Authority key identifier: 94:68:E4:9B:B9:53:0A:DB:08:44:C3:86:0D:D7:EF:5C:D8:E4:A1:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lGjkm7lTCtsIRMOGDdfvXNjkofg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/82b8a4-9a4a-43ff-aae9-654b5520ae63/1/WF2KkGGf4hd6Vx53ZWaFKMfd21A.roa
Signing time:             Sat 01 Jan 2022 13:55:45 +0000
ROA not before:           Sat 01 Jan 2022 13:55:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43851
IP address blocks:        195.114.14.0/23 maxlen: 24
                          195.114.126.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112447427 (0x6b3cfc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9468e49bb9530adb0844c3860dd7ef5cd8e4a1f8
        Validity
            Not Before: Jan  1 13:55:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=585d8a90619fe2177a571e7765668528c7dddb50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:01:42:26:33:39:cf:61:f0:0e:a6:5f:99:3d:
                    54:21:87:b9:4e:48:a8:c3:d1:35:01:ad:10:06:d5:
                    3d:ed:16:e8:33:6b:0f:ce:9d:b8:99:28:4f:31:1d:
                    6e:18:ce:40:eb:c4:1a:7b:c8:b8:dc:41:61:c5:81:
                    1b:ce:ab:dc:ab:62:ba:62:32:0b:12:29:a9:24:af:
                    d4:6f:0b:29:27:22:37:33:53:56:14:d2:a5:09:e3:
                    9b:5d:3b:8b:2a:5b:c0:1a:1a:bf:ff:57:75:8e:55:
                    bb:ef:d2:40:9e:15:88:bf:ee:6e:a9:6d:f0:9d:56:
                    7d:68:6b:26:cb:6a:21:6e:70:c2:5b:ff:8d:87:17:
                    9a:10:c6:76:bd:20:d9:a6:bc:fc:d3:5c:48:a1:a5:
                    a6:9c:2a:a8:79:97:77:c7:da:b1:eb:fe:03:0a:3c:
                    d6:44:5c:c2:07:9f:0b:70:3d:3e:30:1c:91:b0:c6:
                    39:a6:1d:1e:8c:23:b2:b2:ae:d7:15:33:3b:b2:79:
                    a3:e8:eb:64:52:26:09:6e:7a:0a:1d:c8:8c:b8:f1:
                    6b:e9:3b:9d:ee:6f:e6:bd:c4:4e:97:26:29:53:02:
                    c3:78:68:9d:34:11:6d:c4:4d:30:1c:ae:f2:03:64:
                    ed:84:39:45:61:91:df:bc:9a:9d:c7:10:75:76:08:
                    50:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5D:8A:90:61:9F:E2:17:7A:57:1E:77:65:66:85:28:C7:DD:DB:50
            X509v3 Authority Key Identifier:
                keyid:94:68:E4:9B:B9:53:0A:DB:08:44:C3:86:0D:D7:EF:5C:D8:E4:A1:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGjkm7lTCtsIRMOGDdfvXNjkofg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/82b8a4-9a4a-43ff-aae9-654b5520ae63/1/WF2KkGGf4hd6Vx53ZWaFKMfd21A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/82b8a4-9a4a-43ff-aae9-654b5520ae63/1/lGjkm7lTCtsIRMOGDdfvXNjkofg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.114.14.0/23
                  195.114.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:bb:4d:9e:d8:ab:62:e0:bf:19:8f:6f:c2:bd:7d:1c:cf:29:
         3b:ac:3a:ce:3c:7a:7e:e4:77:5a:50:fd:2a:0c:11:c6:64:50:
         83:b8:e5:60:62:17:c2:9e:9c:50:5f:c7:26:0a:ff:87:1e:17:
         79:7c:3b:b0:82:44:b1:b1:e9:d1:52:7d:10:7f:0d:5b:0d:b2:
         a9:88:36:62:e3:73:33:3c:09:77:17:b0:ec:88:6b:72:58:fd:
         09:43:ff:75:19:44:9a:aa:0e:ac:f4:07:74:c9:a5:bf:b1:88:
         57:f9:d0:bf:96:b3:4c:a5:bf:6d:ba:fe:ee:c4:3e:47:e7:68:
         a9:28:af:22:28:32:5f:b8:10:8e:35:f8:fa:10:80:bf:1e:08:
         c5:e8:31:44:dc:1d:9f:0d:55:56:2e:2c:4a:56:3d:dd:b1:d8:
         d8:6b:c0:c3:c2:6c:07:df:bd:62:a8:fc:56:eb:dd:42:56:85:
         3e:70:72:0b:6c:2c:98:cd:11:22:95:73:8b:b9:c4:4f:7d:a2:
         8e:3b:a5:12:85:d0:1d:fc:18:b2:77:27:38:9b:01:4b:e0:e8:
         b8:a1:6f:15:fe:89:4a:79:c2:1f:61:97:ca:24:93:fa:76:4b:
         77:86:28:73:d7:01:d8:8f:b5:7a:12:54:ce:25:0c:1b:64:67:
         13:0d:80:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:23 2024 by rpki-client on console-ams.rpki-client.org