Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/de1f12-0043-4b8b-aa1f-03331e8b0828/1/VTVYE141cL3TVBeWsS7lRsboZ-A.roa
File:                     VTVYE141cL3TVBeWsS7lRsboZ-A.roa (raw, json)
Hash identifier:          JK9leUUAw9l0tGWrkXHZ618mVsB7X/zqxqz4kcD3zmQ=
Subject key identifier:   55:35:58:13:5E:35:70:BD:D3:54:17:96:B1:2E:E5:46:C6:E8:67:E0
Certificate issuer:       /CN=7049db1137a7e1316fbf6c01cd4f9d4bbec98cba
Certificate serial:       15112412
Authority key identifier: 70:49:DB:11:37:A7:E1:31:6F:BF:6C:01:CD:4F:9D:4B:BE:C9:8C:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cEnbETen4TFvv2wBzU-dS77JjLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/de1f12-0043-4b8b-aa1f-03331e8b0828/1/VTVYE141cL3TVBeWsS7lRsboZ-A.roa
Signing time:             Sat 01 Jan 2022 02:55:31 +0000
ROA not before:           Sat 01 Jan 2022 02:55:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25148
IP address blocks:        195.189.116.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353444882 (0x15112412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7049db1137a7e1316fbf6c01cd4f9d4bbec98cba
        Validity
            Not Before: Jan  1 02:55:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=553558135e3570bdd3541796b12ee546c6e867e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:13:21:f3:d4:55:8c:d6:01:4e:a5:6e:b0:a8:
                    b6:f7:16:21:68:5b:91:b0:6b:99:82:a4:28:8d:4a:
                    5c:6d:8b:79:7b:04:04:dd:2a:80:30:bc:4f:e0:e6:
                    14:9e:58:46:12:32:b0:91:cf:c1:8a:3b:89:3a:f3:
                    22:c5:1f:6e:29:d6:51:80:91:9b:e8:8d:b4:6d:ee:
                    67:55:9a:e1:eb:5e:d9:55:4c:35:49:b1:b1:13:14:
                    0a:97:cc:fd:d9:d5:92:65:7a:32:fc:26:cc:e8:e2:
                    4b:0a:f9:e5:ff:54:8b:73:58:6f:c7:e7:81:6f:c2:
                    e2:46:61:c9:8c:4b:c1:0d:7e:5c:4e:b8:0e:4b:f4:
                    80:89:52:08:de:4a:d4:e6:11:77:a1:17:69:05:12:
                    80:03:92:ad:66:c5:eb:6f:a0:10:df:f3:3d:8c:3f:
                    39:a5:4e:4a:87:10:1e:23:5b:82:59:54:c3:a1:b9:
                    17:35:24:6a:14:80:f5:8a:a0:a1:3c:80:6b:a6:de:
                    4c:cb:11:3b:bc:0f:1b:90:52:9d:0d:05:8e:98:73:
                    1e:78:29:3d:a5:06:19:82:c9:13:04:f0:26:2d:05:
                    c8:f7:0a:a2:e9:53:a7:34:46:57:fd:03:3e:b2:48:
                    84:ad:a9:9d:f7:9b:ad:6b:06:76:d1:9f:ce:75:1d:
                    2a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:35:58:13:5E:35:70:BD:D3:54:17:96:B1:2E:E5:46:C6:E8:67:E0
            X509v3 Authority Key Identifier:
                keyid:70:49:DB:11:37:A7:E1:31:6F:BF:6C:01:CD:4F:9D:4B:BE:C9:8C:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEnbETen4TFvv2wBzU-dS77JjLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/de1f12-0043-4b8b-aa1f-03331e8b0828/1/VTVYE141cL3TVBeWsS7lRsboZ-A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/de1f12-0043-4b8b-aa1f-03331e8b0828/1/cEnbETen4TFvv2wBzU-dS77JjLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.189.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:d9:c4:ab:5c:6a:83:ce:27:b6:d1:a0:e6:57:de:1b:9b:e2:
         a1:7b:ce:66:43:6f:8f:97:23:d1:5f:ee:a2:d1:12:24:a2:4a:
         48:ab:e8:5c:4b:a6:a2:b8:aa:49:6e:d2:10:d1:a8:94:89:ea:
         e6:57:1b:75:dc:98:0a:d8:33:8d:a9:f2:7a:97:2a:50:c4:d0:
         94:da:05:3a:60:b4:5e:a2:83:12:76:24:a2:71:61:28:ba:16:
         62:dd:de:38:ee:7f:00:bb:40:64:61:31:1a:dd:b7:3b:3e:73:
         93:87:19:ad:dd:52:9c:61:d3:97:2c:51:22:a3:ab:be:02:1a:
         fe:dc:3c:9c:36:9c:47:72:01:a4:ad:db:68:bf:c3:96:74:f4:
         61:ca:72:5a:b1:5a:b7:e0:90:27:e0:27:1d:25:08:17:ee:a5:
         ff:97:3f:8a:5f:ce:74:d1:3b:a5:87:40:de:91:20:d7:1e:d7:
         ef:62:50:ca:69:5d:12:e1:d6:35:a9:cc:72:f5:b0:8d:0f:47:
         29:66:da:f9:ae:42:b0:4d:21:d0:9e:b7:24:86:34:a4:0e:eb:
         79:d9:3c:5b:d5:25:8d:a2:50:c6:db:b8:47:d3:c7:6f:56:d2:
         f0:b4:d0:d5:5e:b6:de:df:82:4a:5b:c6:07:41:6b:2c:da:7a:
         b3:5d:84:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:59 2024 by rpki-client on console-ams.rpki-client.org