Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/7oE57WIYfKfzIumXpwF0vvTkzC8.roa
File:                     7oE57WIYfKfzIumXpwF0vvTkzC8.roa (raw, json)
Hash identifier:          RLkp6/wL/kAvBJp6EFcLhlyDgczVRbCrKMkwhTOMbO4=
Subject key identifier:   EE:81:39:ED:62:18:7C:A7:F3:22:E9:97:A7:01:74:BE:F4:E4:CC:2F
Certificate issuer:       /CN=b12caece23c6adf6917039293e25baaa906ce556
Certificate serial:       16D06E89
Authority key identifier: B1:2C:AE:CE:23:C6:AD:F6:91:70:39:29:3E:25:BA:AA:90:6C:E5:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sSyuziPGrfaRcDkpPiW6qpBs5VY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/7oE57WIYfKfzIumXpwF0vvTkzC8.roa
Signing time:             Sat 01 Jan 2022 01:52:54 +0000
ROA not before:           Sat 01 Jan 2022 01:52:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     196738
IP address blocks:        84.40.81.0/24 maxlen: 24
                          95.87.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382758537 (0x16d06e89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b12caece23c6adf6917039293e25baaa906ce556
        Validity
            Not Before: Jan  1 01:52:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ee8139ed62187ca7f322e997a70174bef4e4cc2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7d:52:57:01:10:df:44:d0:7a:f9:ff:a6:bf:
                    77:82:56:52:40:41:c0:2b:62:e4:b8:9e:f4:14:aa:
                    d8:f6:79:8f:05:7a:32:5a:aa:1c:49:e5:ea:08:dd:
                    3d:7e:4e:a5:59:9f:6b:31:07:80:ee:98:3e:7f:d4:
                    80:97:b2:94:d6:9d:78:90:02:6b:16:de:3a:01:33:
                    85:e3:04:6f:f8:f8:30:2f:43:f8:61:7e:4f:41:e7:
                    a5:9f:5f:ce:72:ce:3c:b3:70:7b:1b:46:cc:8f:c0:
                    d8:b6:a1:4c:b2:8c:1f:d3:06:00:b1:5a:bc:8b:bc:
                    9b:41:2d:6b:c5:1c:6a:1a:9e:cd:10:31:48:dc:9c:
                    9c:98:ea:19:e9:e2:a4:e0:9c:cb:76:d2:7b:b5:46:
                    4b:11:36:b6:da:d0:0e:eb:d2:51:12:02:97:23:68:
                    b1:3e:ec:b1:6b:c8:dc:e6:7d:fa:9e:ee:a3:a1:d2:
                    c6:a0:1a:ae:3e:90:ea:39:2b:3a:64:ab:83:df:aa:
                    41:4d:fe:66:7d:5f:56:38:f3:5d:5b:bc:fd:6d:12:
                    e0:14:15:8d:65:03:3d:14:03:39:3c:72:df:ca:10:
                    a0:85:50:1c:47:ba:e1:83:d9:5a:79:4b:51:15:9c:
                    96:65:c2:31:12:ea:83:34:73:77:3c:20:06:44:d4:
                    71:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:81:39:ED:62:18:7C:A7:F3:22:E9:97:A7:01:74:BE:F4:E4:CC:2F
            X509v3 Authority Key Identifier:
                keyid:B1:2C:AE:CE:23:C6:AD:F6:91:70:39:29:3E:25:BA:AA:90:6C:E5:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSyuziPGrfaRcDkpPiW6qpBs5VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/7oE57WIYfKfzIumXpwF0vvTkzC8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/28cd48-6a7c-4d05-b4b9-87aa5a2dd122/1/sSyuziPGrfaRcDkpPiW6qpBs5VY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.40.81.0/24
                  95.87.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:40:78:21:e1:4c:ac:d5:1d:e6:0c:df:bb:af:29:01:f5:5c:
         ad:c5:47:f3:44:36:d7:11:44:74:dd:eb:82:f7:b7:50:fb:b1:
         4a:b8:ed:a9:45:b8:43:af:11:b7:d5:bb:6f:58:79:8d:b6:6a:
         2d:ca:b3:f5:b1:3f:76:05:43:2e:fb:90:2b:21:f9:59:c2:f1:
         c1:1c:ea:70:b5:8e:2c:2c:3d:3b:3b:31:ee:48:2e:02:bc:e7:
         9a:9a:e5:8d:a4:0e:a5:53:de:f3:6e:e0:33:3d:f6:cc:60:bf:
         8f:e2:7d:47:d4:66:4e:69:a1:5c:5c:e4:cd:04:e6:65:97:e5:
         c4:5a:f7:53:03:66:19:42:e1:16:28:82:2c:37:3e:0e:1a:fe:
         63:54:f9:34:ef:07:0d:82:cd:33:b3:81:56:51:d5:cd:09:f5:
         ec:96:e8:ac:68:6c:72:9f:93:cc:97:99:18:40:b2:6d:5b:87:
         84:8b:5d:7f:89:f1:bb:c0:85:dd:57:99:33:16:d9:52:79:4b:
         ed:dc:e1:44:0e:6e:6c:ec:d9:1b:68:4a:ce:c8:d8:34:2a:9d:
         a4:41:2d:9e:cc:d8:26:8c:b4:c6:60:d3:27:fe:50:11:77:ac:
         e8:b0:c7:a7:bf:d2:d7:a3:34:f2:6a:63:e5:9f:9d:f7:7d:83:
         ef:04:08:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:47 2024 by rpki-client on console-ams.rpki-client.org