Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/_dGlrO44LZdm5WEpRSTOoOVM9uk.roa
File:                     _dGlrO44LZdm5WEpRSTOoOVM9uk.roa (raw, json)
Hash identifier:          L/y76Xwpmr2Y/T8KikeSpMLOjQFYJ4pCJP/ygv03v88=
Subject key identifier:   FD:D1:A5:AC:EE:38:2D:97:66:E5:61:29:45:24:CE:A0:E5:4C:F6:E9
Certificate issuer:       /CN=873ec15b98e26e8b29bb7dcf4a6052cace6d2683
Certificate serial:       01104909
Authority key identifier: 87:3E:C1:5B:98:E2:6E:8B:29:BB:7D:CF:4A:60:52:CA:CE:6D:26:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hz7BW5jibospu33PSmBSys5tJoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/_dGlrO44LZdm5WEpRSTOoOVM9uk.roa
Signing time:             Sat 04 Jun 2022 14:16:20 +0000
ROA not before:           Sat 04 Jun 2022 14:16:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42233
IP address blocks:        176.53.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17844489 (0x1104909)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=873ec15b98e26e8b29bb7dcf4a6052cace6d2683
        Validity
            Not Before: Jun  4 14:16:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fdd1a5acee382d9766e561294524cea0e54cf6e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3e:93:63:46:95:09:47:48:dd:54:2b:a5:e7:
                    94:11:c8:bb:aa:21:c9:85:8d:ad:c5:b5:16:63:2e:
                    4f:38:38:8f:96:c2:2d:55:c9:9d:2d:fc:82:fc:0a:
                    9c:e7:fa:97:b4:0b:d9:9c:c9:0d:06:b6:c8:0f:65:
                    76:95:d7:8a:ba:3f:aa:e6:a4:33:b9:77:2e:e9:a0:
                    ea:19:c9:c4:c7:c6:42:c7:66:63:cf:ee:9c:c3:d1:
                    8f:05:4e:66:4d:0b:89:6c:96:a0:03:d5:b7:23:2b:
                    eb:40:25:8c:8b:f6:b0:b5:d7:87:e9:bd:e6:c5:8c:
                    92:58:e4:46:2f:76:9f:c7:b7:52:26:d1:69:62:cd:
                    95:72:cc:54:f4:1b:3d:9e:23:a6:10:f6:3f:b1:03:
                    d8:dd:b5:b2:34:fa:70:59:b6:a6:7c:eb:bd:fa:5b:
                    1c:05:a2:34:7f:4e:76:1c:c4:f3:4b:7f:89:ba:99:
                    1d:7e:6b:bc:4c:ca:1f:a6:6b:c0:71:03:52:e2:b4:
                    67:fe:3c:20:5d:21:7f:9a:fa:5f:20:88:a8:72:40:
                    76:c4:2d:dc:96:35:73:12:0d:cd:7b:32:e5:c0:0c:
                    51:12:21:b4:eb:87:6d:8a:51:2b:d6:72:da:9b:e3:
                    fd:47:66:b7:1a:df:f1:bc:95:2e:9d:0a:fc:55:cf:
                    f4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D1:A5:AC:EE:38:2D:97:66:E5:61:29:45:24:CE:A0:E5:4C:F6:E9
            X509v3 Authority Key Identifier:
                keyid:87:3E:C1:5B:98:E2:6E:8B:29:BB:7D:CF:4A:60:52:CA:CE:6D:26:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hz7BW5jibospu33PSmBSys5tJoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/_dGlrO44LZdm5WEpRSTOoOVM9uk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/hz7BW5jibospu33PSmBSys5tJoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.53.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:df:8c:b9:78:35:2f:b1:01:ef:29:f6:9a:fc:a5:02:41:87:
         f2:e8:3b:6f:83:c5:ba:33:47:21:75:68:85:79:b6:46:32:24:
         a4:92:fa:24:46:81:23:f5:de:e3:2d:f1:13:c9:7a:0d:5a:c5:
         9c:73:d4:2c:98:bf:09:7c:6f:0e:5a:41:54:e6:b4:25:31:d8:
         85:9d:ae:0c:16:21:fa:06:ca:ab:00:6c:fc:78:89:99:60:a0:
         10:aa:bc:cd:ec:98:93:87:2f:d1:08:e2:7e:fa:e3:0f:82:53:
         d7:bc:c2:d8:d9:d5:8a:c3:1d:f2:d8:02:52:3f:75:42:87:5b:
         13:87:ef:86:17:7a:3e:80:80:ed:72:13:c1:01:59:7c:9f:a0:
         59:11:87:02:6f:ef:f3:ff:ea:80:95:a4:bd:c7:f5:92:de:27:
         d9:07:32:26:4a:f7:02:9d:0a:a0:32:41:94:44:d4:ac:1e:db:
         cf:dc:e9:fe:11:29:84:62:51:73:e7:82:65:d0:b9:93:59:d1:
         29:c5:76:c8:23:d4:d5:61:85:90:d7:e1:59:5b:c2:9a:64:65:
         73:b5:81:f4:3c:64:79:06:bf:21:a1:dd:16:e8:38:9f:ad:64:
         14:54:20:5b:95:56:7c:e5:5d:09:a2:86:9f:c1:74:64:eb:9e:
         d9:7e:db:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:48 2024 by rpki-client on console-ams.rpki-client.org