Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b64cd3-bdf9-4f39-9393-e1c448170efa/1/F5q_-jmBjm8vvNnRIe15wDU6MCY.roa
File:                     F5q_-jmBjm8vvNnRIe15wDU6MCY.roa (raw, json)
Hash identifier:          TDcq5sFOor7I+tp2KL3OJbywOPKikMFoyQ5EbIhhQGY=
Subject key identifier:   17:9A:BF:FA:39:81:8E:6F:2F:BC:D9:D1:21:ED:79:C0:35:3A:30:26
Certificate issuer:       /CN=a1dd33e391376c056f3b2496b4b4c650fe881cb8
Certificate serial:       08F46112
Authority key identifier: A1:DD:33:E3:91:37:6C:05:6F:3B:24:96:B4:B4:C6:50:FE:88:1C:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/od0z45E3bAVvOySWtLTGUP6IHLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/b64cd3-bdf9-4f39-9393-e1c448170efa/1/F5q_-jmBjm8vvNnRIe15wDU6MCY.roa
Signing time:             Sat 01 Jan 2022 12:01:13 +0000
ROA not before:           Sat 01 Jan 2022 12:01:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     397373
IP address blocks:        95.214.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150233362 (0x8f46112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1dd33e391376c056f3b2496b4b4c650fe881cb8
        Validity
            Not Before: Jan  1 12:01:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=179abffa39818e6f2fbcd9d121ed79c0353a3026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2b:5f:b3:40:58:ee:72:30:c8:5e:2d:8d:b2:
                    3f:2e:ed:e8:3e:3e:16:e1:07:7b:41:2b:ab:47:58:
                    79:92:f8:e1:80:48:a4:bf:77:dd:0b:83:92:7c:c6:
                    6b:ca:d4:a1:e8:e7:22:e9:8d:26:b2:98:f8:5f:1c:
                    da:f0:86:8b:9b:65:5a:bf:d2:36:f4:0c:7a:87:0e:
                    7d:04:f1:17:9e:81:0b:22:46:b5:07:c4:8e:23:1f:
                    c5:26:52:c4:8b:ac:de:fa:d2:0f:30:39:39:8a:4e:
                    27:94:ae:06:82:cf:3f:95:3c:8e:a2:5c:dd:93:d7:
                    16:59:78:c9:e3:50:d6:d6:ff:b3:e3:7d:78:06:63:
                    3e:3d:2e:78:96:f0:1d:5a:c1:d8:42:6e:e8:00:a1:
                    9e:42:ca:ed:0d:d6:d1:4d:49:7e:bd:72:91:dc:6c:
                    e6:91:a8:17:be:90:08:df:4c:e4:00:82:2a:61:c3:
                    36:12:73:17:1e:81:b8:1b:fe:c1:ac:bf:2c:35:56:
                    74:93:b7:1c:83:77:af:49:27:4b:75:d6:bf:c7:c3:
                    27:68:b1:17:61:3d:f4:c9:06:24:00:7d:c4:0c:d2:
                    c0:9a:d9:7e:d3:32:d6:56:46:ae:73:5d:89:cd:0a:
                    8f:3e:ff:b3:fe:89:33:42:3c:7b:0c:6f:87:af:a1:
                    ec:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9A:BF:FA:39:81:8E:6F:2F:BC:D9:D1:21:ED:79:C0:35:3A:30:26
            X509v3 Authority Key Identifier:
                keyid:A1:DD:33:E3:91:37:6C:05:6F:3B:24:96:B4:B4:C6:50:FE:88:1C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od0z45E3bAVvOySWtLTGUP6IHLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b64cd3-bdf9-4f39-9393-e1c448170efa/1/F5q_-jmBjm8vvNnRIe15wDU6MCY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b64cd3-bdf9-4f39-9393-e1c448170efa/1/od0z45E3bAVvOySWtLTGUP6IHLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:fe:a6:a5:96:76:c1:8a:8a:61:9f:1d:09:48:99:7e:57:3e:
         ef:4e:15:9e:eb:b0:d6:17:e4:c9:8e:3d:1d:4a:4e:02:ff:1a:
         32:1a:37:3b:a2:81:28:6b:a7:b7:6b:a4:25:1e:ec:6b:b6:99:
         cf:2c:75:93:8e:7e:c7:c7:d5:fd:b8:dc:87:f5:2b:f5:6d:b6:
         ae:35:ff:87:a3:4e:0b:2e:24:15:13:f1:ca:1f:33:da:03:26:
         71:e8:35:0b:37:c4:28:24:13:2e:d1:1f:78:a6:0e:fa:c4:90:
         96:24:38:b4:79:24:a6:76:b8:05:ee:ef:61:ec:31:70:28:d6:
         2c:a1:dc:87:87:9c:61:c7:b4:6b:ce:21:06:f3:b7:24:42:6f:
         7a:9b:2e:79:cd:28:74:97:89:a9:d6:1c:53:86:f8:22:74:3b:
         a9:ee:e0:84:3a:f5:14:03:6b:eb:d8:85:75:cc:60:b0:7b:79:
         2e:99:df:1b:74:da:dc:fd:c9:c1:48:ba:09:c4:be:6c:79:8d:
         5d:fb:e1:7e:30:cd:19:ce:8f:5b:2d:8f:ec:60:a5:db:48:4a:
         d3:43:03:a2:15:9d:73:6d:3c:4f:9d:30:f5:a4:cc:54:80:f6:
         6e:c1:e6:ab:78:89:3e:5f:9a:e1:56:2b:16:77:97:b7:29:b0:
         f9:6d:6e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:20 2024 by rpki-client on console-ams.rpki-client.org