Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5258bf-ea0d-42a4-828e-ea93c2cb239c/1/VZfcx_bF861Ff4e9vEuhkTgPMHU.roa
File:                     VZfcx_bF861Ff4e9vEuhkTgPMHU.roa (raw, json)
Hash identifier:          9D2o0zgVdw4ZOg4QazRwtclNCo9UI5reHUuZDcbGXq8=
Subject key identifier:   55:97:DC:C7:F6:C5:F3:AD:45:7F:87:BD:BC:4B:A1:91:38:0F:30:75
Certificate issuer:       /CN=1df38ecae04225ff347811b1d37fdb2a3f6e472b
Certificate serial:       EFB537
Authority key identifier: 1D:F3:8E:CA:E0:42:25:FF:34:78:11:B1:D3:7F:DB:2A:3F:6E:47:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HfOOyuBCJf80eBGx03_bKj9uRys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/5258bf-ea0d-42a4-828e-ea93c2cb239c/1/VZfcx_bF861Ff4e9vEuhkTgPMHU.roa
Signing time:             Sat 01 Jan 2022 09:57:53 +0000
ROA not before:           Sat 01 Jan 2022 09:57:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7029
IP address blocks:        80.71.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15709495 (0xefb537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1df38ecae04225ff347811b1d37fdb2a3f6e472b
        Validity
            Not Before: Jan  1 09:57:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5597dcc7f6c5f3ad457f87bdbc4ba191380f3075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:38:81:1d:0b:14:65:9a:bf:68:f4:d5:14:3c:
                    f3:6f:44:c1:5f:50:f6:c0:e4:ab:bb:ba:f2:6d:04:
                    0b:ad:f0:10:b4:d2:2d:65:dc:e9:04:73:b9:bb:87:
                    b7:17:74:27:ab:a1:6a:2a:c1:55:4f:e0:96:10:4b:
                    81:d2:ea:9f:b5:a6:7e:12:8b:33:7e:5e:4b:99:8d:
                    32:4a:d6:64:ff:15:84:c8:12:af:9b:a1:29:fa:68:
                    00:8d:a6:2c:85:fa:14:ff:53:df:03:25:cd:53:0e:
                    34:de:22:1b:44:e7:65:4b:7a:b5:23:b0:7f:f9:e6:
                    56:42:26:7f:b6:0f:09:d9:fc:6f:ac:4b:39:f3:8b:
                    c2:bb:65:44:ee:7e:f3:3b:5a:f7:e3:07:72:93:bf:
                    7a:2d:34:de:26:4f:f1:07:b1:ed:98:27:ba:d4:ab:
                    3f:fc:b7:f7:37:7f:2a:54:80:b2:db:7d:e2:dd:b1:
                    db:f6:1c:47:e3:21:ea:54:fd:db:92:c8:e6:7c:97:
                    0a:f0:30:9d:1c:96:c7:77:d6:e0:17:41:df:3c:f7:
                    ec:02:5d:7c:46:96:d8:5c:40:19:fe:95:b5:c4:96:
                    00:59:cd:04:82:d6:ca:76:e3:7c:aa:39:44:e0:5f:
                    c4:eb:2f:dd:0c:d5:fe:aa:1e:14:81:59:8a:6b:f9:
                    d9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:97:DC:C7:F6:C5:F3:AD:45:7F:87:BD:BC:4B:A1:91:38:0F:30:75
            X509v3 Authority Key Identifier:
                keyid:1D:F3:8E:CA:E0:42:25:FF:34:78:11:B1:D3:7F:DB:2A:3F:6E:47:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HfOOyuBCJf80eBGx03_bKj9uRys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5258bf-ea0d-42a4-828e-ea93c2cb239c/1/VZfcx_bF861Ff4e9vEuhkTgPMHU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5258bf-ea0d-42a4-828e-ea93c2cb239c/1/HfOOyuBCJf80eBGx03_bKj9uRys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.71.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:d7:5b:47:d7:80:63:13:ca:4d:4a:87:38:59:21:ba:fb:cb:
         8c:52:58:c2:11:cb:55:5f:10:b0:20:70:3e:ea:85:85:f2:bc:
         07:5a:f3:7e:7e:b6:98:6f:1f:b0:d7:74:e2:f1:52:78:14:88:
         60:a9:cd:51:8c:1a:81:44:c7:cd:f5:f3:c8:89:a2:6a:f8:f8:
         16:c8:35:cc:8a:71:42:2e:2a:a4:c4:69:81:11:34:d6:f0:85:
         4a:62:80:35:74:5d:7d:fd:cb:de:96:ca:c8:63:d8:4d:26:ba:
         c5:8a:61:e5:6e:f7:1e:ed:85:55:b4:43:83:ae:51:e9:90:4d:
         c1:eb:28:0b:b9:7e:05:60:16:3b:52:8d:ec:7e:33:a6:43:2f:
         e8:8c:d6:6c:a3:31:72:69:82:e0:2c:94:1c:72:3f:c7:ca:1c:
         3f:df:19:e4:c5:03:d8:7e:a3:7a:36:2b:8c:03:42:f9:4d:0f:
         e9:65:06:5e:ea:e1:11:d2:55:07:67:5b:79:c8:67:b8:5a:e1:
         a7:d7:2f:3f:a5:00:eb:6c:2f:50:43:7c:34:1a:79:f2:a8:cc:
         2e:c5:4f:4e:be:47:2c:f6:7e:5a:22:c3:b3:ea:d7:42:e0:c5:
         a5:63:99:51:37:48:60:22:bc:bc:87:24:cd:3a:2b:da:c7:43:
         c9:28:30:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:05 2024 by rpki-client on console-fra.rpki-client.org