Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/eeb70e-0763-4299-84fb-d80be21ce6ca/1/FpRBcAbXdT1kjYkRBHc8Ez2GQC0.roa
File:                     FpRBcAbXdT1kjYkRBHc8Ez2GQC0.roa (raw, json)
Hash identifier:          13Gphf5fkPYYRKgyzTaLEqqYuDEjRltZdfbxCv4pJ3Y=
Subject key identifier:   16:94:41:70:06:D7:75:3D:64:8D:89:11:04:77:3C:13:3D:86:40:2D
Certificate issuer:       /CN=a16153f9d23dff0389d1c8d050200cb5ef1c8229
Certificate serial:       01833295EDDA3DAB245396C02A70DBC26577
Authority key identifier: A1:61:53:F9:D2:3D:FF:03:89:D1:C8:D0:50:20:0C:B5:EF:1C:82:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWFT-dI9_wOJ0cjQUCAMte8cgik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/eeb70e-0763-4299-84fb-d80be21ce6ca/1/FpRBcAbXdT1kjYkRBHc8Ez2GQC0.roa
Signing time:             Mon 12 Sep 2022 16:43:50 +0000
ROA not before:           Mon 12 Sep 2022 16:43:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     801
IP address blocks:        84.48.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:32:95:ed:da:3d:ab:24:53:96:c0:2a:70:db:c2:65:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a16153f9d23dff0389d1c8d050200cb5ef1c8229
        Validity
            Not Before: Sep 12 16:43:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1694417006d7753d648d891104773c133d86402d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:c5:d3:b1:5d:9b:81:96:9f:fc:ee:7d:f3:
                    58:d1:40:73:e7:dc:ae:5b:1b:5a:ea:1f:72:94:58:
                    af:d1:9b:f2:ff:b5:26:a0:65:8f:e1:64:47:26:81:
                    8a:38:7c:d9:ac:16:c6:3d:ac:4e:8a:2b:de:61:8b:
                    ce:3d:e0:31:58:1f:ef:02:bd:a8:1e:c2:f5:bc:a0:
                    da:d4:45:69:42:12:ba:91:b3:b2:8b:81:b8:84:67:
                    89:e6:a1:35:3d:2e:22:9b:14:a7:77:27:06:8e:91:
                    a4:84:b9:63:26:49:b4:c0:d4:0b:bf:06:86:b4:a3:
                    04:75:71:30:09:6f:eb:8a:c3:08:28:2e:b6:85:fc:
                    5e:e6:9a:3e:94:99:60:0e:8a:12:eb:2f:3c:20:b1:
                    45:9f:98:8f:aa:0f:b8:27:63:e6:65:2f:58:75:6a:
                    b1:ce:d5:32:27:17:f1:ff:67:28:6c:aa:87:49:4f:
                    7a:d1:93:b4:c7:60:7c:71:6a:cf:e0:02:39:63:ac:
                    76:e5:45:ed:28:c6:93:7c:95:ba:29:32:bb:bb:84:
                    d7:c4:64:19:ec:e1:e5:e6:f8:1b:14:0d:4d:28:45:
                    22:55:b7:5c:b4:0c:3f:4b:df:9a:3c:53:87:1d:25:
                    3f:22:86:03:b5:53:6a:27:86:c1:62:df:f5:41:98:
                    0a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:94:41:70:06:D7:75:3D:64:8D:89:11:04:77:3C:13:3D:86:40:2D
            X509v3 Authority Key Identifier:
                keyid:A1:61:53:F9:D2:3D:FF:03:89:D1:C8:D0:50:20:0C:B5:EF:1C:82:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWFT-dI9_wOJ0cjQUCAMte8cgik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/eeb70e-0763-4299-84fb-d80be21ce6ca/1/FpRBcAbXdT1kjYkRBHc8Ez2GQC0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/eeb70e-0763-4299-84fb-d80be21ce6ca/1/oWFT-dI9_wOJ0cjQUCAMte8cgik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.48.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         72:b8:3b:48:1e:df:25:0c:57:00:0d:7c:d2:0a:47:1a:2d:59:
         fd:3f:0c:81:f7:2f:f9:8a:95:68:e8:fa:1a:78:29:3a:bc:84:
         be:b1:fc:7f:e2:ad:1b:af:27:24:8c:2f:16:21:8a:45:ee:0c:
         ed:52:b2:38:fb:26:ca:e5:d3:50:21:ab:c4:50:b3:44:34:7b:
         22:4f:2c:81:76:3d:bc:ad:ae:06:7b:e5:d9:a4:8f:ca:f6:6d:
         5a:65:96:43:de:5c:4b:78:54:44:3c:b9:7f:79:29:46:c3:43:
         06:89:9e:a1:94:e2:0b:5f:1f:d6:1b:9e:ee:6c:69:e5:f3:60:
         60:8c:ac:49:8a:17:47:52:ca:a6:9b:3f:dd:d6:18:0d:0d:2d:
         19:43:d7:ad:f3:48:6c:ae:8d:69:f9:5f:bb:36:6f:88:f5:4d:
         1a:cc:f8:00:31:08:43:da:46:10:25:fd:e7:22:dc:08:39:3e:
         cb:35:df:64:73:1a:45:64:0e:1e:08:b4:f6:b7:ed:0b:6f:8b:
         ae:7a:5a:94:82:ce:f6:79:14:17:b4:7e:c3:a9:e1:cd:44:fd:
         80:97:d5:39:c3:35:6e:23:7a:ab:7a:28:5c:fb:52:63:98:db:
         ec:56:ef:d9:a3:f9:25:ee:66:23:78:ba:07:22:11:15:c4:e7:
         39:56:2a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:15 2024 by rpki-client on console-ams.rpki-client.org