Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/996db4-27f3-4b55-a9e7-26412591a06e/1/BBlaNoL-kBBWkZgwwPqK40zNzgQ.roa
File:                     BBlaNoL-kBBWkZgwwPqK40zNzgQ.roa (raw, json)
Hash identifier:          XHAELhBvcT/bTt0Dxt89rd3ztHHj1QmRrLrH6cvmdMc=
Subject key identifier:   04:19:5A:36:82:FE:90:10:56:91:98:30:C0:FA:8A:E3:4C:CD:CE:04
Certificate issuer:       /CN=c49cb5b85f7c5da97eb4741a6bb7599781190405
Certificate serial:       367FB8AD
Authority key identifier: C4:9C:B5:B8:5F:7C:5D:A9:7E:B4:74:1A:6B:B7:59:97:81:19:04:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJy1uF98Xal-tHQaa7dZl4EZBAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/996db4-27f3-4b55-a9e7-26412591a06e/1/BBlaNoL-kBBWkZgwwPqK40zNzgQ.roa
Signing time:             Sat 01 Jan 2022 06:54:38 +0000
ROA not before:           Sat 01 Jan 2022 06:54:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44700
IP address blocks:        81.27.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 914340013 (0x367fb8ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c49cb5b85f7c5da97eb4741a6bb7599781190405
        Validity
            Not Before: Jan  1 06:54:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=04195a3682fe901056919830c0fa8ae34ccdce04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:4e:7d:62:c9:f0:0c:6f:99:f0:d8:eb:fa:
                    db:02:f6:76:ad:3c:f1:4f:f9:83:88:f3:20:49:7e:
                    5c:56:37:ca:4a:73:b6:ae:6b:05:ef:93:5a:5a:ea:
                    a8:01:7d:99:26:d4:f0:74:92:61:ce:86:b4:42:91:
                    ef:6f:14:c4:b5:17:99:1d:cd:08:5e:37:7e:f1:69:
                    a5:f4:8d:3c:d1:17:b4:58:35:32:86:51:b2:34:da:
                    a5:92:61:b5:07:2f:e8:52:a7:99:93:7b:50:9e:a4:
                    fa:6f:ef:28:2d:e7:c3:57:c8:b7:62:59:ff:56:90:
                    c9:c9:c4:6e:6a:25:a1:96:ed:23:7b:bb:17:f9:ba:
                    c8:0b:75:68:62:0d:db:f0:6f:4a:24:46:d9:cc:15:
                    da:9c:42:d7:08:46:e9:01:44:c0:82:8f:bc:ab:a2:
                    62:c3:43:e5:99:38:0a:bc:b9:6c:3a:a5:97:3c:0f:
                    93:23:52:f9:3f:79:1c:c8:98:87:49:83:b2:03:27:
                    c8:47:3c:fe:9e:17:a9:ed:c4:8e:e5:06:af:b4:72:
                    a3:be:ce:92:d0:e6:b8:11:91:c8:e9:d6:7e:56:be:
                    93:52:70:61:2e:41:c2:b1:1e:bf:0c:62:86:f8:f9:
                    8f:71:e3:65:86:1a:91:1b:f5:c1:34:c7:f3:b7:7d:
                    d0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:19:5A:36:82:FE:90:10:56:91:98:30:C0:FA:8A:E3:4C:CD:CE:04
            X509v3 Authority Key Identifier:
                keyid:C4:9C:B5:B8:5F:7C:5D:A9:7E:B4:74:1A:6B:B7:59:97:81:19:04:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJy1uF98Xal-tHQaa7dZl4EZBAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/996db4-27f3-4b55-a9e7-26412591a06e/1/BBlaNoL-kBBWkZgwwPqK40zNzgQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/996db4-27f3-4b55-a9e7-26412591a06e/1/xJy1uF98Xal-tHQaa7dZl4EZBAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.27.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:97:9e:06:23:31:4b:c1:14:1c:39:4c:84:fb:e9:63:d7:92:
         fb:f1:b2:6c:33:c7:9c:e1:94:77:3b:8f:6f:6b:bc:ee:41:cc:
         c4:32:73:5d:de:7e:79:1b:92:05:7a:16:93:d2:e6:52:3c:c5:
         68:9b:d0:11:92:ee:d6:32:04:fe:3d:8b:19:e6:b7:5b:22:9e:
         1c:81:89:0e:19:e4:0c:83:df:e7:23:18:37:48:b4:37:bf:a6:
         74:e0:a6:75:d0:3d:9d:44:4c:f6:cb:49:9f:6d:9c:0e:42:31:
         b7:b9:bf:fa:5b:2a:8f:d7:23:8e:b7:2e:0b:8d:a5:8a:23:7c:
         68:71:fe:df:50:03:d5:1f:18:4a:5a:58:4a:98:67:eb:be:db:
         3d:80:57:cf:b4:19:19:81:94:44:87:79:e3:10:1e:9b:45:26:
         f9:1d:a6:b5:6e:83:7f:a5:a4:d4:f9:7c:34:c9:14:86:28:ff:
         df:66:86:da:9f:b1:7e:50:7c:32:6d:07:cd:19:f5:3c:45:85:
         56:3e:be:2c:f0:e7:19:0c:4c:5b:62:97:a4:0a:24:a5:8f:cb:
         f6:44:57:80:fc:01:6f:3f:8b:51:7a:79:90:5f:c4:51:5b:b8:
         da:3a:ee:50:be:96:ba:ee:12:86:2a:98:41:c7:aa:0a:51:f0:
         4f:dc:ee:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:31 2024 by rpki-client on console-fra.rpki-client.org