Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/ASeQaKWyWu9zpGvPQ5fUcuEb4cY.roa
File:                     ASeQaKWyWu9zpGvPQ5fUcuEb4cY.roa (raw, json)
Hash identifier:          3QIkB//ecgJrhgggy+d/oIbUhsHR2mHzhcKdmtvvnKc=
Subject key identifier:   01:27:90:68:A5:B2:5A:EF:73:A4:6B:CF:43:97:D4:72:E1:1B:E1:C6
Certificate issuer:       /CN=b5bba209d4b1956b956569d72a43154448d4dc03
Certificate serial:       33F4D69F
Authority key identifier: B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/ASeQaKWyWu9zpGvPQ5fUcuEb4cY.roa
Signing time:             Thu 03 Feb 2022 09:22:55 +0000
ROA not before:           Thu 03 Feb 2022 09:22:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200370
IP address blocks:        5.34.192.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871683743 (0x33f4d69f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5bba209d4b1956b956569d72a43154448d4dc03
        Validity
            Not Before: Feb  3 09:22:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=01279068a5b25aef73a46bcf4397d472e11be1c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:11:e5:89:33:8e:71:04:f0:be:c6:f5:bb:33:
                    8a:d9:78:9d:9a:c9:0a:12:7b:db:b6:48:78:e5:8b:
                    0b:4f:77:81:80:1b:3f:0e:b5:03:92:ea:0d:80:6b:
                    10:9e:60:0a:56:70:b3:db:07:48:27:f1:16:53:17:
                    80:47:c1:0f:54:1c:4f:d8:40:1d:5b:d4:be:f1:89:
                    0f:5c:b5:d6:da:f9:fd:71:b3:41:03:8c:8c:db:73:
                    ed:7a:98:08:4a:5e:20:89:26:7d:39:37:78:d4:55:
                    5c:a6:06:4b:ae:82:59:10:91:93:b8:0b:7a:57:aa:
                    30:e4:65:8e:76:eb:16:c7:b8:3c:b8:72:4a:63:e4:
                    1b:b6:bb:c1:96:73:bc:98:83:da:40:03:c2:fd:aa:
                    64:4d:7c:14:ed:ef:cf:7c:df:74:2c:40:0d:5c:98:
                    cf:be:20:3d:2a:3b:4f:75:6b:3a:9d:47:dc:b7:75:
                    a7:0e:b4:ec:8d:a8:e8:36:21:b0:cc:61:ec:f9:62:
                    06:b9:4e:1a:85:d6:09:68:55:71:51:ed:a8:12:3e:
                    4e:19:77:55:d2:1c:e2:fd:c9:1e:4b:39:6f:51:4a:
                    48:82:a5:3d:c9:71:f1:66:8d:b3:63:cc:5b:5e:1f:
                    d1:06:09:58:49:3f:56:eb:ad:51:de:d2:24:45:c3:
                    69:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:27:90:68:A5:B2:5A:EF:73:A4:6B:CF:43:97:D4:72:E1:1B:E1:C6
            X509v3 Authority Key Identifier:
                keyid:B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/ASeQaKWyWu9zpGvPQ5fUcuEb4cY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/tbuiCdSxlWuVZWnXKkMVREjU3AM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.34.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         67:ec:1b:c3:79:35:67:43:7b:eb:af:ce:c6:7a:3e:8a:5f:46:
         36:10:9a:15:58:0d:c6:7a:10:bb:67:a7:67:fa:58:00:be:d5:
         bd:2c:cd:09:8a:a6:8d:40:b7:43:da:85:40:bd:5f:a4:1d:28:
         8f:ac:74:8c:d3:e8:1d:aa:04:4d:9a:aa:3b:3b:10:54:84:19:
         b7:e5:cc:97:f4:cd:98:2c:7b:5f:fc:50:f4:4d:86:61:d7:0a:
         3d:51:63:71:6e:dd:62:d9:9e:0c:b8:1f:79:1e:15:a8:a4:df:
         3a:fd:b2:6d:3c:51:df:ec:bb:17:1f:a0:77:f6:c4:0e:25:9f:
         9a:65:cb:f1:b5:9c:a7:a2:99:a4:b4:d8:02:b9:bd:60:da:85:
         03:1d:90:a9:09:12:19:38:8e:21:5d:1b:ce:0f:d1:5c:22:e3:
         a7:aa:75:3b:3f:fd:8c:59:14:b7:d4:cb:cf:bb:97:70:57:f8:
         c9:5d:67:d3:f5:a2:c9:41:14:4d:b3:9a:53:47:53:26:5c:75:
         72:92:dd:4a:ae:f5:67:65:7f:38:77:4e:c6:da:f1:6b:8d:73:
         22:d4:1a:14:3f:5b:d4:7a:19:53:1c:da:df:0e:09:fa:33:af:
         ae:6b:5d:70:61:f3:f1:5b:5f:68:b3:b5:84:85:0a:b9:0b:45:
         61:e2:00:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:52 2024 by rpki-client on console-ams.rpki-client.org