Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5d3569-0024-4a85-912e-255216f8492f/1/dt_-nw0SV_oF5UyAOzCA-C_e-pg.roa
File:                     dt_-nw0SV_oF5UyAOzCA-C_e-pg.roa (raw, json)
Hash identifier:          foyGrxXw5LaLXxg38dkNo/khoqntia4quQa0Btb5L9g=
Subject key identifier:   76:DF:FE:9F:0D:12:57:FA:05:E5:4C:80:3B:30:80:F8:2F:DE:FA:98
Certificate issuer:       /CN=1541145dd461e1c58bccbf1f1c1bef7b50400576
Certificate serial:       0968B539
Authority key identifier: 15:41:14:5D:D4:61:E1:C5:8B:CC:BF:1F:1C:1B:EF:7B:50:40:05:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FUEUXdRh4cWLzL8fHBvve1BABXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/5d3569-0024-4a85-912e-255216f8492f/1/dt_-nw0SV_oF5UyAOzCA-C_e-pg.roa
Signing time:             Sat 01 Jan 2022 01:54:02 +0000
ROA not before:           Sat 01 Jan 2022 01:54:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200148
IP address blocks:        85.115.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157857081 (0x968b539)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1541145dd461e1c58bccbf1f1c1bef7b50400576
        Validity
            Not Before: Jan  1 01:54:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=76dffe9f0d1257fa05e54c803b3080f82fdefa98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:13:16:00:13:3e:e5:f9:22:63:45:2c:86:66:
                    35:55:f3:0e:87:fe:86:6b:b5:5c:a6:84:25:72:f7:
                    56:ca:ed:dd:05:a5:30:ec:27:b4:36:d6:55:60:61:
                    7e:4d:9b:e5:24:e9:ff:ce:92:ba:a8:67:51:29:98:
                    28:cd:de:b7:aa:5c:4c:63:46:40:11:26:da:04:a3:
                    38:d4:ab:57:b1:0b:e0:2a:d1:91:7d:1f:24:1e:a5:
                    d6:56:b0:3e:8a:48:65:2d:ab:e9:08:84:9d:c5:88:
                    9f:aa:10:b2:38:0b:90:0a:2c:bf:8c:62:cd:d3:fe:
                    1c:02:ed:78:5c:08:fe:22:32:b3:a8:42:f1:6e:41:
                    bc:44:8c:61:40:e8:1f:27:20:ec:83:67:45:69:5d:
                    f9:03:c5:eb:db:4b:a7:94:79:65:7e:26:3b:44:d8:
                    78:db:19:14:1a:89:fd:93:e1:39:57:52:f0:a0:09:
                    28:58:55:77:86:50:75:66:2f:ad:71:b3:fc:33:07:
                    e4:67:c4:c8:0a:8b:60:8a:d9:55:4e:fe:87:07:36:
                    17:f2:6e:92:1d:d9:1e:5d:ea:92:14:36:2a:e5:e0:
                    63:d3:ff:65:74:04:d5:80:99:a8:81:23:84:fe:a2:
                    77:f4:2f:90:b3:4a:d3:5c:fb:92:c6:aa:aa:5e:bd:
                    35:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DF:FE:9F:0D:12:57:FA:05:E5:4C:80:3B:30:80:F8:2F:DE:FA:98
            X509v3 Authority Key Identifier:
                keyid:15:41:14:5D:D4:61:E1:C5:8B:CC:BF:1F:1C:1B:EF:7B:50:40:05:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUEUXdRh4cWLzL8fHBvve1BABXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d3569-0024-4a85-912e-255216f8492f/1/dt_-nw0SV_oF5UyAOzCA-C_e-pg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d3569-0024-4a85-912e-255216f8492f/1/FUEUXdRh4cWLzL8fHBvve1BABXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.115.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:7c:60:a1:5f:c2:5e:8f:02:27:9b:b1:db:94:26:fc:de:32:
         63:f1:c1:87:65:4a:ba:46:46:48:11:25:68:2b:cb:84:3f:62:
         25:99:44:65:cc:40:1a:65:26:10:cf:47:97:13:d0:52:2a:5a:
         22:1a:1f:6d:8e:e1:49:39:1d:3f:4c:7a:47:f8:45:07:b8:be:
         89:20:b7:2b:68:43:64:56:df:f6:ca:2f:67:dc:d2:e3:4e:06:
         d9:a0:4a:c9:2e:5a:10:82:68:69:7c:5b:cc:c6:f1:5b:fc:71:
         ee:2c:53:6a:41:5d:aa:9e:0b:17:e1:97:de:f8:0b:86:e2:e0:
         be:84:c4:fd:0c:34:a8:0c:5d:47:0c:14:bd:33:9b:9e:62:9a:
         00:37:fb:a8:f6:df:e0:24:fa:c2:00:cd:a1:ba:5d:27:1c:5a:
         39:c9:a2:c7:79:82:25:90:fe:ed:5b:c1:2b:e7:38:7d:df:4c:
         bd:45:6e:e5:f0:82:03:ef:3d:ae:5a:aa:50:1c:98:8e:16:5c:
         46:9f:ee:ab:21:0a:a4:d6:8d:70:c2:a2:ed:ec:8c:e6:3a:03:
         d0:60:d1:d9:05:60:72:4a:b7:58:0e:72:ff:45:57:fd:24:87:
         29:7b:37:1c:b0:df:da:47:ab:02:b9:3a:77:3e:1b:0c:2b:ee:
         be:c6:cb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:58 2024 by rpki-client on console-ams.rpki-client.org