Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/372143-5dba-4dc3-a04b-9fa1e69103b0/1/FIMuhzupvGk5gyKk3_amYGvWOF0.roa
File:                     FIMuhzupvGk5gyKk3_amYGvWOF0.roa (raw, json)
Hash identifier:          gxG0rTp/On7/EG2uRNtlgPGWYF3jofNZWWOsG3d7GDE=
Subject key identifier:   14:83:2E:87:3B:A9:BC:69:39:83:22:A4:DF:F6:A6:60:6B:D6:38:5D
Certificate issuer:       /CN=2f2ac25de2d9ba70c463fa95ef3aa5a412c87498
Certificate serial:       01833857053401B84828536395AFB820D58D
Authority key identifier: 2F:2A:C2:5D:E2:D9:BA:70:C4:63:FA:95:EF:3A:A5:A4:12:C8:74:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LyrCXeLZunDEY_qV7zqlpBLIdJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/372143-5dba-4dc3-a04b-9fa1e69103b0/1/FIMuhzupvGk5gyKk3_amYGvWOF0.roa
Signing time:             Tue 13 Sep 2022 19:32:50 +0000
ROA not before:           Tue 13 Sep 2022 19:32:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     26548
IP address blocks:        94.154.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:38:57:05:34:01:b8:48:28:53:63:95:af:b8:20:d5:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2ac25de2d9ba70c463fa95ef3aa5a412c87498
        Validity
            Not Before: Sep 13 19:32:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=14832e873ba9bc69398322a4dff6a6606bd6385d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e9:ff:eb:3f:5c:ed:02:f4:b1:6c:80:18:8d:
                    6c:27:f7:ff:7a:24:a1:05:70:a0:9d:47:d1:ba:e9:
                    9d:60:0c:7c:81:7c:64:ad:f4:51:4a:26:7f:e3:4a:
                    0b:4f:31:c8:2d:9c:d0:ac:b5:39:08:04:22:82:bc:
                    03:15:ca:13:24:34:9b:3b:14:32:19:c6:b9:7a:25:
                    6f:69:72:a3:9b:3b:09:f6:b1:9d:7a:fa:25:4b:20:
                    55:e2:7d:08:2a:4e:9e:1e:fe:51:96:f0:b5:ee:9d:
                    96:91:9a:37:45:f3:a1:ea:ba:44:40:8d:0a:da:ea:
                    f7:db:ad:34:32:2a:61:01:52:e7:7d:75:ac:64:40:
                    b5:b8:54:c2:03:a7:85:6d:9e:1f:f9:4a:26:58:22:
                    b3:25:73:97:68:64:18:79:fd:fa:09:56:29:1a:e9:
                    51:97:be:0a:86:07:7f:62:a1:e9:10:12:a5:e2:4c:
                    8d:da:db:35:ea:c9:49:44:a3:df:70:9f:87:ab:3e:
                    a9:47:65:b8:55:8d:74:88:4c:9f:dd:dc:8e:29:40:
                    b3:63:b7:68:0e:64:2f:c6:4c:77:b7:ac:ec:2a:a1:
                    27:24:1d:ff:98:b8:98:3c:71:45:3a:6e:6a:0c:38:
                    2f:12:c1:a2:1d:8a:6f:65:f2:6c:2f:a6:c8:25:00:
                    49:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:83:2E:87:3B:A9:BC:69:39:83:22:A4:DF:F6:A6:60:6B:D6:38:5D
            X509v3 Authority Key Identifier:
                keyid:2F:2A:C2:5D:E2:D9:BA:70:C4:63:FA:95:EF:3A:A5:A4:12:C8:74:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyrCXeLZunDEY_qV7zqlpBLIdJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/372143-5dba-4dc3-a04b-9fa1e69103b0/1/FIMuhzupvGk5gyKk3_amYGvWOF0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/372143-5dba-4dc3-a04b-9fa1e69103b0/1/LyrCXeLZunDEY_qV7zqlpBLIdJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.154.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:07:9e:50:72:48:cf:60:39:17:1a:03:75:8a:86:e4:4b:1b:
         ba:75:9e:90:7f:05:e6:9f:19:13:e7:97:ea:35:41:1f:64:70:
         75:fa:fb:7d:6b:65:24:5d:b4:78:3e:3a:d6:c9:43:66:5a:1e:
         f0:c2:c8:83:52:f2:d8:c7:b5:03:b9:71:d5:4e:1b:c4:da:64:
         2d:82:e1:14:ed:f1:94:64:be:79:cd:9f:b5:56:73:40:cc:d2:
         f3:e6:85:99:13:52:fe:64:f5:2f:b8:97:47:19:e8:98:1b:c3:
         61:57:3f:20:3e:01:8c:e6:53:49:3d:f8:db:1f:1f:32:00:57:
         75:18:de:4d:1c:c9:82:4a:ad:3f:6a:3d:a3:82:bc:c2:ce:b2:
         08:6e:d1:ca:76:db:49:cf:f6:c5:c9:7c:10:71:a4:33:8f:11:
         2b:e3:31:67:4e:2d:26:62:5c:ed:7e:b4:70:47:07:03:0a:3e:
         fc:10:72:99:22:c6:90:10:90:f8:37:68:02:89:16:c2:ae:00:
         a2:df:63:7d:c2:8d:68:7f:de:17:1c:8a:d5:67:0d:a2:78:28:
         b0:c6:28:11:77:2b:b6:67:cb:07:1b:95:8e:3b:37:c5:83:7e:
         ae:fc:c0:a1:bc:6d:3a:83:14:b4:36:63:34:1b:26:b0:fc:40:
         94:40:8a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:16 2023 by rpki-client on console.sobornost.net