Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/614424-13f3-4a8c-bb57-428f8c4b9753/1/6HQw5dcUVTyKa1B22HClRHNA3Dw.roa
File:                     6HQw5dcUVTyKa1B22HClRHNA3Dw.roa (raw, json)
Hash identifier:          kvGwC2iYEIzES5BIVBUryRSCycMSERMf9Fsa8O3GW2k=
Subject key identifier:   E8:74:30:E5:D7:14:55:3C:8A:6B:50:76:D8:70:A5:44:73:40:DC:3C
Certificate issuer:       /CN=57abfd4246bc5ba6037ad5468668097aa6f51edf
Certificate serial:       01F8899A
Authority key identifier: 57:AB:FD:42:46:BC:5B:A6:03:7A:D5:46:86:68:09:7A:A6:F5:1E:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V6v9Qka8W6YDetVGhmgJeqb1Ht8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/614424-13f3-4a8c-bb57-428f8c4b9753/1/6HQw5dcUVTyKa1B22HClRHNA3Dw.roa
Signing time:             Sat 01 Jan 2022 03:52:49 +0000
ROA not before:           Sat 01 Jan 2022 03:52:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48314
IP address blocks:        5.180.64.0/24 maxlen: 24
                          5.180.64.0/22 maxlen: 22
                          5.180.67.0/24 maxlen: 24
                          5.180.65.0/24 maxlen: 24
                          5.180.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33065370 (0x1f8899a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57abfd4246bc5ba6037ad5468668097aa6f51edf
        Validity
            Not Before: Jan  1 03:52:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e87430e5d714553c8a6b5076d870a5447340dc3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c9:a0:48:05:c3:de:b9:c6:0a:af:8d:20:9d:
                    42:62:71:91:fa:f4:73:f2:f0:a6:d4:9e:84:d4:a4:
                    64:40:32:b2:4f:d8:ce:42:49:01:95:dd:6b:4e:37:
                    eb:fb:97:fc:8b:76:f8:7e:bc:f5:33:23:d5:48:40:
                    7a:5b:29:a5:27:8a:0c:73:4d:2d:cd:2f:14:db:f0:
                    32:34:49:51:29:30:83:99:90:13:2b:47:1e:36:68:
                    bf:e2:ee:29:11:58:f9:ca:e2:bf:73:68:19:8e:bd:
                    fe:65:b5:a6:1e:03:e9:83:2e:5c:97:bf:d2:57:46:
                    e9:c7:c0:bb:3c:63:1b:fa:52:6f:05:d1:20:ea:c0:
                    2d:63:d7:36:36:4e:62:db:a7:30:1b:2e:dc:9f:01:
                    00:eb:ea:cb:a6:1e:d3:e6:a5:e1:78:9b:99:d2:2c:
                    85:5e:9f:e7:0b:f3:d1:80:c7:30:4b:4e:55:93:46:
                    b1:4f:c1:46:6c:55:7a:2d:61:14:20:89:2b:c3:a5:
                    53:87:e1:3c:d4:af:14:bf:9e:1b:d5:0c:d3:8c:2c:
                    59:97:9c:3f:38:57:f7:e1:1b:62:33:92:ba:67:3a:
                    5a:aa:67:52:0a:ae:92:85:2a:02:18:95:22:33:9e:
                    95:05:17:f9:e6:f4:9a:38:c3:4c:01:ba:53:73:e3:
                    c4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:74:30:E5:D7:14:55:3C:8A:6B:50:76:D8:70:A5:44:73:40:DC:3C
            X509v3 Authority Key Identifier:
                keyid:57:AB:FD:42:46:BC:5B:A6:03:7A:D5:46:86:68:09:7A:A6:F5:1E:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V6v9Qka8W6YDetVGhmgJeqb1Ht8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/614424-13f3-4a8c-bb57-428f8c4b9753/1/6HQw5dcUVTyKa1B22HClRHNA3Dw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/614424-13f3-4a8c-bb57-428f8c4b9753/1/V6v9Qka8W6YDetVGhmgJeqb1Ht8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:57:93:49:16:54:49:2e:09:15:71:7f:9f:29:03:ca:57:dc:
         04:4e:31:a8:37:a2:5a:d2:fc:98:52:c1:d3:cc:1c:0a:05:a5:
         7b:76:42:2a:48:ab:81:7d:fb:4f:be:c0:cc:d9:a0:38:88:4a:
         39:d0:9b:41:61:3a:77:58:47:18:e6:a8:ac:f2:25:96:a3:f8:
         79:9d:b9:0c:f7:64:d8:c2:0a:c9:17:39:c0:cf:a0:5c:21:4d:
         e2:f0:5d:f9:53:cc:ad:65:2f:65:83:07:95:52:73:e3:89:23:
         9b:8f:0e:21:a8:be:d8:7c:9c:62:0b:97:c9:a5:ac:f5:b3:d8:
         c2:2f:93:0a:ea:b9:11:c3:45:74:4b:47:a5:4c:3f:d4:8d:30:
         2a:16:3d:18:39:54:07:9c:4a:f0:df:ee:db:6f:56:49:55:e7:
         13:b4:96:f6:86:24:e7:90:7d:9c:70:5f:fa:d1:1c:f3:6e:3a:
         48:c7:01:05:9e:6f:cc:18:e5:93:ed:ed:62:28:2c:90:67:ac:
         63:da:74:32:ea:18:c6:5d:01:ae:4a:d3:ea:f0:ca:06:56:69:
         83:1c:ba:8e:b5:03:0c:14:14:e0:f9:15:8d:43:5f:46:ae:88:
         4d:e7:05:c5:01:73:dc:1b:48:25:a8:1a:70:14:f8:cb:b5:85:
         6f:56:77:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:36 2023 by rpki-client on console.sobornost.net