Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/53d867-fa81-471f-b1e1-46f5bb10c18c/1/6fh_L8SctDeQhA42uymJbFmBZps.roa
File:                     6fh_L8SctDeQhA42uymJbFmBZps.roa (raw, json)
Hash identifier:          SafC/+XHuq6yj2DG3CslfFsWoJg9iRaBQIB7WIexqOU=
Subject key identifier:   E9:F8:7F:2F:C4:9C:B4:37:90:84:0E:36:BB:29:89:6C:59:81:66:9B
Certificate issuer:       /CN=86c932c543511f2a98df955f38f2fbb80f7adbfa
Certificate serial:       06EBA5DB
Authority key identifier: 86:C9:32:C5:43:51:1F:2A:98:DF:95:5F:38:F2:FB:B8:0F:7A:DB:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hskyxUNRHyqY35VfOPL7uA962_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/53d867-fa81-471f-b1e1-46f5bb10c18c/1/6fh_L8SctDeQhA42uymJbFmBZps.roa
Signing time:             Tue 10 May 2022 06:47:26 +0000
ROA not before:           Tue 10 May 2022 06:47:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200064
IP address blocks:        92.118.253.0/24 maxlen: 24
                          92.118.252.0/22 maxlen: 24
                          92.118.254.0/24 maxlen: 24
                          92.118.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116106715 (0x6eba5db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86c932c543511f2a98df955f38f2fbb80f7adbfa
        Validity
            Not Before: May 10 06:47:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e9f87f2fc49cb43790840e36bb29896c5981669b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7e:19:89:ec:55:35:92:04:38:65:3b:25:09:
                    9e:18:08:79:1e:f3:d4:15:50:2d:ab:e2:09:10:18:
                    63:ce:13:11:21:c3:8f:13:18:2c:0c:50:5a:7f:37:
                    50:b9:77:b0:bf:05:78:4d:98:6f:9d:a1:43:23:d3:
                    1e:7c:b0:fe:0f:01:34:eb:8d:3c:c6:1e:7b:e3:fd:
                    36:8f:1c:82:7c:7e:17:9a:62:fd:d0:bf:0e:90:16:
                    20:93:ce:7d:68:f0:12:46:c1:25:b5:75:4e:12:7f:
                    fd:0a:c6:0c:64:db:fc:bf:09:14:31:57:e1:44:66:
                    0c:e8:a7:dd:16:2c:b4:b6:d1:58:9e:a1:07:76:8d:
                    60:78:66:51:fb:a8:2b:bd:6b:bf:86:99:f7:02:36:
                    e3:06:42:78:79:92:1b:c1:b8:7e:05:94:20:db:8a:
                    fd:50:e1:12:f7:66:95:09:dc:fd:c1:bc:d7:5f:89:
                    7c:61:04:2a:39:ac:60:fa:65:98:74:82:b5:5d:c7:
                    e1:e0:a5:0c:7f:c5:61:d5:bd:c5:03:aa:37:97:6e:
                    a6:13:b3:2c:ff:48:90:54:49:92:9c:34:d2:06:86:
                    34:d7:8f:ea:91:8a:22:bd:46:42:22:d1:a0:27:c8:
                    34:e2:c4:a5:fa:21:59:0d:a1:c8:67:8d:16:7e:5a:
                    51:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F8:7F:2F:C4:9C:B4:37:90:84:0E:36:BB:29:89:6C:59:81:66:9B
            X509v3 Authority Key Identifier:
                keyid:86:C9:32:C5:43:51:1F:2A:98:DF:95:5F:38:F2:FB:B8:0F:7A:DB:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hskyxUNRHyqY35VfOPL7uA962_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/53d867-fa81-471f-b1e1-46f5bb10c18c/1/6fh_L8SctDeQhA42uymJbFmBZps.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/53d867-fa81-471f-b1e1-46f5bb10c18c/1/hskyxUNRHyqY35VfOPL7uA962_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:d3:32:9c:a8:33:01:bf:58:8e:2c:16:c3:23:e9:cc:0c:c2:
         12:6c:a6:a5:7a:04:45:6c:53:ca:c1:3e:6b:d1:ed:9c:f9:5f:
         50:5a:11:b4:3f:3d:26:93:4f:27:31:d4:e1:9e:1b:48:65:f5:
         90:74:ca:c1:40:4c:50:01:13:70:9f:b8:c9:45:6a:47:ed:c9:
         77:64:74:fe:8b:c0:0b:73:fd:a2:1d:01:f4:23:8c:57:3b:ac:
         2b:d5:ee:6d:d4:62:4b:3f:07:e2:64:84:7c:c0:e6:aa:9a:db:
         dd:de:4b:ed:74:91:8f:84:47:4a:bb:22:2d:b7:c9:6a:46:c4:
         8b:70:ce:87:ff:51:66:4d:0d:7c:89:36:bb:29:62:c1:0b:ae:
         ec:44:e6:7e:64:fe:8a:05:54:fa:94:ab:49:ca:39:7c:55:b2:
         67:21:63:ab:85:12:79:0a:96:8e:40:76:ae:ef:bd:9c:84:7e:
         2e:8b:2a:70:64:fa:ac:82:05:1d:27:49:5e:c9:2f:f1:10:98:
         8a:e8:12:5a:6a:82:ce:07:f3:55:57:c6:b5:75:76:54:a7:1f:
         42:3a:85:d6:2c:4d:fc:f7:a2:9f:2b:a5:ac:76:69:72:d0:69:
         5c:51:ef:a2:ae:1c:85:2a:d9:8b:5e:ad:46:85:66:85:ee:04:
         be:79:c3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:08 2024 by rpki-client on console-ams.rpki-client.org