Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/zg_Ff_SjemKuRO6tsE4WqIhwUfY.roa
File:                     zg_Ff_SjemKuRO6tsE4WqIhwUfY.roa (raw, json)
Hash identifier:          ZEm9rs6+sWEfO1UjUdwtOz0K7QTgMainpHRKqfpBJVA=
Subject key identifier:   CE:0F:C5:7F:F4:A3:7A:62:AE:44:EE:AD:B0:4E:16:A8:88:70:51:F6
Certificate issuer:       /CN=7bdc0d0d1b42f50a06a087bea22512932eb68802
Certificate serial:       7B3CCB
Authority key identifier: 7B:DC:0D:0D:1B:42:F5:0A:06:A0:87:BE:A2:25:12:93:2E:B6:88:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9wNDRtC9QoGoIe-oiUSky62iAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/zg_Ff_SjemKuRO6tsE4WqIhwUfY.roa
Signing time:             Sat 01 Jan 2022 01:52:21 +0000
ROA not before:           Sat 01 Jan 2022 01:52:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        146.19.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8076491 (0x7b3ccb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bdc0d0d1b42f50a06a087bea22512932eb68802
        Validity
            Not Before: Jan  1 01:52:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ce0fc57ff4a37a62ae44eeadb04e16a8887051f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:65:91:d6:83:a7:94:99:2c:fe:dc:4b:7d:20:
                    b8:05:38:ce:32:d3:a2:bc:5d:0c:c8:40:53:91:fc:
                    2d:1c:bd:49:b1:9c:fe:86:6e:5a:31:89:b8:16:b6:
                    1e:47:c0:1b:5a:d7:d0:b9:bb:90:a8:33:ad:f4:d2:
                    58:a9:12:f2:94:43:79:07:6a:44:7d:55:e6:43:35:
                    35:1d:ff:3d:2f:ea:bb:8a:e7:62:14:2a:f8:72:2e:
                    9d:3e:c4:03:63:54:95:55:46:50:39:b7:03:b5:83:
                    6f:74:fa:3f:12:72:e0:97:cc:36:fe:a1:91:8f:f2:
                    26:4c:ae:ab:2d:49:ac:c5:59:66:59:cb:ef:f8:c1:
                    c0:fe:2f:e2:f0:63:54:a3:b9:58:5b:56:28:b8:ed:
                    c9:be:c1:67:7d:f2:c9:bf:0b:04:a6:28:18:c7:31:
                    66:71:a2:b3:80:6e:7e:62:33:9d:76:80:ba:7a:60:
                    26:90:04:19:24:d7:d2:17:45:39:74:24:48:96:e4:
                    e4:ec:dc:a2:80:40:54:7d:bc:a8:d7:5b:7b:29:6d:
                    41:c7:72:6c:03:d8:b9:a9:16:25:de:b0:be:a7:ea:
                    c0:46:c4:b6:90:4a:45:48:2b:25:c6:1c:c5:8c:6e:
                    bc:49:46:8c:3c:29:09:d3:22:b6:b3:ff:1b:49:66:
                    8f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0F:C5:7F:F4:A3:7A:62:AE:44:EE:AD:B0:4E:16:A8:88:70:51:F6
            X509v3 Authority Key Identifier:
                keyid:7B:DC:0D:0D:1B:42:F5:0A:06:A0:87:BE:A2:25:12:93:2E:B6:88:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9wNDRtC9QoGoIe-oiUSky62iAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/zg_Ff_SjemKuRO6tsE4WqIhwUfY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/e9wNDRtC9QoGoIe-oiUSky62iAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:68:f8:de:e0:e3:9a:e2:56:fc:a8:9e:33:f7:69:b4:08:f1:
         4a:73:d4:8a:d3:6b:71:21:20:41:58:f9:49:31:dc:87:02:ac:
         f0:f5:43:65:eb:6a:e3:4c:13:ea:ca:6a:75:b6:32:c4:d0:fb:
         c4:45:d0:23:75:5e:f9:aa:9c:6a:eb:37:75:35:77:de:97:01:
         85:27:46:30:6a:6a:15:86:f0:fb:db:3c:74:67:5e:e8:1b:d7:
         64:50:8f:55:53:97:4f:fd:ad:41:2a:d3:72:ac:43:29:c2:e8:
         d0:9b:69:0e:6a:16:86:7e:ed:e5:39:84:80:6a:8d:d4:98:3c:
         ca:ca:66:04:6a:af:ff:45:6a:2c:ba:88:f0:2f:fc:a8:41:1b:
         d8:e0:0f:05:4b:5f:f2:a2:13:18:c5:4a:1e:4d:07:94:86:6e:
         af:90:53:ce:39:fc:50:57:45:2f:91:1d:fc:29:1d:8f:29:86:
         26:b9:4f:44:c7:74:23:bc:7f:32:ee:eb:ad:c0:c0:94:3a:79:
         7f:71:c1:4f:51:84:38:fa:25:f4:6c:70:fd:46:5a:36:71:98:
         27:32:0d:f5:3d:56:20:3a:29:39:3f:ed:77:2e:22:57:10:47:
         4a:22:84:3a:1d:e9:83:de:09:d0:ee:fe:98:06:89:f2:5f:e1:
         f1:e9:ca:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:38 2024 by rpki-client on console-fra.rpki-client.org