Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4a854c-0e2b-45af-93bd-37cb6dac7237/1/LvRVWqY6rZsZvdVGEY2t56OwO3Q.roa
File:                     LvRVWqY6rZsZvdVGEY2t56OwO3Q.roa (raw, json)
Hash identifier:          jBhqe+E9zgVL+aDPur96G6GTd/bbBzZQKmre5undLHE=
Subject key identifier:   2E:F4:55:5A:A6:3A:AD:9B:19:BD:D5:46:11:8D:AD:E7:A3:B0:3B:74
Certificate issuer:       /CN=7500905a8bd301328d081485c0334c37408ab572
Certificate serial:       0183F63CA058B806B1314A20065C9C616C2D
Authority key identifier: 75:00:90:5A:8B:D3:01:32:8D:08:14:85:C0:33:4C:37:40:8A:B5:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQCQWovTATKNCBSFwDNMN0CKtXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/4a854c-0e2b-45af-93bd-37cb6dac7237/1/LvRVWqY6rZsZvdVGEY2t56OwO3Q.roa
Signing time:             Thu 20 Oct 2022 16:31:51 +0000
ROA not before:           Thu 20 Oct 2022 16:31:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        92.249.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:f6:3c:a0:58:b8:06:b1:31:4a:20:06:5c:9c:61:6c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7500905a8bd301328d081485c0334c37408ab572
        Validity
            Not Before: Oct 20 16:31:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2ef4555aa63aad9b19bdd546118dade7a3b03b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f0:52:b5:1a:60:fa:b0:07:56:8d:e6:c4:b7:
                    8a:43:d7:af:42:b8:23:68:ab:16:21:83:35:31:87:
                    e4:26:0b:26:3e:b0:9b:5c:80:8d:fc:48:8f:cc:d0:
                    ac:af:63:77:e3:ba:da:24:61:f3:be:cc:25:f8:ac:
                    9d:7d:85:0d:ff:a2:a9:64:2c:6e:35:21:47:26:b7:
                    3c:46:e3:dd:ac:ce:7c:9d:cc:bf:1e:07:11:40:7b:
                    31:4b:b7:0b:2b:ce:ea:d0:4f:f9:ac:0f:f0:cd:1d:
                    4a:58:47:75:14:fc:96:ec:d4:45:ca:87:b4:85:c0:
                    6e:ea:1e:f5:dd:73:60:0a:57:30:43:eb:8c:80:ab:
                    c1:8b:6c:0c:a6:6c:b6:16:ae:6c:46:d4:a2:88:38:
                    fe:5f:3a:64:ee:7a:2b:ce:a0:75:f3:8b:b2:b7:16:
                    d1:ba:ff:fe:84:fb:9d:c2:e0:43:b4:c3:bd:78:74:
                    38:0f:f1:f4:cb:6d:16:a9:3c:77:eb:ac:4f:59:c6:
                    0b:ac:d5:e8:e5:3a:67:24:4c:84:ce:bf:cf:74:b6:
                    81:33:95:1b:5a:61:85:40:67:68:ee:b7:ef:69:4e:
                    0e:c1:87:2b:af:5a:a3:9b:48:f2:9d:4d:5c:dc:97:
                    42:2d:c8:30:fa:62:fa:52:e8:3e:b3:21:62:55:e0:
                    ff:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F4:55:5A:A6:3A:AD:9B:19:BD:D5:46:11:8D:AD:E7:A3:B0:3B:74
            X509v3 Authority Key Identifier:
                keyid:75:00:90:5A:8B:D3:01:32:8D:08:14:85:C0:33:4C:37:40:8A:B5:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQCQWovTATKNCBSFwDNMN0CKtXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a854c-0e2b-45af-93bd-37cb6dac7237/1/LvRVWqY6rZsZvdVGEY2t56OwO3Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a854c-0e2b-45af-93bd-37cb6dac7237/1/dQCQWovTATKNCBSFwDNMN0CKtXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.249.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:76:52:da:00:65:5d:8f:a6:22:fa:d1:f0:49:30:b6:cb:f0:
         9f:fc:b7:6e:63:62:2b:74:e6:c4:fc:bb:0e:e0:a7:60:e0:4c:
         00:84:1b:d5:50:cd:df:76:05:9e:97:bc:d0:97:a0:d3:67:b3:
         d5:22:fe:a4:8a:ab:73:f4:f4:e4:17:bd:74:b8:fe:31:3c:a1:
         c9:df:4f:0f:7c:06:c3:2e:ad:2d:41:66:8b:9c:64:ed:0f:46:
         b6:68:8a:8a:6e:9c:83:75:b2:d1:f0:9f:ea:f3:f5:c0:5f:87:
         bd:b9:de:44:d2:b6:87:ac:4a:af:8f:f0:d0:d9:4b:aa:78:d8:
         ff:19:ce:ee:44:fa:da:bf:d7:5c:13:57:c8:c7:7e:08:7e:ed:
         d9:72:f4:33:f5:5f:0f:e0:9d:03:b4:e4:71:28:9c:ec:36:47:
         b1:11:57:02:ce:20:19:eb:41:55:f8:84:b4:01:9a:80:d6:bd:
         70:32:96:8d:fb:c6:db:13:3f:ee:fd:b6:03:72:3d:27:95:c1:
         7f:7c:5e:d0:de:17:a7:66:64:87:3e:71:4c:bc:ca:ea:3c:b5:
         2c:93:1c:54:e8:e1:43:d2:08:34:0e:10:ea:b6:79:f6:67:66:
         8f:ea:b0:c5:8f:1c:3e:8a:27:ad:0c:48:df:b2:2a:14:4b:be:
         1b:1e:6f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:00 2024 by rpki-client on console-fra.rpki-client.org