Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/mL1SbVNGAmY5YF6wazX82yCkjlk.roa
File:                     mL1SbVNGAmY5YF6wazX82yCkjlk.roa (raw, json)
Hash identifier:          r6+GA9S87/w/ADFhjiyZeQavHP8mCW+oLgvaNoGllzM=
Subject key identifier:   98:BD:52:6D:53:46:02:66:39:60:5E:B0:6B:35:FC:DB:20:A4:8E:59
Certificate issuer:       /CN=cc4261880f82f38471a5717b8009c4fbda2df242
Certificate serial:       09922E50
Authority key identifier: CC:42:61:88:0F:82:F3:84:71:A5:71:7B:80:09:C4:FB:DA:2D:F2:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEJhiA-C84RxpXF7gAnE-9ot8kI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/mL1SbVNGAmY5YF6wazX82yCkjlk.roa
Signing time:             Sat 01 Jan 2022 14:56:48 +0000
ROA not before:           Sat 01 Jan 2022 14:56:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     397423
IP address blocks:        83.150.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160575056 (0x9922e50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc4261880f82f38471a5717b8009c4fbda2df242
        Validity
            Not Before: Jan  1 14:56:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=98bd526d5346026639605eb06b35fcdb20a48e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9f:d1:e8:7f:72:85:0c:ee:5e:91:92:a2:8f:
                    37:4d:b1:ff:17:52:77:d3:75:12:f5:81:1d:34:12:
                    34:03:18:ce:18:a4:e0:88:31:40:b6:03:da:17:b4:
                    9a:41:1d:99:bb:6c:8a:6d:63:10:5f:9f:f3:65:1e:
                    58:09:d3:aa:c9:6a:e4:3b:22:bb:5e:6f:ce:fd:ad:
                    1f:5c:fa:0a:75:53:42:0f:00:50:1e:0a:3d:f3:13:
                    61:ce:64:cd:b6:87:f8:f5:87:24:a2:50:27:41:aa:
                    8e:c7:b5:ea:9c:78:8f:89:e8:a9:33:17:d9:9c:80:
                    e1:4f:86:66:a7:d8:d3:e7:af:09:7a:d8:be:6e:c9:
                    68:8d:6d:39:19:eb:60:d1:9c:ed:83:d1:56:1d:c9:
                    b5:5c:c4:a3:3d:ee:ee:ac:4c:f1:79:04:29:3f:52:
                    29:68:78:e0:df:a5:6d:ea:55:00:12:c6:fe:3b:c5:
                    5e:1f:b0:48:ea:99:06:3b:f0:9a:c7:ea:ed:fa:9f:
                    97:3c:55:30:0c:9f:99:df:72:22:3b:72:15:b9:ad:
                    fe:d9:91:5f:cf:56:fc:6a:f3:ba:9e:3d:69:82:57:
                    b2:97:9e:40:3b:8c:55:ef:8c:ef:ec:7d:97:78:db:
                    2f:a9:9a:c5:af:7d:30:10:88:d3:4b:0e:91:02:e1:
                    8a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BD:52:6D:53:46:02:66:39:60:5E:B0:6B:35:FC:DB:20:A4:8E:59
            X509v3 Authority Key Identifier:
                keyid:CC:42:61:88:0F:82:F3:84:71:A5:71:7B:80:09:C4:FB:DA:2D:F2:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEJhiA-C84RxpXF7gAnE-9ot8kI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/mL1SbVNGAmY5YF6wazX82yCkjlk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/zEJhiA-C84RxpXF7gAnE-9ot8kI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.150.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:9f:74:c1:f8:93:af:57:8c:ee:4b:5d:fc:26:3f:d9:e7:48:
         02:5a:94:b5:a7:56:71:13:59:25:10:c3:a8:6d:13:25:92:5b:
         e9:62:8d:d4:ed:de:c1:3d:a8:c7:2b:7f:f2:3a:65:4e:93:06:
         00:12:58:1c:19:e4:55:95:37:a2:95:36:71:a9:5e:a6:0b:97:
         29:dc:b9:97:df:5f:26:e4:dd:3a:f9:37:5c:7f:1b:d6:8e:c7:
         a9:f8:d8:c1:6c:c6:85:2f:34:87:32:f8:f5:14:31:38:c8:1f:
         1a:ac:6f:24:1f:04:4e:34:28:2a:60:1b:41:83:a2:60:17:07:
         16:f8:aa:e0:59:cd:0a:c9:b5:93:00:d2:f2:56:49:7a:4f:8d:
         3b:a5:e1:39:8d:dc:2c:eb:e8:32:f5:b4:55:28:d4:f4:d9:d4:
         20:38:7c:89:59:0f:04:ed:4c:a9:1a:0e:c0:21:98:87:40:53:
         00:2d:b4:3a:64:33:c1:31:54:9e:7b:3c:ed:e2:62:b1:52:59:
         85:99:58:2f:b9:32:bc:3e:8c:04:19:e1:1a:56:b0:de:d8:b7:
         8a:e6:cc:82:79:2f:28:8a:4a:b3:09:a1:c5:a1:c3:76:83:ea:
         f0:90:b4:18:51:c9:7b:49:c7:6f:31:ab:97:b1:d6:8a:54:82:
         d7:bf:60:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:52 2024 by rpki-client on console-ams.rpki-client.org