Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e74147-b68f-4a91-bba7-bfc9e89615b8/1/jzaE5vRIvSTnT3Y1mpH3cUj8aH0.roa
File:                     jzaE5vRIvSTnT3Y1mpH3cUj8aH0.roa (raw, json)
Hash identifier:          6ZNdAS0JKCAbwflsVFl0czmOK/3n9UmGWovHW6S4KAI=
Subject key identifier:   8F:36:84:E6:F4:48:BD:24:E7:4F:76:35:9A:91:F7:71:48:FC:68:7D
Certificate issuer:       /CN=adebf7eca6c96e5bfda68d05427aafee33f2cec4
Certificate serial:       018217750CFB0693C1D8ED6C35A28303D995
Authority key identifier: AD:EB:F7:EC:A6:C9:6E:5B:FD:A6:8D:05:42:7A:AF:EE:33:F2:CE:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rev37KbJblv9po0FQnqv7jPyzsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/e74147-b68f-4a91-bba7-bfc9e89615b8/1/jzaE5vRIvSTnT3Y1mpH3cUj8aH0.roa
Signing time:             Tue 19 Jul 2022 17:15:23 +0000
ROA not before:           Tue 19 Jul 2022 17:15:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        185.231.224.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:17:75:0c:fb:06:93:c1:d8:ed:6c:35:a2:83:03:d9:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adebf7eca6c96e5bfda68d05427aafee33f2cec4
        Validity
            Not Before: Jul 19 17:15:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8f3684e6f448bd24e74f76359a91f77148fc687d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:db:5a:ad:fb:55:15:df:2f:21:38:c2:8f:
                    ef:b1:6f:02:c4:3a:f0:c8:9f:a6:53:4e:ff:82:c8:
                    77:2c:c9:44:be:ff:b5:eb:da:c8:90:ac:fc:e7:cf:
                    42:05:8d:01:f4:ed:db:f7:56:87:15:a7:4d:05:10:
                    e5:30:15:1e:de:f7:fc:7e:ee:50:ed:3b:57:f8:c5:
                    36:8b:3e:17:0e:c3:90:56:c8:5c:b8:d7:98:a5:80:
                    38:45:ed:7d:58:0c:30:d6:dc:7a:13:d4:cc:8e:b4:
                    9f:38:88:6d:e1:3e:93:af:5a:38:55:e5:c9:f3:d3:
                    56:15:05:ac:9f:c9:62:0f:28:38:49:00:86:2c:ad:
                    1f:19:5e:9a:72:65:5d:69:de:39:27:c8:56:7d:25:
                    45:4d:47:73:fd:9f:e3:86:1e:1a:14:0a:77:5f:bd:
                    b8:0d:69:17:d6:ab:35:1c:f2:d0:50:15:c3:f1:06:
                    54:e2:9f:4e:99:95:2c:b5:5a:8a:bc:11:56:e5:55:
                    19:ed:72:77:80:35:b6:9b:9a:ce:64:7b:4a:c2:d1:
                    dd:4b:b9:34:e4:5b:9e:3a:f5:6e:ac:47:59:2e:4c:
                    71:30:26:48:22:e8:7c:b6:78:d8:8a:ec:4c:ba:fa:
                    69:23:ba:fd:5c:c1:95:36:3c:9e:a8:e8:6a:be:84:
                    a4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:36:84:E6:F4:48:BD:24:E7:4F:76:35:9A:91:F7:71:48:FC:68:7D
            X509v3 Authority Key Identifier:
                keyid:AD:EB:F7:EC:A6:C9:6E:5B:FD:A6:8D:05:42:7A:AF:EE:33:F2:CE:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rev37KbJblv9po0FQnqv7jPyzsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e74147-b68f-4a91-bba7-bfc9e89615b8/1/jzaE5vRIvSTnT3Y1mpH3cUj8aH0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e74147-b68f-4a91-bba7-bfc9e89615b8/1/rev37KbJblv9po0FQnqv7jPyzsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.231.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:d2:2f:08:f7:27:d0:41:53:e5:90:f3:24:13:7e:a9:3a:ce:
         b2:4b:71:37:b2:7e:9d:d9:66:71:c8:7e:3b:0d:70:08:8b:f1:
         9c:c0:5a:a4:d1:ea:f3:24:8b:7b:19:2e:61:b7:cb:19:20:4c:
         14:b6:89:f4:b1:0f:8d:bf:b9:6f:75:5c:05:16:fd:ac:a6:ec:
         e9:2c:7c:5e:a8:f2:c6:a9:0a:b4:60:fc:53:fb:6c:41:54:2e:
         cc:f8:33:f8:f7:d7:17:97:0d:ff:d5:8a:b4:14:20:77:eb:70:
         0d:42:ed:55:e5:43:27:ba:f4:4c:ca:1b:8a:0a:9b:82:e8:ce:
         37:2f:40:03:52:2b:d1:c7:55:22:22:36:bd:49:ca:d3:3d:49:
         09:47:4d:30:cf:b4:63:9a:63:0c:b7:2e:fd:e3:8c:76:1d:6f:
         c5:8d:ea:bf:e3:34:ff:72:3d:6e:5d:f5:1b:00:73:62:3e:9d:
         90:9b:6c:2d:3d:bd:fa:83:a6:3f:33:af:32:e8:39:22:ee:4b:
         8d:d9:d3:54:eb:d8:f0:44:b7:95:11:be:ed:58:10:38:9e:d7:
         c3:e2:ab:0e:da:39:b5:a1:65:c7:14:79:14:fc:2d:7a:ff:86:
         88:3b:76:e7:f6:9d:a2:19:f9:de:ae:b1:cd:7c:d7:dc:85:72:
         8e:ea:81:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:02 2024 by rpki-client on console-fra.rpki-client.org