Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/588030-8717-4520-aa79-35f70f367fd4/1/zSylpXXqN0Ih9_IHbkm7Kh_J1YE.roa
File:                     zSylpXXqN0Ih9_IHbkm7Kh_J1YE.roa (raw, json)
Hash identifier:          Zi6LiswX+GUkV9pmR7cOGD2vQB9KWt3uOHMBYG0rPs0=
Subject key identifier:   CD:2C:A5:A5:75:EA:37:42:21:F7:F2:07:6E:49:BB:2A:1F:C9:D5:81
Certificate issuer:       /CN=fc2813b65cfb03220fcfcb69afd16c7218dce39c
Certificate serial:       07E30EF1
Authority key identifier: FC:28:13:B6:5C:FB:03:22:0F:CF:CB:69:AF:D1:6C:72:18:DC:E3:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_CgTtlz7AyIPz8tpr9Fschjc45w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/588030-8717-4520-aa79-35f70f367fd4/1/zSylpXXqN0Ih9_IHbkm7Kh_J1YE.roa
Signing time:             Sat 01 Jan 2022 01:56:44 +0000
ROA not before:           Sat 01 Jan 2022 01:56:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51511
IP address blocks:        91.219.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132321009 (0x7e30ef1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc2813b65cfb03220fcfcb69afd16c7218dce39c
        Validity
            Not Before: Jan  1 01:56:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cd2ca5a575ea374221f7f2076e49bb2a1fc9d581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:13:77:d2:6c:0e:4e:b7:01:be:38:72:ba:08:
                    a6:5b:03:b0:58:7c:c1:af:89:48:24:8b:c2:69:c8:
                    3e:50:2b:78:68:50:19:7d:61:e0:8e:84:b9:f5:d0:
                    b9:0d:ee:8f:81:d0:a3:c8:f7:ed:d8:26:51:d6:48:
                    44:6e:e2:37:a7:60:96:81:5d:be:ea:10:0a:4c:f1:
                    0e:fa:1a:fd:45:40:c7:88:73:69:72:55:94:04:ae:
                    00:22:be:8e:00:75:cd:90:d2:d5:d7:bf:46:54:5b:
                    63:89:e9:b2:01:97:08:78:b4:69:6c:ed:85:ca:e9:
                    16:25:18:11:cc:40:3f:7b:2d:4f:8a:a4:84:28:eb:
                    22:3a:39:b8:99:7a:4f:65:81:f6:8a:bd:38:40:81:
                    98:fd:96:68:b2:98:1f:82:60:76:e9:02:76:3c:3d:
                    1e:4a:60:dc:61:35:b3:a0:c1:34:20:0f:d0:44:71:
                    2b:bf:01:31:f3:82:da:93:cc:41:d9:40:cf:04:d0:
                    2c:68:e9:26:08:31:19:40:bf:b3:ea:3a:0e:8b:81:
                    46:8c:26:c8:ce:e9:bd:3b:ed:b1:51:05:38:bd:e5:
                    6a:8b:db:d6:d8:95:4d:74:32:43:b2:2a:76:5f:80:
                    6c:22:36:79:3d:ac:25:6f:76:ed:04:d2:c9:c0:c0:
                    27:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2C:A5:A5:75:EA:37:42:21:F7:F2:07:6E:49:BB:2A:1F:C9:D5:81
            X509v3 Authority Key Identifier:
                keyid:FC:28:13:B6:5C:FB:03:22:0F:CF:CB:69:AF:D1:6C:72:18:DC:E3:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgTtlz7AyIPz8tpr9Fschjc45w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/588030-8717-4520-aa79-35f70f367fd4/1/zSylpXXqN0Ih9_IHbkm7Kh_J1YE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/588030-8717-4520-aa79-35f70f367fd4/1/_CgTtlz7AyIPz8tpr9Fschjc45w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.219.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:ae:19:39:7d:32:8b:02:de:7d:6d:69:fb:84:73:17:0e:8b:
         60:d2:2b:a8:0e:23:de:fc:0b:36:f3:7f:82:f1:22:9c:a9:5f:
         43:4e:72:16:8f:91:cc:05:ba:58:4e:2b:ad:6b:8a:3c:61:e1:
         4a:75:ee:8a:18:d3:0e:d3:66:09:bf:71:ba:de:1c:d0:9a:ac:
         51:bc:82:b3:9e:3c:06:a5:27:62:69:35:37:2a:0f:cb:fd:0e:
         c1:4d:21:7b:0c:46:d7:f5:55:e1:4f:61:eb:1b:f4:bd:27:8a:
         17:66:c5:8f:18:2a:8a:67:53:25:9f:00:24:58:99:57:dd:d3:
         be:da:33:44:39:85:26:e7:b3:fa:26:7a:37:be:65:31:c4:cf:
         c5:55:35:3e:c2:d1:c5:c6:75:b3:d7:98:5c:c6:0b:6b:22:5e:
         2b:a6:0e:35:b3:c4:ad:7d:a3:12:46:55:2c:b6:37:2d:2b:db:
         09:ef:8a:57:4b:7e:c8:d0:cf:89:aa:a2:43:cc:92:69:dd:5a:
         d1:4e:8a:a6:7c:68:d8:55:d2:a1:81:27:21:04:74:94:d6:a2:
         3a:f9:88:20:2d:75:ac:31:d7:ce:1b:58:71:0d:26:44:0e:43:
         d9:d2:f3:b2:51:e4:3f:09:fa:26:3c:e5:64:0a:d4:b6:98:1f:
         09:3e:84:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:19 2024 by rpki-client on console-fra.rpki-client.org