Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/CpejHjEt7Q-QHPIbzo_cCz-0jQI.roa
File:                     CpejHjEt7Q-QHPIbzo_cCz-0jQI.roa (raw, json)
Hash identifier:          vwHxImCsDwkgBeWwP22bnxOVFF67cyQg2bFLQ7af4iM=
Subject key identifier:   0A:97:A3:1E:31:2D:ED:0F:90:1C:F2:1B:CE:8F:DC:0B:3F:B4:8D:02
Certificate issuer:       /CN=f992d817ec34b4731d8d36c7b094d2b045d0bc7c
Certificate serial:       01837055B3005C49C181C960DA9FC1B37A90
Authority key identifier: F9:92:D8:17:EC:34:B4:73:1D:8D:36:C7:B0:94:D2:B0:45:D0:BC:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/CpejHjEt7Q-QHPIbzo_cCz-0jQI.roa
Signing time:             Sat 24 Sep 2022 16:30:07 +0000
ROA not before:           Sat 24 Sep 2022 16:30:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51185
IP address blocks:        94.124.64.0/21 maxlen: 21
                          94.124.67.0/24 maxlen: 24
                          94.124.65.0/24 maxlen: 24
                          185.45.208.0/24 maxlen: 24
                          185.45.210.0/24 maxlen: 24
                          178.248.52.0/24 maxlen: 24
                          178.248.53.0/24 maxlen: 24
                          178.248.54.0/24 maxlen: 24
                          185.187.159.0/24 maxlen: 24
                          178.248.48.0/24 maxlen: 24
                          178.248.49.0/24 maxlen: 24
                          178.248.50.0/24 maxlen: 24
                          178.248.51.0/24 maxlen: 24
                          2a02:2891:13::/48 maxlen: 48
                          2a02:2891:4::/48 maxlen: 48
                          2a02:2890::/48 maxlen: 48
                          2a02:2891:29::/48 maxlen: 48
                          2a02:2891:ff::/48 maxlen: 48
                          2a02:2891:10::/48 maxlen: 48
                          2a02:2890:ffff::/48 maxlen: 48
                          2a02:2891:15::/48 maxlen: 48
                          2a02:2891:1::/48 maxlen: 48
                          2a02:2892:36::/48 maxlen: 48
                          2a02:2891:12::/48 maxlen: 48
                          2a02:2892:40::/48 maxlen: 48
                          2a02:2891::/48 maxlen: 48
                          2a02:2892:32::/48 maxlen: 48
                          2a02:2891:16::/48 maxlen: 48
                          2a02:2891:11::/48 maxlen: 48
                          2a02:2891:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:70:55:b3:00:5c:49:c1:81:c9:60:da:9f:c1:b3:7a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f992d817ec34b4731d8d36c7b094d2b045d0bc7c
        Validity
            Not Before: Sep 24 16:30:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0a97a31e312ded0f901cf21bce8fdc0b3fb48d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:92:25:96:e5:a0:7b:21:42:41:44:9c:5f:cc:
                    95:63:c8:26:62:85:aa:89:f5:a8:6d:d0:2e:be:90:
                    c7:d0:6a:04:5b:8b:71:d7:32:85:2b:f1:32:7d:7d:
                    7c:9d:c7:fb:41:b8:cd:ee:09:e0:ec:79:a4:bc:00:
                    5f:66:1c:73:97:66:45:9f:ee:af:52:6c:f7:7f:ff:
                    6c:84:59:21:1c:93:a9:77:2a:af:f4:4f:63:e8:29:
                    b7:aa:54:69:00:2c:25:e2:67:79:56:75:cc:a0:53:
                    c8:c8:f2:6f:a7:81:73:58:2d:17:9e:f1:43:ca:d5:
                    bf:5e:2b:e1:c6:a1:e0:46:35:49:1e:96:c0:c1:50:
                    c4:7c:9d:79:18:ef:86:b7:b6:9b:0c:56:f4:d4:df:
                    97:93:00:4b:a3:ca:0b:95:66:ca:6c:bd:1e:6b:d5:
                    6a:c2:4d:74:f5:d0:3c:e0:1c:ca:94:42:dd:eb:6b:
                    c2:b7:cb:aa:df:21:1c:05:eb:92:6f:f5:31:53:81:
                    0e:8c:77:81:82:04:84:51:b7:48:e7:59:fd:cf:4e:
                    0d:c1:0d:16:c7:de:3d:22:3e:4d:3c:6c:3b:a2:fd:
                    54:c1:15:ca:d8:25:36:64:00:14:35:28:c4:7e:07:
                    11:ef:29:8d:b9:04:3a:ff:c8:64:8d:fc:9a:83:fa:
                    65:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:97:A3:1E:31:2D:ED:0F:90:1C:F2:1B:CE:8F:DC:0B:3F:B4:8D:02
            X509v3 Authority Key Identifier:
                keyid:F9:92:D8:17:EC:34:B4:73:1D:8D:36:C7:B0:94:D2:B0:45:D0:BC:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/CpejHjEt7Q-QHPIbzo_cCz-0jQI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/b3a111-08a0-475d-b691-bdc90a15f7f3/1/1-ZLYF-w0tHMdjTbHsJTSsEXQvHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.124.64.0/21
                  178.248.48.0-178.248.54.255
                  185.45.208.0/24
                  185.45.210.0/24
                  185.187.159.0/24
                IPv6:
                  2a02:2890::/48
                  2a02:2890:ffff::-2a02:2891:2:ffff:ffff:ffff:ffff:ffff
                  2a02:2891:4::/48
                  2a02:2891:10::/46
                  2a02:2891:15::-2a02:2891:16:ffff:ffff:ffff:ffff:ffff
                  2a02:2891:29::/48
                  2a02:2891:ff::/48
                  2a02:2892:32::/48
                  2a02:2892:36::/48
                  2a02:2892:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:3e:8d:16:20:f3:75:20:a7:db:e4:ac:c0:68:5a:34:73:ac:
         f4:88:19:00:e9:95:1f:9d:cb:9c:63:c9:f2:24:7a:89:cb:51:
         ad:84:17:53:45:d2:55:6c:ce:1c:da:55:88:a0:63:32:a0:57:
         05:d3:6a:81:57:a0:62:10:9e:dd:01:1c:e0:2a:61:fe:9a:82:
         9b:36:d4:a8:18:3e:98:61:04:8e:18:ac:c5:bc:1f:7b:60:3b:
         62:8e:5b:9a:16:0c:72:cb:7a:2f:42:98:92:7a:33:1d:75:f8:
         5f:3b:2e:75:9e:47:d4:30:af:c2:8d:b6:bf:5c:80:c8:a2:c5:
         16:43:b1:30:03:a2:a6:a1:32:d6:51:69:bf:f9:79:eb:18:6a:
         f2:2c:24:4e:4d:3d:77:fa:81:6e:a3:2d:41:ed:89:3b:b2:4c:
         72:c8:8f:fe:50:ac:ff:a2:87:0e:15:12:80:2f:2d:13:cc:41:
         92:c6:71:1d:92:ac:bb:64:23:a2:3e:6f:c8:9a:42:b7:9d:91:
         3f:07:96:f6:c3:75:15:d1:a3:f2:7c:8f:1c:41:b9:a6:0d:53:
         ab:b0:c8:67:67:99:e0:4a:14:82:53:1f:14:13:c0:ef:19:b4:
         07:85:b4:85:29:f2:d3:52:1b:b4:7a:9c:67:ea:2c:f2:a9:65:
         1f:14:d5:16
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:51 2024 by rpki-client on console-ams.rpki-client.org