Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/mzYu9VGTkmYCWyUZN_Ze3vkAPY8.roa
File:                     mzYu9VGTkmYCWyUZN_Ze3vkAPY8.roa (raw, json)
Hash identifier:          7lrxtCn1t9d+JXI/Xiosq0ikFEbwuYx2/d5GRQfGVk4=
Subject key identifier:   9B:36:2E:F5:51:93:92:66:02:5B:25:19:37:F6:5E:DE:F9:00:3D:8F
Certificate issuer:       /CN=be96a9409d995e702b212c93f6d4c99a9db26e4a
Certificate serial:       0184D1E8BCCA7BD0145BF89D4C84C89B05A4
Authority key identifier: BE:96:A9:40:9D:99:5E:70:2B:21:2C:93:F6:D4:C9:9A:9D:B2:6E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vpapQJ2ZXnArISyT9tTJmp2ybko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/mzYu9VGTkmYCWyUZN_Ze3vkAPY8.roa
Signing time:             Fri 02 Dec 2022 08:16:41 +0000
ROA not before:           Fri 02 Dec 2022 08:16:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205069
IP address blocks:        195.244.92.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:d1:e8:bc:ca:7b:d0:14:5b:f8:9d:4c:84:c8:9b:05:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be96a9409d995e702b212c93f6d4c99a9db26e4a
        Validity
            Not Before: Dec  2 08:16:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b362ef551939266025b251937f65edef9003d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d4:e8:28:67:17:0d:b5:0a:f2:03:38:72:81:
                    dc:1d:bd:8e:6b:db:13:e5:29:ab:04:8d:9d:89:ba:
                    5b:c6:a7:b0:8d:88:ff:4a:5c:45:72:55:ed:05:dd:
                    03:9f:0c:26:e6:bc:63:a9:df:fd:12:ea:98:20:a4:
                    37:c9:db:80:43:ec:70:47:b4:ef:48:fb:6a:ba:ae:
                    92:69:54:e6:b1:7b:20:7a:b3:92:4b:37:1c:ea:2f:
                    20:a9:8f:91:06:65:d8:e1:c3:8f:54:9a:62:53:15:
                    77:9f:3c:09:3e:be:f6:67:7b:da:b0:e3:2e:8a:18:
                    72:e9:78:fc:19:2f:30:98:b6:4b:dd:34:91:e5:d6:
                    a3:c6:e8:05:c4:fa:30:2f:50:35:67:2c:19:f7:c1:
                    60:32:e3:ea:a3:81:a3:10:68:2a:fd:b4:91:c3:43:
                    91:1c:e2:6d:67:21:ab:0b:35:5c:8d:c9:8c:9b:b3:
                    99:b8:f4:6a:e4:e9:e1:8f:cb:6a:04:65:0f:ef:fc:
                    19:65:df:e8:f6:d4:e4:54:98:30:15:55:dc:b6:d7:
                    68:f6:b4:d4:05:df:55:e1:26:35:78:54:a7:6f:62:
                    3d:7c:33:8f:6e:59:96:75:8c:e0:c1:ec:ba:3a:16:
                    25:5b:db:3f:5f:f2:f6:29:6a:b2:2b:6d:3f:d3:c7:
                    00:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:36:2E:F5:51:93:92:66:02:5B:25:19:37:F6:5E:DE:F9:00:3D:8F
            X509v3 Authority Key Identifier:
                keyid:BE:96:A9:40:9D:99:5E:70:2B:21:2C:93:F6:D4:C9:9A:9D:B2:6E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpapQJ2ZXnArISyT9tTJmp2ybko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/mzYu9VGTkmYCWyUZN_Ze3vkAPY8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/vpapQJ2ZXnArISyT9tTJmp2ybko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.244.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:ca:c9:fe:07:ac:58:d7:79:15:76:33:76:b2:61:84:d8:2f:
         78:71:fc:35:9f:0c:82:0d:91:ff:15:45:80:61:3b:04:55:6e:
         68:cb:46:68:36:1a:c5:3a:b9:39:6b:a0:3f:2b:39:84:9c:12:
         de:c4:d8:fd:11:50:1f:3b:88:ba:37:49:6d:be:33:35:7e:6b:
         0e:62:49:bd:c7:9b:0e:4a:8e:1f:81:8a:83:3f:44:be:60:fc:
         eb:6e:17:57:fb:b1:5f:bf:18:79:5d:83:1d:86:da:1d:ab:ef:
         0c:aa:c3:40:0f:86:9c:69:a2:f5:07:4d:02:76:e6:f6:18:98:
         97:d2:37:b1:88:e4:59:45:cd:07:27:9d:34:76:29:78:bf:b5:
         10:c6:48:b6:ae:f5:07:02:37:48:76:b7:72:18:0e:33:67:59:
         5b:e5:70:a5:4c:2f:46:bd:8f:73:af:2b:22:3b:5a:5c:07:16:
         b3:6e:83:af:bf:ba:7c:b1:30:9f:bd:28:4e:2e:45:96:3e:be:
         ba:4d:7d:a6:87:96:76:15:7f:32:33:01:34:e1:b6:19:ad:0e:
         e3:e0:a7:b9:73:4a:4d:49:4e:5e:ab:86:70:21:04:72:81:97:
         72:5b:cb:10:55:e9:e2:b8:62:4a:1b:67:f5:b6:be:63:a4:93:
         f1:a7:8e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:23 2024 by rpki-client on console-ams.rpki-client.org