Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/207ea7-e4e2-49e2-9e13-1efc3559d706/1/z9CBeQFGVJ6a-aOkTgW9kr4T7ZQ.roa
File:                     z9CBeQFGVJ6a-aOkTgW9kr4T7ZQ.roa (raw, json)
Hash identifier:          0d+6+lgP+FSRMRw+03QrDwFBD775Hc5mljxOB7sBV+4=
Subject key identifier:   CF:D0:81:79:01:46:54:9E:9A:F9:A3:A4:4E:05:BD:92:BE:13:ED:94
Certificate issuer:       /CN=52882280ef8c6e52dc64a94ace84d3dc8f261ded
Certificate serial:       01B65A
Authority key identifier: 52:88:22:80:EF:8C:6E:52:DC:64:A9:4A:CE:84:D3:DC:8F:26:1D:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UogigO-MblLcZKlKzoTT3I8mHe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/207ea7-e4e2-49e2-9e13-1efc3559d706/1/z9CBeQFGVJ6a-aOkTgW9kr4T7ZQ.roa
Signing time:             Thu 10 Feb 2022 08:31:45 +0000
ROA not before:           Thu 10 Feb 2022 08:31:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50964
IP address blocks:        194.76.38.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112218 (0x1b65a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52882280ef8c6e52dc64a94ace84d3dc8f261ded
        Validity
            Not Before: Feb 10 08:31:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cfd081790146549e9af9a3a44e05bd92be13ed94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fd:69:c4:73:77:12:81:30:07:6b:c1:a6:2e:
                    a9:ff:2e:90:69:80:db:45:b9:7d:fe:47:18:f3:95:
                    01:ae:14:f8:9c:47:2b:75:bf:dd:dc:35:4d:08:06:
                    0e:9f:a8:1a:2c:17:7c:b8:5f:7e:8e:03:6a:7c:80:
                    70:d1:29:77:da:9b:f8:79:84:4a:c3:23:c6:db:66:
                    4b:8a:c3:db:9b:de:2d:00:4a:7a:b5:ec:a6:0b:bd:
                    1d:52:99:c0:38:46:0d:5b:ae:fe:e0:5c:5e:81:06:
                    dc:5a:d2:d3:d9:e3:5a:90:9d:ff:84:ea:0d:5c:dc:
                    4e:bc:16:7a:54:ed:09:62:bc:23:ce:d6:00:03:ab:
                    e8:26:43:ff:67:d6:64:97:9f:c9:4a:44:dc:2c:ba:
                    1b:d4:f0:2a:18:a6:5c:af:c5:76:78:b4:f0:2b:76:
                    4f:dd:ad:c0:db:a7:5c:a8:9c:b3:b3:62:b8:9a:48:
                    fd:c4:06:83:6f:f1:c5:19:cb:68:a6:fb:48:4e:b4:
                    e2:37:15:3c:a6:da:1e:da:9a:12:c2:a5:1d:47:55:
                    1a:26:3b:b8:f5:2e:46:96:ac:ad:e4:0c:8f:80:95:
                    a3:45:16:0a:bc:87:ef:08:8c:d2:ea:6a:9e:44:f8:
                    28:a7:6b:0d:29:8e:4a:7f:f6:ac:ab:d9:d0:15:c6:
                    10:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D0:81:79:01:46:54:9E:9A:F9:A3:A4:4E:05:BD:92:BE:13:ED:94
            X509v3 Authority Key Identifier:
                keyid:52:88:22:80:EF:8C:6E:52:DC:64:A9:4A:CE:84:D3:DC:8F:26:1D:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UogigO-MblLcZKlKzoTT3I8mHe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/207ea7-e4e2-49e2-9e13-1efc3559d706/1/z9CBeQFGVJ6a-aOkTgW9kr4T7ZQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/207ea7-e4e2-49e2-9e13-1efc3559d706/1/UogigO-MblLcZKlKzoTT3I8mHe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.76.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:df:c1:6d:48:18:30:ea:38:d1:ee:b0:fb:59:6b:a0:96:3d:
         bb:37:c1:d1:e5:e7:c9:96:6c:de:c5:d5:ff:05:a0:a2:13:4e:
         f7:3f:6c:45:48:e7:ca:3c:59:54:df:1e:d3:d6:17:37:aa:a5:
         5d:05:96:f4:f0:2a:29:61:10:7e:58:d2:f6:6a:8e:22:58:65:
         90:56:cf:98:07:5d:c3:5c:5a:e0:00:51:8f:74:d2:75:3e:e6:
         f1:48:55:4f:90:60:95:9b:24:85:e6:12:69:08:d3:a2:aa:75:
         59:b3:84:b9:70:69:72:6b:b6:8e:1e:f6:c2:ad:a8:03:7a:36:
         5c:9b:65:df:c6:fb:f2:a2:6a:39:22:f9:fc:36:49:73:f9:9d:
         02:c7:78:75:a4:77:70:28:60:8a:de:72:9c:e2:5b:0f:5a:d4:
         ef:04:2a:8b:19:40:44:92:1e:3a:ec:d4:c8:0b:90:16:f0:66:
         5e:a0:6b:c4:2b:c5:ae:dc:11:a8:c0:d0:50:16:b7:99:27:d4:
         f6:e0:92:8e:7b:10:6b:f9:47:3e:a2:91:d1:1e:77:99:76:68:
         66:a6:85:45:58:50:35:cd:e3:2b:ec:98:69:47:49:45:cf:0b:
         fb:c9:d1:c7:d4:0e:82:ea:28:9c:bf:8d:e8:62:dd:36:81:48:
         14:ba:82:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:36 2024 by rpki-client on console-ams.rpki-client.org