Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/bc2ba5-0d6b-4ae9-ad76-50764f377d14/1/LFVZ_1A0hJR0jEHLQ95R63UCRS4.roa
File:                     LFVZ_1A0hJR0jEHLQ95R63UCRS4.roa (raw, json)
Hash identifier:          jxltB5jjkJtYd/2epcS4rHxqL33Ze5qPo+A0INMOSgY=
Subject key identifier:   2C:55:59:FF:50:34:84:94:74:8C:41:CB:43:DE:51:EB:75:02:45:2E
Certificate issuer:       /CN=cbb0a86e98fd8ffa35038eeb08aae850fb909f2b
Certificate serial:       0372DD79
Authority key identifier: CB:B0:A8:6E:98:FD:8F:FA:35:03:8E:EB:08:AA:E8:50:FB:90:9F:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y7Cobpj9j_o1A47rCKroUPuQnys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/bc2ba5-0d6b-4ae9-ad76-50764f377d14/1/LFVZ_1A0hJR0jEHLQ95R63UCRS4.roa
Signing time:             Sat 01 Jan 2022 09:56:41 +0000
ROA not before:           Sat 01 Jan 2022 09:56:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212941
IP address blocks:        185.67.98.0/24 maxlen: 24
                          185.67.98.0/23 maxlen: 23
                          185.67.97.0/24 maxlen: 24
                          185.67.96.0/24 maxlen: 24
                          185.67.96.0/22 maxlen: 22
                          185.67.96.0/23 maxlen: 23
                          185.67.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57859449 (0x372dd79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbb0a86e98fd8ffa35038eeb08aae850fb909f2b
        Validity
            Not Before: Jan  1 09:56:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2c5559ff50348494748c41cb43de51eb7502452e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fb:32:7a:3c:81:f0:75:2c:88:c7:96:ba:a5:
                    f8:12:bd:d3:df:e0:e6:aa:46:6d:2d:eb:d9:95:5c:
                    b5:36:e4:a8:a7:68:49:7a:54:6b:8a:05:0c:68:1f:
                    bb:d5:8f:a2:d4:1f:58:56:05:8b:16:a4:be:2a:30:
                    f3:c5:c2:ae:07:f1:19:9e:9c:99:a3:9c:67:ce:86:
                    45:0d:6f:1e:bc:f5:bf:11:7f:8c:dc:1f:a2:63:29:
                    aa:21:f7:f5:13:36:16:5e:ca:c0:58:9f:af:5b:2f:
                    1d:e0:43:32:59:65:ea:fc:ae:a5:9f:97:02:d6:3f:
                    4d:30:a0:7a:57:ca:63:25:c5:5f:93:d8:f3:e2:a2:
                    29:7e:4f:9d:75:a7:6f:f8:d1:96:7b:3d:73:ce:cd:
                    08:9b:7d:9f:b8:24:1e:db:d6:40:20:55:5f:e8:da:
                    8d:16:80:48:62:fe:42:11:c4:95:29:ff:18:5e:37:
                    49:b2:12:21:bc:51:9f:b5:db:34:5b:02:31:9d:43:
                    9e:6b:f1:38:bd:c8:38:10:f2:67:e2:f9:f0:3a:b7:
                    81:c5:8b:e5:46:4c:ec:c6:24:1a:31:36:13:87:40:
                    4e:9b:ad:58:69:c5:d5:d2:c9:c0:46:3c:a0:c4:ef:
                    48:06:dd:23:bb:d9:02:b5:2e:1e:22:80:d4:ef:ec:
                    6d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:55:59:FF:50:34:84:94:74:8C:41:CB:43:DE:51:EB:75:02:45:2E
            X509v3 Authority Key Identifier:
                keyid:CB:B0:A8:6E:98:FD:8F:FA:35:03:8E:EB:08:AA:E8:50:FB:90:9F:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7Cobpj9j_o1A47rCKroUPuQnys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/bc2ba5-0d6b-4ae9-ad76-50764f377d14/1/LFVZ_1A0hJR0jEHLQ95R63UCRS4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/bc2ba5-0d6b-4ae9-ad76-50764f377d14/1/y7Cobpj9j_o1A47rCKroUPuQnys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.67.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:96:61:c2:de:f1:2e:f3:be:b4:04:ee:46:d7:38:12:34:e5:
         00:36:aa:95:cb:15:c6:32:05:c0:9c:ad:b9:b4:84:23:52:3a:
         69:e3:13:23:8d:3e:d0:59:60:00:72:68:ac:56:3e:eb:bc:a7:
         2b:bc:ff:82:f3:d8:ef:59:61:47:64:2c:93:9c:86:dc:b3:c2:
         23:de:d4:91:ef:f8:08:d5:dc:45:c1:90:50:e0:f3:f6:dc:c3:
         dc:e8:78:e2:5b:39:3f:e2:ff:d6:71:b2:26:50:d7:f8:9f:8d:
         ce:fc:19:41:f9:87:db:91:6f:74:a7:3d:74:83:e6:88:38:8f:
         07:4b:82:b7:d5:cf:ea:cd:bd:34:b0:64:01:4d:fc:64:fe:2f:
         8d:eb:41:29:32:17:df:24:b5:e8:6a:34:69:4b:2c:3d:7a:d9:
         e1:06:a3:d1:03:cd:6e:7e:c6:db:b4:d0:33:62:00:b6:ea:ff:
         4d:1f:66:bf:8b:a1:ca:2c:ac:73:c4:74:92:cf:b4:ea:87:64:
         5c:51:8e:72:3b:f0:b3:13:e8:1c:b4:be:9b:6d:8e:70:27:11:
         65:2b:67:97:de:92:ea:1b:c4:a4:47:99:68:d9:91:a7:69:54:
         91:06:ed:35:89:fd:6a:e4:86:6f:02:ae:66:a8:aa:f0:79:e8:
         4a:38:29:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:37 2024 by rpki-client on console-ams.rpki-client.org