Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/7c568a-c7d0-4416-8819-fb9956c5f97b/1/vjjbG9P3L4sJPI5CiAc8QEC9Ncg.roa
File:                     vjjbG9P3L4sJPI5CiAc8QEC9Ncg.roa (raw, json)
Hash identifier:          0zHpnVbX1W7CLw3XZy+IamudW84gAv//axNj5KplPBs=
Subject key identifier:   BE:38:DB:1B:D3:F7:2F:8B:09:3C:8E:42:88:07:3C:40:40:BD:35:C8
Certificate issuer:       /CN=88468b1559d936ffcc69a249f70f27d7068664fc
Certificate serial:       0D634F07
Authority key identifier: 88:46:8B:15:59:D9:36:FF:CC:69:A2:49:F7:0F:27:D7:06:86:64:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEaLFVnZNv_MaaJJ9w8n1waGZPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/7c568a-c7d0-4416-8819-fb9956c5f97b/1/vjjbG9P3L4sJPI5CiAc8QEC9Ncg.roa
Signing time:             Sat 01 Jan 2022 05:00:36 +0000
ROA not before:           Sat 01 Jan 2022 05:00:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200848
IP address blocks:        185.94.4.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224612103 (0xd634f07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88468b1559d936ffcc69a249f70f27d7068664fc
        Validity
            Not Before: Jan  1 05:00:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=be38db1bd3f72f8b093c8e4288073c4040bd35c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:19:da:13:7c:01:7c:50:20:e9:a2:99:af:33:
                    d5:89:74:78:55:8d:52:74:7f:1a:ba:bd:35:da:c4:
                    92:37:5c:8c:4c:ef:9d:ba:bb:16:ff:d7:21:a6:bb:
                    ca:83:98:91:94:50:00:ff:57:79:c0:9f:89:4d:35:
                    37:c7:bb:c5:8b:63:d5:71:9a:bc:9e:1e:30:e4:d6:
                    c5:a6:68:e1:7a:5a:fc:e1:97:b9:b7:4a:93:97:2c:
                    40:54:92:2a:ed:b5:4b:c2:88:c3:96:60:8e:19:4a:
                    f7:91:17:1a:ce:72:52:94:03:a1:c7:00:22:5a:65:
                    79:f6:1a:a0:52:1f:91:f1:d5:6f:8f:8a:3b:79:31:
                    d6:5c:f6:5c:30:ba:91:82:09:8c:23:93:cf:b1:1e:
                    81:bb:86:fe:35:a6:16:27:44:72:1f:84:eb:9c:cc:
                    48:9e:36:7a:ed:8d:52:22:e3:63:9f:2a:0e:a5:a2:
                    71:ae:22:73:95:ae:2a:b2:89:44:95:d8:27:0d:4f:
                    24:09:27:b3:91:29:cd:0b:de:84:12:71:a8:14:bd:
                    25:e1:bb:36:ec:2d:0e:dd:64:9f:3d:a1:09:3a:1c:
                    6d:67:69:43:26:1a:0b:ae:3d:5e:fd:0e:d9:f9:b5:
                    b2:bc:db:00:0d:38:23:4a:7c:7d:f7:c2:fd:ed:85:
                    56:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:38:DB:1B:D3:F7:2F:8B:09:3C:8E:42:88:07:3C:40:40:BD:35:C8
            X509v3 Authority Key Identifier:
                keyid:88:46:8B:15:59:D9:36:FF:CC:69:A2:49:F7:0F:27:D7:06:86:64:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEaLFVnZNv_MaaJJ9w8n1waGZPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7c568a-c7d0-4416-8819-fb9956c5f97b/1/vjjbG9P3L4sJPI5CiAc8QEC9Ncg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7c568a-c7d0-4416-8819-fb9956c5f97b/1/iEaLFVnZNv_MaaJJ9w8n1waGZPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.94.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:ba:5c:ad:b8:15:1b:d3:2d:ea:60:a1:8a:2e:70:bb:6a:06:
         2f:2a:bf:70:f9:b7:f4:e8:fd:4a:61:37:1e:16:f1:38:7e:f7:
         fc:41:40:e5:86:c9:ca:0e:fe:74:5f:4c:19:11:3e:33:fb:ce:
         86:74:99:0f:15:2b:76:d9:f4:8e:38:9c:95:38:59:0f:0f:cb:
         8b:db:b3:8b:39:1d:ff:15:f0:89:34:4c:a6:62:e5:33:f6:0a:
         02:e2:9a:db:95:a6:b8:2a:d2:af:75:5d:01:0b:a1:73:a3:02:
         63:28:79:f1:3b:8f:62:dd:4f:ed:88:10:1e:68:d1:84:0c:30:
         5e:63:19:5c:2d:09:8a:10:a6:7b:51:63:fd:f8:a3:27:51:3d:
         63:7f:fe:12:98:60:12:e3:4f:60:7c:24:a9:82:95:d4:da:2c:
         41:eb:20:b1:d7:e8:83:9a:ee:16:bb:67:08:f9:bc:77:57:ae:
         fe:40:73:5d:7a:63:54:c5:79:89:de:c7:cb:dc:18:31:d3:dc:
         16:9f:42:9f:07:99:f8:7f:8f:96:02:21:5c:c2:5a:fa:89:09:
         81:32:7f:c8:5d:e1:77:6a:af:c5:11:56:8b:12:e4:7e:c2:a2:
         02:3a:4c:49:2a:23:5b:ae:83:15:36:09:de:31:ad:76:74:fe:
         38:dc:c4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:58 2024 by rpki-client on console-ams.rpki-client.org