Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ff3efd-d6da-4110-ae1b-484dc87e386c/1/FezaEoAsFltZN5go9Fu0Zn0Ur8s.roa
File:                     FezaEoAsFltZN5go9Fu0Zn0Ur8s.roa (raw, json)
Hash identifier:          TZGveAv8rDlBuheF9+x4WRsH8hiSsjiDWRkSRI3lBcc=
Subject key identifier:   15:EC:DA:12:80:2C:16:5B:59:37:98:28:F4:5B:B4:66:7D:14:AF:CB
Certificate issuer:       /CN=cdaed13f30a6dc9d4d2770d323236d1fd2045390
Certificate serial:       0183E974DAD42DF606B2EEFE08557B1ED866
Authority key identifier: CD:AE:D1:3F:30:A6:DC:9D:4D:27:70:D3:23:23:6D:1F:D2:04:53:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/za7RPzCm3J1NJ3DTIyNtH9IEU5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/ff3efd-d6da-4110-ae1b-484dc87e386c/1/FezaEoAsFltZN5go9Fu0Zn0Ur8s.roa
Signing time:             Tue 18 Oct 2022 04:58:13 +0000
ROA not before:           Tue 18 Oct 2022 04:58:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22653
IP address blocks:        92.119.198.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:e9:74:da:d4:2d:f6:06:b2:ee:fe:08:55:7b:1e:d8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdaed13f30a6dc9d4d2770d323236d1fd2045390
        Validity
            Not Before: Oct 18 04:58:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15ecda12802c165b59379828f45bb4667d14afcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:96:80:01:ab:f1:6a:67:93:dc:39:1e:6c:9a:
                    66:21:34:f5:ee:62:a7:34:ea:8b:52:b6:39:ee:67:
                    04:b5:03:53:fd:bb:26:52:f6:95:86:0a:ea:b8:14:
                    00:3d:87:6d:c8:9e:4d:49:03:90:c8:78:5b:fa:4c:
                    13:d8:61:b0:c6:86:08:27:b4:85:69:1c:0e:36:5d:
                    a6:9e:26:2a:a3:36:8a:52:99:01:c0:55:3a:c0:dc:
                    49:3d:40:20:92:92:7a:2c:58:36:ae:5c:d0:35:bd:
                    ae:0a:12:e1:c8:5b:b5:b0:d8:77:e8:46:d9:cb:f8:
                    d4:2a:70:d7:24:ce:e4:c5:5d:70:d5:2a:d9:37:f6:
                    2e:4b:08:d9:f8:e2:6c:28:0d:59:74:db:08:d1:ff:
                    12:03:16:f3:46:5c:5d:0e:36:70:f4:8c:fd:fb:7e:
                    69:fd:15:a9:58:b5:6e:fa:ca:28:32:7e:52:34:4b:
                    ca:e5:4f:46:be:27:7f:44:25:f4:b7:ea:d4:3f:42:
                    80:1b:7c:48:ad:98:ca:11:86:f5:dd:fe:06:f2:82:
                    7a:62:c7:a8:91:ed:31:ed:fb:cb:c3:58:8a:e6:e8:
                    32:ef:e0:01:fb:26:7e:3f:c9:ec:4d:79:2c:98:1f:
                    85:97:7f:82:87:f8:87:98:15:66:ba:a3:a8:c9:03:
                    2b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EC:DA:12:80:2C:16:5B:59:37:98:28:F4:5B:B4:66:7D:14:AF:CB
            X509v3 Authority Key Identifier:
                keyid:CD:AE:D1:3F:30:A6:DC:9D:4D:27:70:D3:23:23:6D:1F:D2:04:53:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/za7RPzCm3J1NJ3DTIyNtH9IEU5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ff3efd-d6da-4110-ae1b-484dc87e386c/1/FezaEoAsFltZN5go9Fu0Zn0Ur8s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ff3efd-d6da-4110-ae1b-484dc87e386c/1/za7RPzCm3J1NJ3DTIyNtH9IEU5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:27:ad:ba:2b:ed:8a:b4:98:33:7d:71:25:a7:2e:82:c5:a0:
         4b:f9:dc:2b:e7:f0:cd:e4:ff:0f:9f:df:7f:46:74:41:41:4d:
         8d:68:2f:bf:04:17:17:83:62:68:60:92:ee:c2:ee:e1:c8:a9:
         57:8f:da:fa:44:0c:34:2d:0f:67:ef:07:7c:07:0c:b7:78:a7:
         e8:3c:df:a5:8d:a4:46:df:27:53:dd:f1:5c:9b:d6:ce:b6:64:
         3b:c9:86:a4:67:52:4b:e8:71:d1:c4:b5:35:a4:64:07:2e:50:
         74:c9:3f:ef:f7:58:a1:ee:eb:a7:8c:93:e0:23:57:fc:a1:03:
         32:dc:a2:c3:e9:9c:44:c1:54:4f:63:88:8e:f8:f0:69:c1:39:
         2d:71:88:d3:56:23:fe:72:29:c4:fc:d9:90:f5:08:d7:0d:08:
         0f:4b:39:34:51:f5:61:6a:8f:db:c7:71:33:1d:05:ff:24:e2:
         19:fe:76:f8:67:22:d6:91:01:81:66:d4:1f:7c:08:29:8d:3a:
         d9:aa:26:7a:e2:b6:7d:50:05:71:c2:af:b5:0d:b7:8a:1b:bc:
         42:94:c7:53:2c:60:ad:a7:bc:3c:3a:f4:b4:19:c1:48:2f:7a:
         6e:38:3b:87:87:fe:07:b7:a6:5d:8f:89:a9:62:4e:cd:c1:c1:
         78:41:0b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:38 2025 by rpki-client