Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/c6cdcc-5d3a-4126-859a-b1d8cd06fc17/1/Vo_zFIitAwd0Zhhx5UZG_s9Hc7A.roa
File:                     Vo_zFIitAwd0Zhhx5UZG_s9Hc7A.roa (raw, json)
Hash identifier:          U1ZgRARk0UClMQBoXEPAtrLXFG7FUJQtjVyePIlsmc0=
Subject key identifier:   56:8F:F3:14:88:AD:03:07:74:66:18:71:E5:46:46:FE:CF:47:73:B0
Certificate issuer:       /CN=f68c28e95b54be5c052bb35b41ddf1efb1370363
Certificate serial:       B4F424
Authority key identifier: F6:8C:28:E9:5B:54:BE:5C:05:2B:B3:5B:41:DD:F1:EF:B1:37:03:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9owo6VtUvlwFK7NbQd3x77E3A2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/c6cdcc-5d3a-4126-859a-b1d8cd06fc17/1/Vo_zFIitAwd0Zhhx5UZG_s9Hc7A.roa
Signing time:             Sat 01 Jan 2022 06:59:02 +0000
ROA not before:           Sat 01 Jan 2022 06:59:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212667
IP address blocks:        31.222.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11858980 (0xb4f424)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f68c28e95b54be5c052bb35b41ddf1efb1370363
        Validity
            Not Before: Jan  1 06:59:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=568ff31488ad030774661871e54646fecf4773b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:83:0b:25:a1:ee:fe:1c:56:30:02:e6:3a:d7:
                    2a:10:ce:fd:de:61:4d:ec:a2:a7:08:a8:b9:47:e6:
                    52:48:5e:44:f4:dd:89:f3:2a:25:6e:18:5a:a3:e1:
                    11:a8:a0:bf:a5:6c:e4:1d:ae:ad:af:e9:a5:7f:b5:
                    94:fe:2d:28:f7:d7:77:3e:39:57:4b:ff:3a:b9:68:
                    71:31:25:83:ce:dd:fb:8a:c2:b8:09:58:01:1c:11:
                    f2:ad:56:20:14:e3:e9:0c:bd:78:3b:0e:fc:94:00:
                    c7:ec:37:36:65:45:7c:84:79:d8:9d:ea:b9:cc:ed:
                    d5:8f:72:0a:ef:a0:06:7d:28:96:f1:55:c7:92:48:
                    89:f2:bc:3a:f1:7e:05:d7:54:0a:53:f6:ae:bd:a2:
                    7b:83:13:0e:12:cf:f4:bd:43:f6:2d:30:60:7d:44:
                    f0:51:65:7d:74:68:fa:54:03:2a:77:70:cf:a2:0b:
                    36:b9:48:98:04:9b:56:0f:cf:59:c7:2c:50:f9:af:
                    76:23:85:f8:24:ed:a4:06:3f:c1:5e:fc:59:60:4d:
                    17:c7:d3:3e:06:41:c0:ae:d4:ec:46:f1:52:3c:0a:
                    e5:af:e4:04:0c:93:90:28:d0:6a:9f:cc:9c:9a:4d:
                    4c:7a:3c:e3:ce:4b:d1:f8:f7:f6:e2:29:98:13:32:
                    62:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8F:F3:14:88:AD:03:07:74:66:18:71:E5:46:46:FE:CF:47:73:B0
            X509v3 Authority Key Identifier:
                keyid:F6:8C:28:E9:5B:54:BE:5C:05:2B:B3:5B:41:DD:F1:EF:B1:37:03:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9owo6VtUvlwFK7NbQd3x77E3A2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/c6cdcc-5d3a-4126-859a-b1d8cd06fc17/1/Vo_zFIitAwd0Zhhx5UZG_s9Hc7A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/c6cdcc-5d3a-4126-859a-b1d8cd06fc17/1/9owo6VtUvlwFK7NbQd3x77E3A2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.222.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:7d:14:56:42:19:6b:c5:d2:0f:c9:1d:38:cc:8e:2a:ac:4b:
         11:38:ea:e8:87:cf:ce:0c:82:b1:03:46:98:42:e6:81:79:76:
         62:3f:11:d7:8e:36:7f:84:6a:05:64:28:4a:03:f6:9b:91:6e:
         78:f4:1f:df:1c:30:ae:8d:7b:da:b7:76:c2:e4:bf:ed:28:ec:
         43:66:5f:bb:c0:70:0b:cf:fa:de:46:dd:90:16:4a:8a:fb:a2:
         1c:b2:c4:e5:5a:ff:02:2a:f7:15:46:ec:37:0e:dc:10:79:8d:
         3f:d0:20:94:1e:c3:ea:67:2e:aa:f0:6e:4c:b0:e9:bf:07:83:
         e0:3a:1a:ff:46:40:56:2b:d9:9a:db:c1:09:ee:42:62:77:e3:
         11:9e:47:44:a8:99:eb:c0:62:35:f4:dc:ac:f4:3a:38:48:b0:
         90:f6:83:9c:45:1a:ee:32:a8:8e:62:fe:d8:7d:9d:f6:10:50:
         e2:ff:1a:31:1f:27:85:ce:4d:db:ea:b9:61:04:f7:35:85:f6:
         9d:84:2c:b5:dd:60:f3:3b:bd:d6:c3:21:86:c2:9d:b4:a3:0f:
         1b:1d:2f:f9:4d:84:49:27:75:12:c0:cd:c5:f6:57:87:09:f4:
         06:24:b0:99:01:e5:8b:1f:a7:11:a6:9b:93:d5:1f:4f:4a:b1:
         d7:e5:71:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:58 2024 by rpki-client on console-fra.rpki-client.org