Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d19231-9c27-4c59-8c4a-147fcbca4ebc/1/d9wLZ9RmQtzRhokgxzqeqaYWPKs.roa
File:                     d9wLZ9RmQtzRhokgxzqeqaYWPKs.roa (raw, json)
Hash identifier:          bLeWOPAbWy90uPZGEXproEE9B74p6rVxiziiXhGFYhM=
Subject key identifier:   77:DC:0B:67:D4:66:42:DC:D1:86:89:20:C7:3A:9E:A9:A6:16:3C:AB
Certificate issuer:       /CN=59458bb10febd400bfcff15381bfd6db29e32935
Certificate serial:       A6AE
Authority key identifier: 59:45:8B:B1:0F:EB:D4:00:BF:CF:F1:53:81:BF:D6:DB:29:E3:29:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUWLsQ_r1AC_z_FTgb_W2ynjKTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/d19231-9c27-4c59-8c4a-147fcbca4ebc/1/d9wLZ9RmQtzRhokgxzqeqaYWPKs.roa
Signing time:             Tue 25 Jan 2022 18:23:22 +0000
ROA not before:           Tue 25 Jan 2022 18:23:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212667
IP address blocks:        185.92.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42670 (0xa6ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59458bb10febd400bfcff15381bfd6db29e32935
        Validity
            Not Before: Jan 25 18:23:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=77dc0b67d46642dcd1868920c73a9ea9a6163cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dc:32:88:bd:4d:01:a7:ca:d5:46:0d:38:00:
                    61:75:c9:fc:c7:f9:37:14:5d:29:cf:a7:ea:aa:9c:
                    19:3e:f5:80:d2:ad:43:93:cc:aa:01:fc:a9:fe:37:
                    8c:28:57:58:d9:ce:47:d5:d2:89:a4:a1:a2:3a:82:
                    ad:37:89:34:7f:a5:88:c1:9d:8b:e6:16:f8:97:cf:
                    c2:49:4d:39:59:01:f8:7f:d8:92:51:ea:e9:a1:77:
                    42:3f:da:37:1b:97:d7:bb:bc:cb:82:3a:0c:88:17:
                    1f:ad:e4:20:30:2d:b1:7b:e8:46:bf:97:62:bc:dd:
                    5f:c7:8b:38:8c:47:c0:0c:ae:28:0b:70:41:00:6b:
                    12:d9:d0:03:a7:89:f1:0e:7f:78:09:ba:5c:0a:43:
                    f4:6d:5a:de:fc:3f:70:85:f7:c1:ae:03:59:b5:56:
                    ac:8b:f4:b7:58:b0:bc:d7:d2:2d:e4:d1:ed:75:8f:
                    45:80:76:5f:ac:b9:0d:85:ba:d1:ff:dd:16:6f:28:
                    7e:17:b3:3c:21:ec:9f:82:76:c2:6a:4c:a2:54:61:
                    c0:fd:25:8d:54:14:23:54:f7:7c:a2:73:3a:d1:ae:
                    2e:b7:45:15:39:6b:a7:df:a8:39:e2:58:67:1d:a9:
                    75:89:21:b1:67:20:00:e1:f8:3e:bb:98:c2:db:27:
                    a3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DC:0B:67:D4:66:42:DC:D1:86:89:20:C7:3A:9E:A9:A6:16:3C:AB
            X509v3 Authority Key Identifier:
                keyid:59:45:8B:B1:0F:EB:D4:00:BF:CF:F1:53:81:BF:D6:DB:29:E3:29:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUWLsQ_r1AC_z_FTgb_W2ynjKTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d19231-9c27-4c59-8c4a-147fcbca4ebc/1/d9wLZ9RmQtzRhokgxzqeqaYWPKs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d19231-9c27-4c59-8c4a-147fcbca4ebc/1/WUWLsQ_r1AC_z_FTgb_W2ynjKTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.92.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:98:39:9d:4d:e4:e7:e1:6b:f3:a1:35:af:7c:c7:83:ea:26:
         d2:6c:1a:ca:3f:bd:88:d1:4d:83:56:f7:31:2e:8d:45:18:78:
         e6:60:dd:ca:8b:99:75:fe:0e:ed:c6:44:86:83:e2:c5:49:da:
         77:1f:86:b4:c4:07:60:f4:83:73:25:72:6b:4a:bf:5a:73:10:
         63:bd:12:37:95:f0:c8:89:01:73:42:cd:79:f1:2e:66:94:c8:
         47:9f:de:ea:0a:24:c7:19:88:bf:a5:78:0d:37:13:ce:2b:37:
         21:c5:6b:f8:d0:59:e8:30:a6:75:8e:c8:b5:c6:f7:b3:de:2d:
         00:24:c9:cb:b0:d4:41:9d:68:25:52:7d:f2:8a:95:bd:c8:fd:
         d3:2a:82:f7:d7:a1:b7:02:2d:ef:4e:18:15:92:4b:23:ad:6c:
         1d:2b:d9:ef:61:b3:d9:4f:dc:96:3c:e5:df:ac:00:e7:7b:69:
         32:f3:55:2f:ca:6a:42:ac:27:f5:53:f6:2f:7f:41:49:99:52:
         75:80:07:d8:04:d8:ce:c1:7d:e6:b1:4c:0d:2d:dc:85:0d:27:
         f1:9a:f3:5b:24:70:1c:bf:47:93:d9:31:e2:42:93:7f:86:d2:
         79:f4:b8:fc:d1:ff:5e:1a:42:9d:1c:cf:9c:e4:c1:13:bd:e5:
         a2:70:59:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:12 2024 by rpki-client on console-ams.rpki-client.org