Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d19231-9c27-4c59-8c4a-147fcbca4ebc/1/n_I8cQ-wgiFF2vUZz7jpntJgxkc.roa
File:                     n_I8cQ-wgiFF2vUZz7jpntJgxkc.roa (raw, json)
Hash identifier:          snmpuZCNqGiYLGEHhKL0RLWNeNUA9D69l1HJ3p6nUWg=
Subject key identifier:   9F:F2:3C:71:0F:B0:82:21:45:DA:F5:19:CF:B8:E9:9E:D2:60:C6:47
Certificate issuer:       /CN=59458bb10febd400bfcff15381bfd6db29e32935
Certificate serial:       FBB0E6
Authority key identifier: 59:45:8B:B1:0F:EB:D4:00:BF:CF:F1:53:81:BF:D6:DB:29:E3:29:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUWLsQ_r1AC_z_FTgb_W2ynjKTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/d19231-9c27-4c59-8c4a-147fcbca4ebc/1/n_I8cQ-wgiFF2vUZz7jpntJgxkc.roa
Signing time:             Wed 11 May 2022 22:03:02 +0000
ROA not before:           Wed 11 May 2022 22:03:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        185.92.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16494822 (0xfbb0e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59458bb10febd400bfcff15381bfd6db29e32935
        Validity
            Not Before: May 11 22:03:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9ff23c710fb0822145daf519cfb8e99ed260c647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:37:f9:2c:dd:20:a0:76:bc:fd:ef:cc:33:47:
                    ff:7f:fd:d4:4f:f6:d8:95:a9:39:ba:87:e2:e8:44:
                    7c:14:73:e2:d3:ec:a1:1e:48:0c:69:29:f8:a1:d6:
                    e7:21:f0:ec:82:f2:09:a0:9c:73:b6:55:00:56:ac:
                    05:21:8a:b2:3f:2f:eb:8c:7f:6c:13:d3:fe:9c:10:
                    7e:2b:3c:08:43:9e:cc:14:92:46:56:1c:d7:e8:9e:
                    d9:39:71:87:61:14:11:d1:49:64:d4:63:3f:98:e2:
                    92:64:c7:f5:dc:2c:ef:d8:b5:ae:cf:55:92:ee:e9:
                    d7:60:b5:07:1d:55:2e:c8:bd:16:9f:8b:64:31:db:
                    69:77:c8:cb:2d:71:d8:c4:93:33:d8:64:ca:ce:8c:
                    58:06:b4:5e:9e:ae:f9:6b:2d:21:94:1a:f3:d0:3a:
                    52:ec:83:5a:9e:ad:0e:54:2f:98:ac:37:87:a6:4d:
                    e1:78:b1:01:73:78:10:0b:67:93:5d:a3:c9:21:a4:
                    54:43:44:60:f7:9a:fc:ce:e0:2d:3c:8c:e2:23:ae:
                    cd:78:46:7e:e0:e9:d7:d3:e6:6e:e3:e4:ef:75:04:
                    08:a1:6f:73:13:54:42:cc:ac:40:b6:ba:18:03:02:
                    f3:4f:4e:27:34:6b:70:ba:b2:52:9f:39:41:5f:5b:
                    5d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F2:3C:71:0F:B0:82:21:45:DA:F5:19:CF:B8:E9:9E:D2:60:C6:47
            X509v3 Authority Key Identifier:
                keyid:59:45:8B:B1:0F:EB:D4:00:BF:CF:F1:53:81:BF:D6:DB:29:E3:29:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUWLsQ_r1AC_z_FTgb_W2ynjKTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d19231-9c27-4c59-8c4a-147fcbca4ebc/1/n_I8cQ-wgiFF2vUZz7jpntJgxkc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d19231-9c27-4c59-8c4a-147fcbca4ebc/1/WUWLsQ_r1AC_z_FTgb_W2ynjKTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.92.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:c3:3f:ee:fa:ae:05:62:01:ae:0c:ed:d2:dd:00:ed:7e:fa:
         9a:4b:98:a6:e1:1b:fc:c9:6f:c3:95:c3:ef:18:1f:39:c5:6c:
         f4:d9:3c:d3:46:2f:25:3c:5f:bc:64:05:0f:ba:6e:ec:11:af:
         35:a0:1e:f5:51:43:96:59:7e:d2:12:65:63:50:e7:63:df:af:
         96:28:8b:07:d9:4f:cc:25:e1:43:ec:d3:d6:1e:68:54:ed:4f:
         88:58:ca:69:30:ce:aa:d4:36:d0:0a:4b:f4:16:8f:65:b1:45:
         3a:84:a5:26:f2:0e:77:cc:c6:2a:10:cd:0f:ad:f1:79:1c:d0:
         9d:ac:0c:e7:12:74:12:ef:b6:c4:37:c4:69:99:f0:a6:a2:bf:
         20:bd:67:f9:05:09:3a:5c:45:71:97:28:a5:8e:84:b1:8a:16:
         fa:f0:88:98:11:68:1a:8b:d8:7a:1c:ab:a4:8a:d7:33:4b:c7:
         2d:8a:4c:32:78:09:fd:b6:79:26:d7:ac:b7:e3:45:69:59:c9:
         4d:84:a4:55:34:7a:1a:e2:e5:b1:8b:59:e3:1f:ac:f1:4d:d2:
         59:74:7b:36:38:d9:80:e4:df:49:72:69:ff:a4:20:a4:1b:30:
         62:fe:12:e1:ce:50:cf:04:1f:90:32:1b:11:1d:9e:67:3a:63:
         6c:29:80:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:12 2024 by rpki-client on console-ams.rpki-client.org