Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/140b9b-1412-47f2-9b26-ce6745064c0b/1/ZfRnfReDwDR_b2g8YffwkNv8lLs.roa
File:                     ZfRnfReDwDR_b2g8YffwkNv8lLs.roa (raw, json)
Hash identifier:          Mhmq226kG9j9FDKrVMyLjpRxNy+Fvc5ZlLqTo0OMGKE=
Subject key identifier:   65:F4:67:7D:17:83:C0:34:7F:6F:68:3C:61:F7:F0:90:DB:FC:94:BB
Certificate issuer:       /CN=cea51f7240d8d45ab23d284abdda9cdb22b986a2
Certificate serial:       0184F6461B41952BD60949FF86902843D261
Authority key identifier: CE:A5:1F:72:40:D8:D4:5A:B2:3D:28:4A:BD:DA:9C:DB:22:B9:86:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zqUfckDY1FqyPShKvdqc2yK5hqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/140b9b-1412-47f2-9b26-ce6745064c0b/1/ZfRnfReDwDR_b2g8YffwkNv8lLs.roa
Signing time:             Fri 09 Dec 2022 09:45:00 +0000
ROA not before:           Fri 09 Dec 2022 09:45:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        193.93.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f6:46:1b:41:95:2b:d6:09:49:ff:86:90:28:43:d2:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea51f7240d8d45ab23d284abdda9cdb22b986a2
        Validity
            Not Before: Dec  9 09:45:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=65f4677d1783c0347f6f683c61f7f090dbfc94bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ee:3e:e4:34:be:91:1c:32:06:72:f5:07:3c:
                    39:b6:4f:11:63:ef:7f:71:39:e6:81:f8:34:0a:08:
                    70:0a:09:c3:70:f3:c8:be:a7:99:c7:23:ec:4c:f8:
                    57:b2:79:fd:91:9c:b0:a8:44:bb:05:42:d6:0c:4e:
                    43:3e:d0:88:aa:8a:5e:e4:48:80:48:35:c2:27:12:
                    f6:58:71:5b:1a:f4:d1:f1:5a:f9:ce:62:56:81:1c:
                    56:4c:ba:a4:dd:07:dc:72:10:b0:d0:6d:58:79:21:
                    0b:8e:b3:3e:ef:b4:54:ae:f3:5d:5f:54:1f:1d:cf:
                    8a:fb:4a:71:5a:b5:55:71:c7:27:5c:3a:15:40:23:
                    df:60:a7:24:5a:90:6e:00:49:68:3a:7c:44:62:bc:
                    9b:55:6a:35:68:f8:65:67:d7:85:41:c2:d8:3d:be:
                    62:7f:8a:e7:07:5d:c7:6a:64:08:b8:de:3c:34:b5:
                    1c:9b:69:40:c0:91:e9:e3:9b:54:4f:25:46:9a:24:
                    bc:45:ce:06:1c:30:ba:16:3f:54:09:de:24:76:33:
                    50:2c:b1:b2:19:5f:1c:08:d9:04:04:d5:ae:af:cb:
                    71:52:6c:40:74:da:68:77:98:19:df:2d:70:df:1b:
                    62:6a:a9:b6:11:76:0e:47:84:ff:3d:2a:ff:82:de:
                    52:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F4:67:7D:17:83:C0:34:7F:6F:68:3C:61:F7:F0:90:DB:FC:94:BB
            X509v3 Authority Key Identifier:
                keyid:CE:A5:1F:72:40:D8:D4:5A:B2:3D:28:4A:BD:DA:9C:DB:22:B9:86:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqUfckDY1FqyPShKvdqc2yK5hqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/140b9b-1412-47f2-9b26-ce6745064c0b/1/ZfRnfReDwDR_b2g8YffwkNv8lLs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/140b9b-1412-47f2-9b26-ce6745064c0b/1/zqUfckDY1FqyPShKvdqc2yK5hqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.93.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:e0:2a:5e:a4:dd:f5:37:3d:ba:41:6e:7b:16:56:6f:0f:7a:
         4b:06:72:73:b8:ae:76:a0:b6:58:98:95:2a:f4:f8:30:92:60:
         70:09:cc:29:5f:6a:ee:c8:a1:24:ea:1d:db:8b:a6:08:55:ae:
         fc:33:a9:d3:6e:02:29:0d:d8:c1:8e:b0:c4:35:9f:8a:98:4d:
         29:0a:5b:a2:95:31:bd:56:c3:33:70:2e:1e:9b:93:44:e9:09:
         a1:92:d5:d2:88:5d:5e:e0:5a:ae:92:72:0d:e4:cf:7a:01:50:
         05:5b:99:f0:c2:3f:b6:d9:7f:f5:b3:38:85:ad:e8:28:03:d3:
         4e:bc:15:ad:ad:10:09:ea:c0:e8:41:55:0e:d3:81:c0:0a:ae:
         7a:5b:a6:d5:06:fe:66:e4:58:f9:db:24:db:e0:94:69:da:13:
         cd:25:7b:99:ea:39:22:31:78:e6:1e:83:c1:d9:22:bd:a5:a2:
         a9:ee:4c:d4:f8:43:50:2e:ff:8e:fe:30:58:26:f5:3c:b0:3e:
         6f:a7:53:14:a8:04:50:3d:d4:3d:69:59:ab:0a:5e:96:97:e1:
         15:1e:15:76:f9:05:de:a5:68:36:60:5a:36:59:ac:c9:99:49:
         1b:ad:f4:f4:d6:74:ff:04:a7:52:10:e3:f7:94:55:11:6d:46:
         3a:13:88:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:21 2024 by rpki-client on console-fra.rpki-client.org