Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/ZpI02P_NoJdLzTrMQPmlXJ-v8kU.roa
File:                     ZpI02P_NoJdLzTrMQPmlXJ-v8kU.roa (raw, json)
Hash identifier:          7Ef7v1gSm5VZpoY/rhqIwcVKaXcFjq4BLeT/nUfBNs0=
Subject key identifier:   66:92:34:D8:FF:CD:A0:97:4B:CD:3A:CC:40:F9:A5:5C:9F:AF:F2:45
Certificate issuer:       /CN=fc7b99de49b6d7a2e267bb27bfd48ed394b84b7c
Certificate serial:       01836B2F41C0A1B41E191F0C2132F983C5A9
Authority key identifier: FC:7B:99:DE:49:B6:D7:A2:E2:67:BB:27:BF:D4:8E:D3:94:B8:4B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_HuZ3km216LiZ7snv9SO05S4S3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/ZpI02P_NoJdLzTrMQPmlXJ-v8kU.roa
Signing time:             Fri 23 Sep 2022 16:30:02 +0000
ROA not before:           Fri 23 Sep 2022 16:30:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204035
IP address blocks:        185.77.98.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:6b:2f:41:c0:a1:b4:1e:19:1f:0c:21:32:f9:83:c5:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc7b99de49b6d7a2e267bb27bfd48ed394b84b7c
        Validity
            Not Before: Sep 23 16:30:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=669234d8ffcda0974bcd3acc40f9a55c9faff245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7f:05:c0:42:93:ee:64:d5:78:41:8d:6e:8a:
                    25:df:54:05:aa:fb:f9:39:f8:fc:5f:e7:bb:51:fc:
                    1d:a5:e8:2d:c5:73:fc:7d:59:4f:76:70:71:7c:bb:
                    9f:88:57:93:9a:e1:7d:2d:fd:2d:25:02:50:89:57:
                    10:da:22:46:4b:c9:b6:9f:e3:45:62:2c:e2:ab:78:
                    19:02:b2:f2:ba:0d:1d:23:9f:f4:30:14:9a:ef:f7:
                    3d:c2:22:b3:76:59:75:a7:18:ba:32:55:32:97:fb:
                    c3:c9:5a:a8:0b:c7:d5:85:d7:99:2d:62:42:3c:70:
                    94:20:63:be:8d:65:3c:13:e1:18:4f:14:45:4c:a8:
                    2d:59:e6:f0:ef:8b:10:2c:26:4d:05:38:bb:06:d7:
                    a3:5e:89:a1:9d:4b:12:4e:86:8d:a0:e0:e2:e0:de:
                    0b:69:7a:e9:08:d2:50:46:87:08:3f:ef:f4:cc:9e:
                    ce:f8:65:1a:1c:4c:9d:a1:49:21:83:1b:e8:0b:22:
                    d0:d7:14:53:49:75:7c:9f:01:7a:de:6d:3f:94:ec:
                    18:50:d1:a9:54:a6:91:fe:bf:3d:4b:58:7f:cb:68:
                    37:be:13:7d:b7:5e:3e:9f:9e:e7:9a:36:97:8a:03:
                    ff:f6:75:e6:20:b8:70:df:26:8c:6c:5f:9b:aa:26:
                    9c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:92:34:D8:FF:CD:A0:97:4B:CD:3A:CC:40:F9:A5:5C:9F:AF:F2:45
            X509v3 Authority Key Identifier:
                keyid:FC:7B:99:DE:49:B6:D7:A2:E2:67:BB:27:BF:D4:8E:D3:94:B8:4B:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_HuZ3km216LiZ7snv9SO05S4S3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/ZpI02P_NoJdLzTrMQPmlXJ-v8kU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/_HuZ3km216LiZ7snv9SO05S4S3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.77.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:ac:30:cb:9a:61:59:e6:28:ea:8a:44:33:14:43:16:7e:bb:
         ca:a0:6a:08:c2:a1:30:44:2d:5a:3d:33:28:57:d9:d0:85:ce:
         c8:3f:e1:63:7d:ae:d8:8b:45:02:80:d1:30:a8:2a:c0:e1:f3:
         bb:8e:8d:3c:e5:2d:b2:71:2d:9b:43:f7:8e:33:56:24:f9:90:
         9d:ce:ea:ec:a1:aa:b1:74:ed:8d:05:6d:47:a3:8b:6a:3d:2f:
         b9:b6:ef:f9:99:dc:7a:e2:a6:02:8a:46:e2:c6:0e:5f:39:3b:
         c0:ff:bc:c0:6d:c8:5c:fe:04:44:6e:0d:ec:65:b0:5c:ba:5f:
         80:42:5e:d0:f6:6d:70:3c:fc:a6:9f:d2:70:b9:93:d4:63:81:
         af:76:2e:90:30:2f:f2:46:ce:fa:06:85:70:a5:51:fc:72:a6:
         81:01:4f:9f:fb:c9:3f:ba:1a:2e:2e:c7:40:2c:7c:2b:85:e5:
         c0:7c:e5:30:36:fb:d7:a7:2f:f9:81:3f:4a:de:e7:0d:47:ec:
         22:e2:98:71:f7:f9:2b:64:52:2e:79:30:61:5c:d8:75:de:0f:
         b1:84:1e:a3:6f:54:d9:85:fe:de:db:a4:4c:79:24:0c:dd:41:
         1d:c7:cc:13:46:be:f4:7a:fc:71:4a:98:97:c0:f6:bc:cb:b3:
         a7:f1:ba:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:51 2024 by rpki-client on console-ams.rpki-client.org