Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1327e9-6a8e-4d90-8fcd-6c8c3c041629/1/92gBJgpwr_471lzDIcmnX2RQZXc.roa
File:                     92gBJgpwr_471lzDIcmnX2RQZXc.roa (raw, json)
Hash identifier:          z3wZpKp8Rzj6OF0R7e0HmfpTYDPs7Thllmqc14gufLY=
Subject key identifier:   F7:68:01:26:0A:70:AF:FE:3B:D6:5C:C3:21:C9:A7:5F:64:50:65:77
Certificate issuer:       /CN=b4a09c900a8578bd029d04de93a7ff3047d38f83
Certificate serial:       073335
Authority key identifier: B4:A0:9C:90:0A:85:78:BD:02:9D:04:DE:93:A7:FF:30:47:D3:8F:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tKCckAqFeL0CnQTek6f_MEfTj4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/1327e9-6a8e-4d90-8fcd-6c8c3c041629/1/92gBJgpwr_471lzDIcmnX2RQZXc.roa
Signing time:             Thu 27 Jan 2022 09:26:28 +0000
ROA not before:           Thu 27 Jan 2022 09:26:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15626
IP address blocks:        94.143.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471861 (0x73335)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4a09c900a8578bd029d04de93a7ff3047d38f83
        Validity
            Not Before: Jan 27 09:26:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f76801260a70affe3bd65cc321c9a75f64506577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:64:41:6c:e6:4b:28:de:5f:5d:fc:b4:05:d3:
                    71:6d:58:a5:d9:35:98:da:1f:a6:fd:23:8e:79:9d:
                    bd:35:c9:eb:c1:26:d7:6c:04:db:98:10:b1:49:6f:
                    81:87:66:22:4c:da:c3:27:50:80:be:ad:ce:e5:a4:
                    6d:9a:0e:5f:3a:50:b9:e8:d4:6e:f8:f7:cf:15:a2:
                    d0:5f:1e:12:46:d3:3a:5f:22:20:84:a0:39:73:93:
                    52:3d:24:b3:7e:32:48:8d:02:47:c0:62:bd:3d:95:
                    f5:23:af:16:75:ee:54:35:70:41:33:7e:df:39:48:
                    58:bd:a9:9c:4d:b3:ea:c9:cc:cf:a4:c3:dd:e4:a7:
                    20:0b:9f:1e:fe:c6:c8:ee:7e:93:ae:ad:be:4d:08:
                    6a:a7:ec:94:89:3a:67:e2:16:15:59:66:5f:1d:25:
                    12:03:45:76:d1:17:0d:30:ac:16:02:62:fa:69:22:
                    65:44:bc:c5:73:71:54:21:85:c8:8e:be:92:3c:3f:
                    31:a0:e8:59:51:0e:83:a8:ae:cf:fd:a8:90:0b:a3:
                    92:21:9b:7d:70:46:2d:0d:16:d0:e2:66:aa:ed:95:
                    e7:f0:bb:2a:8e:fe:cb:0b:df:ce:60:aa:7e:d3:36:
                    83:8e:6c:4f:85:bf:d6:69:c2:a3:4e:5f:35:55:49:
                    f6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:68:01:26:0A:70:AF:FE:3B:D6:5C:C3:21:C9:A7:5F:64:50:65:77
            X509v3 Authority Key Identifier:
                keyid:B4:A0:9C:90:0A:85:78:BD:02:9D:04:DE:93:A7:FF:30:47:D3:8F:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKCckAqFeL0CnQTek6f_MEfTj4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1327e9-6a8e-4d90-8fcd-6c8c3c041629/1/92gBJgpwr_471lzDIcmnX2RQZXc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1327e9-6a8e-4d90-8fcd-6c8c3c041629/1/tKCckAqFeL0CnQTek6f_MEfTj4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.143.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:6f:7f:72:06:fa:c6:52:21:b7:cc:42:87:c3:3a:96:96:86:
         65:ba:b1:00:d2:0a:f6:e5:7f:ac:3f:86:99:fc:1b:6d:02:45:
         ba:1c:06:35:bb:34:11:50:92:e5:58:4e:9f:7e:b9:7b:b2:9c:
         2c:90:24:e0:25:b0:74:b1:c7:35:00:09:fb:41:62:70:ef:7a:
         2b:87:34:a9:96:5a:f3:5a:71:a4:cc:4b:26:e1:c6:9f:1e:1a:
         fc:65:f8:11:cd:dd:05:d0:c4:ed:96:de:41:e7:25:3b:3e:15:
         7a:00:b9:e3:c3:fe:ab:f1:e6:70:4b:3e:43:e4:ca:f6:3e:39:
         bf:91:6d:81:03:36:fc:4e:e6:26:ec:9d:5a:bd:82:85:97:1c:
         5c:c7:26:7f:2c:ab:42:79:49:75:85:7b:25:39:af:93:ab:4f:
         d5:1a:16:b1:ca:ad:d5:36:f2:09:29:e4:8e:2a:f7:da:62:de:
         4c:bb:8e:f2:34:56:ee:7c:2f:b7:bf:8e:55:26:d5:3e:b7:3d:
         52:53:70:d0:17:aa:f0:31:5a:e3:3a:d0:43:eb:a5:75:0b:5b:
         a7:b9:e9:71:c4:5c:e1:5f:60:10:62:e6:cf:30:f2:1c:be:1d:
         77:6d:3e:97:a7:01:78:6a:73:54:e1:71:9d:fc:9f:50:be:b0:
         50:70:04:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:08 2024 by rpki-client on console-fra.rpki-client.org