Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/ztQ-qc-8hcY9LJNYCxzdKLYYSeU.roa
File:                     ztQ-qc-8hcY9LJNYCxzdKLYYSeU.roa (raw, json)
Hash identifier:          6BeKr+1k3Srut8xR9/qCSETqkV3SEYq/Si3rSgoQinA=
Subject key identifier:   CE:D4:3E:A9:CF:BC:85:C6:3D:2C:93:58:0B:1C:DD:28:B6:18:49:E5
Certificate issuer:       /CN=f5150a23aac420feecabfc9b5baf9f024056333a
Certificate serial:       018CC72769AF1F23EFFB6DBFFF4F19614960
Authority key identifier: F5:15:0A:23:AA:C4:20:FE:EC:AB:FC:9B:5B:AF:9F:02:40:56:33:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9RUKI6rEIP7sq_ybW6-fAkBWMzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/ztQ-qc-8hcY9LJNYCxzdKLYYSeU.roa
Signing time:             Mon 01 Jan 2024 22:31:38 +0000
ROA not before:           Mon 01 Jan 2024 22:31:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     50083
IP address blocks:        185.77.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:27:69:af:1f:23:ef:fb:6d:bf:ff:4f:19:61:49:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5150a23aac420feecabfc9b5baf9f024056333a
        Validity
            Not Before: Jan  1 22:31:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ced43ea9cfbc85c63d2c93580b1cdd28b61849e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fa:c9:1f:94:87:2d:8d:02:81:6a:ce:99:9d:
                    20:60:fa:d4:f6:50:5b:5e:8a:d6:1f:f6:4d:ac:31:
                    a9:19:3f:2e:cc:6f:35:56:7e:bc:de:00:f6:9f:ba:
                    18:52:a3:23:8e:8c:1b:cc:1a:aa:77:1d:10:c6:5c:
                    4e:54:4d:db:71:7c:f1:7d:b0:70:4f:25:34:1d:b9:
                    6a:93:87:76:68:a0:da:cd:ef:25:14:7c:fe:25:9f:
                    9f:72:b2:f6:3a:66:28:47:69:ae:a8:1e:0e:c5:c0:
                    dc:30:91:6d:9d:c5:e8:b6:6b:98:d9:49:82:fc:8f:
                    5d:e7:ae:61:f4:cc:42:8a:6e:b8:68:cb:64:af:16:
                    93:de:f8:43:61:27:ea:59:74:ec:13:c5:1d:42:f4:
                    c3:ca:f2:2d:8a:a2:4b:70:b2:79:79:96:fb:77:74:
                    96:ea:a5:68:20:17:88:53:5c:af:30:45:fc:0d:b4:
                    f2:d4:29:2e:8b:0a:ac:34:45:7d:7a:5e:69:66:19:
                    86:20:53:70:7a:d0:e1:64:5d:cd:b1:6a:ee:09:0b:
                    13:8f:2a:1f:a1:c3:08:d8:8e:c5:6f:50:ff:14:18:
                    89:01:f5:e7:80:19:f7:a2:9f:da:e9:c6:3e:af:fc:
                    dd:67:f2:87:b9:37:c2:27:1a:7d:a6:5a:e2:b1:e5:
                    01:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D4:3E:A9:CF:BC:85:C6:3D:2C:93:58:0B:1C:DD:28:B6:18:49:E5
            X509v3 Authority Key Identifier:
                keyid:F5:15:0A:23:AA:C4:20:FE:EC:AB:FC:9B:5B:AF:9F:02:40:56:33:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RUKI6rEIP7sq_ybW6-fAkBWMzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/ztQ-qc-8hcY9LJNYCxzdKLYYSeU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/9RUKI6rEIP7sq_ybW6-fAkBWMzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.77.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:5b:71:cc:61:da:6e:2b:a7:59:e5:b7:0e:f6:ec:55:38:34:
         7b:ff:26:48:55:2d:47:1c:03:81:93:4a:07:24:31:e3:fb:5a:
         0c:1f:08:43:05:89:29:e1:95:89:83:17:a3:3d:0d:95:00:0c:
         71:e5:34:1c:37:80:cf:73:d7:05:c2:11:8b:21:0c:f6:9a:9c:
         d5:0c:d0:e3:d8:49:65:56:9b:84:41:ae:ed:27:8f:fc:53:eb:
         22:b3:d9:ec:b7:c7:64:61:dc:c4:e5:19:60:bd:5e:11:90:30:
         75:0b:5e:5f:e2:4c:ee:72:29:e9:f7:a7:ec:df:cd:bd:98:0d:
         b2:7b:eb:91:51:2a:d3:c1:d4:03:9e:16:c7:e6:e9:c5:c9:cf:
         76:d2:37:40:a8:ec:70:b2:d8:05:30:e7:91:92:1d:05:ba:21:
         21:9f:2c:19:fd:2d:a7:7d:3f:ea:77:3d:28:d5:1a:eb:50:23:
         2b:0f:a1:80:79:da:b0:79:b1:6c:ed:cc:d2:f0:dd:60:47:88:
         ac:36:c3:e1:60:c2:57:07:8b:a4:bd:c8:b9:43:55:19:8e:55:
         af:84:4b:8c:fa:94:cd:d1:99:16:35:ff:39:54:fc:03:51:8a:
         c6:71:b0:31:9c:48:4b:30:7f:48:2a:1d:bb:20:f9:9c:72:e3:
         4a:ba:fd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:56 2024 by rpki-client on console-ams.rpki-client.org