Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c71dd4-27ce-4925-9f8a-08ffa7c5ae03/1/zrAHuJIWfIDELMQE1NVagFnbOvE.roa
File:                     zrAHuJIWfIDELMQE1NVagFnbOvE.roa (raw, json)
Hash identifier:          PKjR0c8Kb/g1Hs9UUSgj7ClKJEutHfK5KvXic8q9oW8=
Subject key identifier:   CE:B0:07:B8:92:16:7C:80:C4:2C:C4:04:D4:D5:5A:80:59:DB:3A:F1
Certificate issuer:       /CN=cdf60ebe1ab3ef190fd17b308ef08a93dbaf1cd4
Certificate serial:       FBF50F
Authority key identifier: CD:F6:0E:BE:1A:B3:EF:19:0F:D1:7B:30:8E:F0:8A:93:DB:AF:1C:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zfYOvhqz7xkP0XswjvCKk9uvHNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/c71dd4-27ce-4925-9f8a-08ffa7c5ae03/1/zrAHuJIWfIDELMQE1NVagFnbOvE.roa
Signing time:             Fri 11 Feb 2022 12:53:19 +0000
ROA not before:           Fri 11 Feb 2022 12:53:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205499
IP address blocks:        185.188.9.0/24 maxlen: 24
                          185.188.10.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16512271 (0xfbf50f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdf60ebe1ab3ef190fd17b308ef08a93dbaf1cd4
        Validity
            Not Before: Feb 11 12:53:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ceb007b892167c80c42cc404d4d55a8059db3af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4e:43:e8:65:85:9a:7a:7c:89:b5:ad:69:b8:
                    08:ea:0c:8f:32:b4:ac:10:c4:32:5e:1a:eb:c8:73:
                    36:36:ed:da:a2:d6:79:a8:10:1d:d9:1d:12:2d:a5:
                    69:3c:3d:f1:7b:c1:90:cb:3a:56:b6:41:e1:d0:29:
                    2e:84:05:b3:0c:28:70:c2:0c:27:b3:6e:09:07:57:
                    43:c7:2c:33:a9:9e:2c:7b:8f:c7:47:86:fc:a2:76:
                    f9:85:e5:99:e5:0f:9e:c7:fb:9f:a3:fc:00:71:40:
                    3b:df:91:cd:c1:45:be:17:1e:03:64:fa:c0:49:f8:
                    fe:a7:65:f5:ef:ba:34:a8:25:52:7a:c6:97:d3:32:
                    0b:f1:2a:c7:e2:ac:70:7c:6a:e2:fb:1b:16:6e:d9:
                    c2:20:b5:01:7e:6f:d3:50:ed:f9:2a:42:16:10:aa:
                    ca:c6:00:6d:23:ee:a5:8e:5f:61:4e:d4:3a:4d:00:
                    77:5c:4a:1b:b7:0a:8a:b5:72:28:f8:79:3f:d4:7a:
                    f5:36:15:fc:1d:9a:65:06:72:39:ed:0d:20:1f:b4:
                    ea:58:40:a5:d7:9b:4a:e1:88:2c:a3:ce:6e:cf:7a:
                    e8:be:41:f2:83:51:97:b9:af:4d:4e:96:10:42:35:
                    d2:ac:4c:96:7c:a5:e1:6a:66:64:15:3b:03:36:12:
                    79:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B0:07:B8:92:16:7C:80:C4:2C:C4:04:D4:D5:5A:80:59:DB:3A:F1
            X509v3 Authority Key Identifier:
                keyid:CD:F6:0E:BE:1A:B3:EF:19:0F:D1:7B:30:8E:F0:8A:93:DB:AF:1C:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfYOvhqz7xkP0XswjvCKk9uvHNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c71dd4-27ce-4925-9f8a-08ffa7c5ae03/1/zrAHuJIWfIDELMQE1NVagFnbOvE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c71dd4-27ce-4925-9f8a-08ffa7c5ae03/1/zfYOvhqz7xkP0XswjvCKk9uvHNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.188.9.0-185.188.11.255

    Signature Algorithm: sha256WithRSAEncryption
         55:01:08:f1:75:15:4a:fc:16:d8:74:ed:62:d4:93:e8:eb:4f:
         03:87:8e:26:c8:5a:2d:82:56:47:ac:10:e7:f9:f6:4f:f5:95:
         cb:c8:e3:94:41:68:5c:31:77:af:68:27:34:52:55:b9:e4:a6:
         03:1f:1c:cb:32:89:4d:64:2e:2c:db:39:fc:31:8b:a4:a9:e0:
         3e:69:7a:38:45:fa:ac:a2:ca:72:69:06:51:92:19:28:42:e0:
         e5:ab:fd:e1:ea:3d:33:e7:d7:c4:ba:da:56:ca:39:e8:4d:a8:
         42:13:ab:c5:52:a1:eb:16:a6:5c:a7:72:cb:4e:f9:5c:f1:3d:
         e8:14:00:31:e9:78:66:be:c2:ad:ce:16:dc:dd:e3:9f:42:65:
         fc:52:da:82:d5:70:c8:d7:61:59:de:fe:d2:35:37:cf:37:2f:
         43:53:eb:34:3f:c6:13:10:05:f2:a8:94:e3:1d:66:bd:0a:bb:
         0d:5a:b5:30:18:5a:2d:1c:01:70:20:93:43:57:54:b9:24:27:
         10:96:41:f4:9d:17:44:79:a4:34:a4:9f:b1:41:4b:a7:ed:55:
         11:1e:cb:c6:c8:ce:37:1f:8d:12:3d:22:16:27:0b:c7:fe:49:
         31:a5:b7:4c:a3:17:9a:fa:7e:8b:70:ae:2e:55:78:8d:c2:45:
         3e:c2:63:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:43 2024 by rpki-client on console-ams.rpki-client.org