Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kp-8zE0mx0zA5KGEjxOIGNBJTTg.roa
File:                     kp-8zE0mx0zA5KGEjxOIGNBJTTg.roa (raw, json)
Hash identifier:          9P0p1N8xjT8S/neA7UOdm2oTVACd2AZFFP7oQcTf2W4=
Subject key identifier:   92:9F:BC:CC:4D:26:C7:4C:C0:E4:A1:84:8F:13:88:18:D0:49:4D:38
Certificate issuer:       /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial:       0AA08CC7
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kp-8zE0mx0zA5KGEjxOIGNBJTTg.roa
Signing time:             Mon 04 Jul 2022 19:59:18 +0000
ROA not before:           Mon 04 Jul 2022 19:59:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        194.124.41.0/24 maxlen: 24
                          91.245.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178293959 (0xaa08cc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
        Validity
            Not Before: Jul  4 19:59:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=929fbccc4d26c74cc0e4a1848f138818d0494d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3d:1f:ab:ba:ef:55:44:a4:22:69:54:d0:df:
                    51:14:59:be:e2:94:52:fe:a5:93:84:28:5e:33:36:
                    5c:cc:90:bd:eb:c0:c0:2b:03:3a:a1:66:8d:83:0c:
                    d9:a8:a4:38:6a:f6:2a:97:40:91:51:76:b1:9b:e9:
                    2b:e0:27:8a:04:03:08:d6:45:ba:0f:21:98:6c:7c:
                    8b:25:c7:ca:34:70:af:2e:2e:b4:03:d9:ed:71:b1:
                    c4:40:c0:a7:44:0d:51:2f:44:1c:6b:46:f2:ab:b0:
                    56:c6:3a:b2:c8:e6:d3:bf:12:0c:79:38:f7:91:5b:
                    a1:22:da:f4:e8:ce:b1:54:b8:a5:d4:b7:12:e8:ee:
                    9a:50:ec:b9:e7:5d:50:1e:ea:77:15:cc:93:5d:c4:
                    e1:53:63:94:15:c8:6d:06:92:1c:8f:de:35:5f:53:
                    80:50:21:84:f7:dd:a0:e4:68:6e:83:c5:3d:eb:58:
                    6f:ae:c2:e1:32:fb:3e:08:07:82:c3:52:67:d0:33:
                    a7:53:44:b1:6e:2f:af:5a:46:51:61:6a:23:f7:19:
                    40:97:3c:f5:0d:d8:33:7d:f8:bf:1b:c7:b1:f9:d4:
                    b9:53:6d:fc:08:0f:ff:ac:fb:6b:ee:40:55:19:3b:
                    f3:30:55:9e:12:54:f7:c2:e4:6d:e2:96:bf:b8:fd:
                    3e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9F:BC:CC:4D:26:C7:4C:C0:E4:A1:84:8F:13:88:18:D0:49:4D:38
            X509v3 Authority Key Identifier:
                keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kp-8zE0mx0zA5KGEjxOIGNBJTTg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.245.239.0/24
                  194.124.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:5e:45:b6:a3:da:ac:7e:62:fd:b7:12:1c:46:75:b5:4c:d9:
         fe:e0:51:a0:fe:98:a1:f2:58:95:61:5d:bf:37:ab:d1:bb:b4:
         85:d5:e6:01:f6:7a:52:3f:b1:7a:f9:93:50:50:09:39:a4:ad:
         ca:42:df:db:ca:5a:37:13:9a:5e:9e:b1:4d:43:c9:f3:95:be:
         1f:5e:e1:b9:d1:3a:bb:33:11:8c:9a:92:57:7e:10:00:ea:2c:
         7d:4f:c5:a5:4e:24:da:a2:e6:e0:78:ef:49:92:96:24:d3:25:
         09:d0:1b:18:08:bf:f0:5d:a2:9e:b4:7d:71:1b:d8:3e:05:0f:
         70:b1:4c:ff:95:8b:8b:e7:d9:3d:70:95:d5:aa:c3:5e:90:d6:
         25:48:b0:e8:1f:7b:b2:3f:66:18:e8:b8:f8:ec:de:6d:cd:2e:
         50:54:4c:2d:5f:7e:e0:41:81:76:11:35:e9:59:95:c2:4a:89:
         a1:d4:8c:da:fb:8f:f8:3f:bf:4a:97:42:9a:57:c2:ee:2c:13:
         b7:ca:00:a5:1b:a8:29:a7:fe:8b:4b:b7:f2:51:ad:3f:6b:c4:
         6c:81:a8:c2:4c:b3:30:5a:21:13:1c:c2:44:ba:bc:1b:ca:2a:
         06:41:61:7e:81:19:5a:46:b2:1f:48:41:5e:40:b0:c9:cf:1f:
         2b:d2:20:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:17 2024 by rpki-client on console-ams.rpki-client.org