Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/qf9fCQ4hGwdNo6Hr49U5s8ntJks.roa
File:                     qf9fCQ4hGwdNo6Hr49U5s8ntJks.roa (raw, json)
Hash identifier:          sZNm967l4+30xgPtwlq3uP2E256w+DoUihsa6UFUFfI=
Subject key identifier:   A9:FF:5F:09:0E:21:1B:07:4D:A3:A1:EB:E3:D5:39:B3:C9:ED:26:4B
Certificate issuer:       /CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
Certificate serial:       018CC94E3F188EAEE0C32CD00581FD9AA0A4
Authority key identifier: 23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/qf9fCQ4hGwdNo6Hr49U5s8ntJks.roa
Signing time:             Tue 02 Jan 2024 08:33:17 +0000
ROA not before:           Tue 02 Jan 2024 08:33:17 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     51616
IP address blocks:        92.119.50.0/24 maxlen: 24
                          92.119.48.0/23 maxlen: 23
                          92.119.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4e:3f:18:8e:ae:e0:c3:2c:d0:05:81:fd:9a:a0:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
        Validity
            Not Before: Jan  2 08:33:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a9ff5f090e211b074da3a1ebe3d539b3c9ed264b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fd:2a:73:51:99:f7:35:d6:88:66:0c:ab:f1:
                    ef:ad:94:26:c8:d8:b5:e8:6c:55:52:fa:88:1c:a3:
                    08:4d:e1:38:8c:6a:20:5a:39:60:ae:15:a4:7d:cd:
                    56:31:ea:e4:af:d6:9f:27:bf:19:6c:bf:ee:6e:33:
                    53:64:6f:e3:0a:3a:de:b2:b3:e9:7c:53:d6:4e:a7:
                    8c:b1:7a:13:36:a8:a5:ab:a6:26:41:58:3b:19:84:
                    f8:a2:93:f8:b6:17:15:bb:5e:50:94:0c:a1:05:75:
                    c3:3a:de:b3:5a:d6:11:c1:3d:86:76:00:69:d5:8c:
                    8d:d5:91:43:17:25:89:7d:cd:a4:9d:ba:06:58:1b:
                    56:b1:be:4e:bd:0b:84:69:a0:7c:42:da:d2:ed:08:
                    fe:4e:76:46:20:3c:7c:7a:8c:50:1f:44:c5:6c:70:
                    34:68:cc:3e:56:3f:a4:bd:ce:0b:57:68:24:db:b3:
                    f5:4c:cc:93:4a:9a:40:f7:dd:ad:87:c7:2c:4d:aa:
                    89:d5:ae:3b:0c:f4:33:61:62:eb:cc:e3:81:dd:79:
                    20:2f:c1:69:8c:09:2f:19:f0:be:6f:90:dc:91:af:
                    45:dc:0d:23:4e:16:c1:cb:7a:67:ea:89:18:dc:8d:
                    0d:bc:db:61:d3:6b:ee:46:fa:61:83:ec:1a:1c:0f:
                    d7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FF:5F:09:0E:21:1B:07:4D:A3:A1:EB:E3:D5:39:B3:C9:ED:26:4B
            X509v3 Authority Key Identifier:
                keyid:23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/qf9fCQ4hGwdNo6Hr49U5s8ntJks.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:f3:4d:20:f6:10:8d:4a:42:f6:98:5f:ca:95:70:df:a4:c4:
         57:f4:37:f6:78:e2:b1:10:ef:c0:49:27:44:24:b2:1d:40:4b:
         11:40:28:31:25:11:ba:90:4d:8c:30:b2:91:20:f9:34:d2:98:
         69:e0:c2:c5:40:e3:01:b5:52:e7:11:ca:5c:3f:c2:36:23:1c:
         fb:b9:ce:bc:89:5a:af:96:f6:81:1f:b9:b2:3c:d8:4e:d1:b2:
         17:bf:fd:1f:2f:5a:a0:ec:eb:99:cf:f4:8e:12:a5:dd:a0:43:
         0a:d8:a5:ad:ec:f7:11:40:ef:dc:42:2a:0c:10:c3:ca:42:38:
         55:2c:6e:48:a5:5f:f5:e1:ca:5c:c7:2e:9f:2b:9d:06:2d:0e:
         18:21:ac:9b:62:f3:c9:49:93:05:a8:63:2c:5a:a9:3a:e0:eb:
         f5:0d:f0:42:ba:36:a5:a3:fc:3a:19:1f:19:d3:6c:e5:93:34:
         9e:cc:24:d1:44:37:2b:a7:05:af:88:57:8a:95:ad:32:ed:6e:
         4c:ae:e0:c7:2f:9c:82:e4:df:3b:a1:ce:06:76:62:ac:99:1e:
         93:a3:a3:e2:f4:5a:d3:a2:5a:5a:35:c0:48:91:26:50:4c:3a:
         cf:59:38:e1:7f:8c:a6:5e:82:7c:07:90:56:b8:77:21:b1:0c:
         6d:68:0b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:13 2024 by rpki-client on console.sobornost.net