Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/zLwirpPPPHpGa-eb50umLPlWEQA.roa
File:                     zLwirpPPPHpGa-eb50umLPlWEQA.roa (raw, json)
Hash identifier:          j0StCIiiQScHOSPox7yZ/0J35W+sJ9TqYUe0hb+Ba9I=
Subject key identifier:   CC:BC:22:AE:93:CF:3C:7A:46:6B:E7:9B:E7:4B:A6:2C:F9:56:11:00
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       01938494E37EF4060570DA96667BC695015E
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/zLwirpPPPHpGa-eb50umLPlWEQA.roa
Signing time:             Sun 01 Dec 2024 23:36:10 +0000
ROA not before:           Sun 01 Dec 2024 23:36:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215238
IP address blocks:        83.147.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:84:94:e3:7e:f4:06:05:70:da:96:66:7b:c6:95:01:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Dec  1 23:36:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ccbc22ae93cf3c7a466be79be74ba62cf9561100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7c:b7:8c:7a:f6:27:8e:cf:b3:36:f4:69:7f:
                    90:d9:03:b4:ee:d0:68:b7:99:aa:65:c8:5b:f8:bc:
                    30:a4:2a:fd:d4:41:80:10:95:c3:7d:6e:4a:c9:39:
                    bc:0f:2d:b2:28:bc:0f:db:bc:f7:3b:b7:6d:d2:70:
                    3c:39:6e:8c:e7:83:24:e0:35:d0:78:e4:de:63:e2:
                    04:dd:d6:39:ee:72:77:f0:5e:d5:91:6b:62:3b:82:
                    88:1d:b8:20:8a:2f:ad:19:03:a5:fb:f6:34:f2:d2:
                    7f:97:cd:af:f4:3c:14:17:db:89:ca:f0:d0:8d:10:
                    49:a1:a7:44:c5:e5:ba:43:f0:5a:29:8e:4c:e9:2a:
                    61:0c:10:e9:6d:7e:f6:e8:1b:7a:eb:b6:1c:d7:0d:
                    1c:ce:73:dd:ca:84:27:bf:46:fa:ec:e0:a5:d1:91:
                    5e:9f:b7:ad:09:52:ab:07:c2:b7:53:5f:9a:d6:60:
                    e6:9b:6b:6c:24:1e:ef:9b:e5:ef:34:2a:06:a6:35:
                    a6:eb:74:b0:e3:c1:f4:10:22:2e:e5:58:f7:ca:1a:
                    a0:f1:28:0d:ed:ed:19:52:a8:87:e0:07:10:ea:79:
                    f3:d5:4a:84:cd:68:18:9a:35:5e:f1:9b:1f:ec:eb:
                    44:59:fa:0d:2b:41:e2:af:56:c1:2f:b2:a4:0c:5f:
                    7f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BC:22:AE:93:CF:3C:7A:46:6B:E7:9B:E7:4B:A6:2C:F9:56:11:00
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/zLwirpPPPHpGa-eb50umLPlWEQA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:dc:72:be:b6:e5:b0:0b:3f:1f:12:c8:95:8b:01:58:71:eb:
         e4:81:91:38:3b:e3:0f:18:da:39:25:03:b2:50:24:16:d8:6e:
         52:6d:a1:55:ca:c0:03:10:8f:ae:db:8b:22:83:75:44:86:b7:
         83:d4:ae:74:77:a0:54:89:23:26:99:f4:5a:d5:f2:65:8d:51:
         b2:ac:01:4c:90:2f:b2:08:7e:e6:47:cb:41:44:e9:c6:77:b2:
         92:7b:48:14:e6:c7:fe:e9:e2:29:67:0f:ac:f9:cb:c1:de:1c:
         bd:0e:a2:e5:8d:69:4c:ec:72:31:b3:d6:53:2f:5a:7d:7f:8c:
         f8:53:9c:8b:fe:6f:56:e8:71:90:f6:23:a4:04:b8:f1:33:90:
         2c:71:e9:32:69:b8:bb:0f:01:8c:a4:c2:67:04:a7:a8:90:45:
         92:4a:8e:81:6a:19:86:f0:f9:73:86:3e:c6:9c:4b:c0:50:b8:
         84:d5:03:98:66:29:0d:a7:52:d0:09:ae:10:0b:a5:dc:bd:07:
         88:08:57:00:9c:26:de:97:5a:33:38:15:d6:d6:1c:7a:ea:fb:
         99:5e:63:b6:69:5d:d4:6b:ad:e5:73:ed:b0:ae:a0:b4:4a:66:
         49:97:c6:62:ad:f1:06:35:7e:4e:43:82:b5:56:0e:ac:a1:b9:
         e3:f0:02:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:31 2024 by rpki-client on console.sobornost.net