Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/zZ-VPe0ssPzegb4Hwi2nr_qj5SA.roa
File:                     zZ-VPe0ssPzegb4Hwi2nr_qj5SA.roa (raw, json)
Hash identifier:          YL4yn2El795j8ZuU8lnoBYTMJaHDvHiD/sh44iBLpiQ=
Subject key identifier:   CD:9F:95:3D:ED:2C:B0:FC:DE:81:BE:07:C2:2D:A7:AF:FA:A3:E5:20
Certificate issuer:       /CN=fb50683383f8f3836633f4d4230ada73ccb215cd
Certificate serial:       04634D
Authority key identifier: FB:50:68:33:83:F8:F3:83:66:33:F4:D4:23:0A:DA:73:CC:B2:15:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-1BoM4P484NmM_TUIwrac8yyFc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/zZ-VPe0ssPzegb4Hwi2nr_qj5SA.roa
Signing time:             Thu 03 Mar 2022 13:45:13 +0000
ROA not before:           Thu 03 Mar 2022 13:45:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7029
IP address blocks:        91.241.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287565 (0x4634d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb50683383f8f3836633f4d4230ada73ccb215cd
        Validity
            Not Before: Mar  3 13:45:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cd9f953ded2cb0fcde81be07c22da7affaa3e520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c9:18:56:c2:90:1b:a8:b3:9c:a7:20:ab:97:
                    12:5d:ca:b5:d6:54:3a:4e:3e:42:f2:d7:c8:88:32:
                    46:f3:97:ea:b5:9a:c3:b3:d8:2d:47:70:73:58:75:
                    8d:b1:26:2e:76:a5:e0:d1:1b:b3:60:7d:94:4a:1b:
                    96:a0:7c:bd:51:8f:5e:44:2a:6d:5d:e8:bd:41:5e:
                    d5:0e:b9:5d:dd:00:83:ea:41:e8:2b:37:f1:66:57:
                    98:14:16:53:3f:9d:c0:4d:68:5d:ce:7e:a4:6a:1e:
                    cf:bd:1b:dd:d7:30:3e:13:9d:2f:ee:63:82:e1:be:
                    98:a2:ae:ff:54:01:9c:2c:73:ef:82:45:47:81:25:
                    a8:1e:a9:96:af:03:f4:d7:08:7d:b7:e9:22:9a:c4:
                    10:7b:9b:f9:25:c5:69:cc:a0:e5:16:c0:39:04:2a:
                    e0:ec:17:51:20:74:4d:8c:69:9f:bc:60:85:1f:57:
                    7e:02:c5:10:c7:3d:34:15:d6:0e:b0:64:eb:e7:e3:
                    79:62:ff:82:dd:83:69:ae:57:08:c4:24:40:19:ed:
                    cf:88:c8:33:ef:7d:01:53:d6:e5:fb:28:47:0b:ed:
                    bc:13:64:ee:2b:f5:06:d5:ee:e2:30:68:71:7c:32:
                    8c:b8:9d:36:ae:29:3d:c1:a1:f3:30:f8:c3:d9:71:
                    28:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9F:95:3D:ED:2C:B0:FC:DE:81:BE:07:C2:2D:A7:AF:FA:A3:E5:20
            X509v3 Authority Key Identifier:
                keyid:FB:50:68:33:83:F8:F3:83:66:33:F4:D4:23:0A:DA:73:CC:B2:15:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1BoM4P484NmM_TUIwrac8yyFc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/zZ-VPe0ssPzegb4Hwi2nr_qj5SA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/1-1BoM4P484NmM_TUIwrac8yyFc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.241.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:5d:2c:90:84:36:fb:7b:39:09:d1:59:6c:b1:bb:08:19:b3:
         84:62:04:b7:50:0f:cc:70:7e:ae:32:b5:fa:71:01:ab:ea:12:
         4b:bd:c3:82:14:46:52:61:db:f9:ca:1a:87:fb:33:5b:eb:e4:
         53:10:e9:dc:bf:af:d2:a3:c0:a6:64:a8:16:0a:3f:3f:a0:d7:
         0e:57:be:76:48:b8:6e:da:5e:80:ee:1a:15:1f:ce:a6:a7:06:
         99:33:16:8c:99:83:c7:07:37:aa:5f:dc:a6:a9:ce:84:24:a7:
         c8:e9:7a:93:bf:54:c4:56:b4:0d:d3:93:0f:f5:87:63:52:ab:
         e7:45:e3:66:28:b2:f3:a1:de:e5:da:62:fb:34:cb:29:39:ef:
         1e:f0:0a:3e:6b:07:b0:7f:a3:f5:19:d4:2f:f8:ab:90:8b:be:
         9a:49:9c:26:7c:49:e6:29:83:e0:cf:c0:84:a1:97:92:10:ea:
         9c:18:8f:af:e8:cd:a6:ee:59:ed:aa:11:a5:3e:58:15:be:af:
         bb:d0:6d:03:61:27:a0:f0:5b:71:fe:6b:d6:d4:17:23:17:86:
         74:22:9f:57:a9:6b:fa:6a:cc:56:4e:08:e7:85:c5:ed:ba:42:
         01:c3:10:b8:c0:d4:e5:10:ce:2c:7e:93:37:d6:4d:f7:d6:bf:
         46:fb:cc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:34 2023 by rpki-client on console.sobornost.net