Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/63ff3a-3431-4335-ae04-498819200201/1/2v2cNsvlAjA9n59XX1HOiQtJYew.roa
File:                     2v2cNsvlAjA9n59XX1HOiQtJYew.roa (raw, json)
Hash identifier:          jlnBzns31wTyEpS6hjvgs/nCMAf4H/mHXojRk1AVZ/I=
Subject key identifier:   DA:FD:9C:36:CB:E5:02:30:3D:9F:9F:57:5F:51:CE:89:0B:49:61:EC
Certificate issuer:       /CN=ce8ae49ff8becf22fb2576159ff4d73f49bc16be
Certificate serial:       121C4735
Authority key identifier: CE:8A:E4:9F:F8:BE:CF:22:FB:25:76:15:9F:F4:D7:3F:49:BC:16:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zorkn_i-zyL7JXYVn_TXP0m8Fr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/63ff3a-3431-4335-ae04-498819200201/1/2v2cNsvlAjA9n59XX1HOiQtJYew.roa
Signing time:             Sat 01 Jan 2022 13:07:11 +0000
ROA not before:           Sat 01 Jan 2022 13:07:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44598
IP address blocks:        185.150.92.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303843125 (0x121c4735)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce8ae49ff8becf22fb2576159ff4d73f49bc16be
        Validity
            Not Before: Jan  1 13:07:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dafd9c36cbe502303d9f9f575f51ce890b4961ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7a:a3:63:9c:6a:4f:24:00:67:9b:cc:cf:e3:
                    58:eb:5e:a4:7b:e1:ae:c0:33:8d:27:8f:e4:85:7a:
                    cd:2a:14:01:12:89:4c:31:1f:1d:e6:ee:3b:b5:89:
                    30:e3:74:34:c7:a9:be:4c:5c:78:15:b8:7e:71:bc:
                    d2:9c:4b:98:b0:e4:e3:ef:ed:cf:bf:24:b7:fe:a9:
                    c4:a8:49:0a:83:47:44:9d:c8:72:56:fe:95:ae:9f:
                    85:f0:eb:ca:8f:7b:e9:5f:be:42:a3:2e:e3:fd:15:
                    f1:a9:78:5a:5b:ea:f7:5b:43:9c:c9:a8:62:d4:96:
                    94:97:af:36:d8:5a:b5:7d:5c:6a:be:37:24:20:c9:
                    e5:88:d0:c9:1f:24:4b:0c:8c:51:07:8c:d1:d1:1b:
                    a7:22:6f:1f:f2:c9:17:47:67:be:55:6c:da:1b:b9:
                    25:5c:8e:55:7e:f0:0b:28:7d:8b:43:45:22:ed:41:
                    41:bd:f3:41:ce:4f:1d:11:85:d8:8d:91:ba:d6:26:
                    21:b6:a2:8d:34:c9:0f:cc:f6:5e:59:88:1d:b0:e1:
                    c1:83:8a:08:fb:66:d8:f5:a4:c1:ea:a8:1b:b6:8c:
                    4a:9f:93:fb:7d:fa:50:69:3d:c2:bf:55:a3:a7:e2:
                    b9:fa:ab:0c:92:da:13:97:09:b4:7f:cb:a9:64:ee:
                    ef:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FD:9C:36:CB:E5:02:30:3D:9F:9F:57:5F:51:CE:89:0B:49:61:EC
            X509v3 Authority Key Identifier:
                keyid:CE:8A:E4:9F:F8:BE:CF:22:FB:25:76:15:9F:F4:D7:3F:49:BC:16:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zorkn_i-zyL7JXYVn_TXP0m8Fr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/63ff3a-3431-4335-ae04-498819200201/1/2v2cNsvlAjA9n59XX1HOiQtJYew.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/63ff3a-3431-4335-ae04-498819200201/1/zorkn_i-zyL7JXYVn_TXP0m8Fr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.150.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d4:f1:0f:67:aa:f8:12:a4:01:70:b5:9c:8b:4c:19:0a:a0:ed:
         93:69:1e:13:6e:d8:27:a2:89:83:6e:5a:d2:c6:64:a4:f2:37:
         47:0b:f3:c3:70:f2:f3:a3:60:5e:51:f7:e5:a8:0e:c8:02:c4:
         e5:ef:17:94:ac:f7:61:de:c3:68:37:f1:b7:9e:41:cb:21:fe:
         f8:c6:90:1d:67:91:69:2c:b1:30:50:4e:88:6a:ed:c3:41:78:
         67:b1:a6:d0:8b:78:f2:22:b7:c2:77:63:36:b6:15:4a:f0:b5:
         65:ff:b2:92:66:6a:85:2c:47:93:94:61:b3:57:ba:e8:c1:fe:
         b4:d6:af:79:14:de:80:9d:dc:09:12:e5:52:22:76:e3:c5:0b:
         4e:94:0b:9b:77:ed:d5:c0:f4:21:01:32:32:7f:50:4f:77:52:
         cf:9f:d7:15:f0:33:18:0d:4d:b3:64:d2:11:dc:1b:57:eb:01:
         fd:8a:92:6d:47:5c:19:8b:5e:0d:22:f3:bb:5e:4a:43:75:84:
         13:07:20:af:ae:4a:4c:22:a0:4d:2c:4e:e0:59:32:84:42:fc:
         74:42:c1:09:0e:d9:04:a6:11:82:2a:cd:32:a8:f8:b5:6e:da:
         73:19:b3:c7:8d:2b:ad:7d:4b:fe:e3:ef:7f:6d:06:f8:f8:92:
         5f:c5:56:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:46 2023 by rpki-client on console.sobornost.net