Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/i0p5fJwsPxs0CyRd6lZ1KGHQEhA.roa
File:                     i0p5fJwsPxs0CyRd6lZ1KGHQEhA.roa (raw, json)
Hash identifier:          OKAVJGOhpAC/e3pz4q3vGJBcy1VscYwnrCZLHMt+vpg=
Subject key identifier:   8B:4A:79:7C:9C:2C:3F:1B:34:0B:24:5D:EA:56:75:28:61:D0:12:10
Certificate issuer:       /CN=a4e786e4809373c1985455858c6b02b30a71ad1b
Certificate serial:       0C0D3BEC
Authority key identifier: A4:E7:86:E4:80:93:73:C1:98:54:55:85:8C:6B:02:B3:0A:71:AD:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOeG5ICTc8GYVFWFjGsCswpxrRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/i0p5fJwsPxs0CyRd6lZ1KGHQEhA.roa
Signing time:             Mon 30 May 2022 09:43:14 +0000
ROA not before:           Mon 30 May 2022 09:43:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47692
IP address blocks:        91.151.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202193900 (0xc0d3bec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e786e4809373c1985455858c6b02b30a71ad1b
        Validity
            Not Before: May 30 09:43:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8b4a797c9c2c3f1b340b245dea56752861d01210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9e:73:20:a5:d7:61:c1:e1:99:50:94:a2:92:
                    29:8d:18:cb:9f:9b:13:66:fb:0f:c2:2d:7e:22:fe:
                    86:08:7d:e7:ee:a9:58:0d:57:73:5f:a9:1e:b1:f9:
                    10:31:2b:8d:e2:37:4e:d2:04:1f:55:c5:b9:00:a3:
                    c7:94:e3:b6:6d:dd:f9:63:e5:f6:84:a7:e4:65:7f:
                    71:8c:58:6d:c7:4b:d2:c0:7e:73:cb:e3:71:ab:dc:
                    8f:07:cf:ee:7d:bd:3c:86:9d:b1:d8:1b:c4:6d:77:
                    cd:72:de:41:d6:91:52:f2:24:9a:25:6b:a6:e3:08:
                    ea:5e:e9:42:96:a8:e2:e2:ef:02:8f:fd:33:d5:b0:
                    79:37:3b:99:50:5f:74:00:c2:5c:b0:a1:78:b0:b0:
                    c9:13:44:42:54:90:79:96:8f:22:e4:fb:7b:ff:4f:
                    b7:a5:b0:85:48:e6:a0:88:4e:c8:61:d6:fa:35:97:
                    93:97:51:05:a3:38:9e:fd:a0:d4:90:28:c6:25:a2:
                    0e:08:c5:5a:e3:45:2b:f7:a2:20:44:ec:a4:bf:2f:
                    94:1b:22:dd:f9:85:c4:01:f6:3e:5b:76:a4:5c:66:
                    a5:6b:b8:61:ab:22:d0:4a:4c:de:f5:2f:d9:18:95:
                    a6:54:e9:4c:a2:a5:36:d5:12:ef:e2:04:09:8d:e7:
                    2d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4A:79:7C:9C:2C:3F:1B:34:0B:24:5D:EA:56:75:28:61:D0:12:10
            X509v3 Authority Key Identifier:
                keyid:A4:E7:86:E4:80:93:73:C1:98:54:55:85:8C:6B:02:B3:0A:71:AD:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeG5ICTc8GYVFWFjGsCswpxrRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/i0p5fJwsPxs0CyRd6lZ1KGHQEhA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/pOeG5ICTc8GYVFWFjGsCswpxrRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.151.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:63:4c:ad:b1:8f:47:aa:48:d6:9e:cd:e1:69:70:6c:2d:09:
         f3:95:a0:4c:db:d1:d5:5b:1a:23:cc:09:30:be:b3:6b:49:f0:
         a3:f0:f9:75:5a:94:25:da:a0:08:5d:1a:fc:8d:54:af:04:bd:
         a0:46:37:6c:27:1b:7e:c5:64:6c:99:57:8d:70:49:3e:78:34:
         1b:98:1c:c6:ca:66:b4:b6:a8:f8:a4:c8:d0:c4:f9:f8:5a:c2:
         89:21:a9:10:89:4e:d9:c9:a9:fa:46:86:83:e7:4a:98:08:cc:
         3c:1b:93:de:bc:b8:93:81:60:c2:41:ba:48:fb:89:c4:9e:43:
         a3:8f:cf:81:f3:04:b0:a1:e5:7e:fc:f8:80:d7:84:3e:c0:22:
         87:cb:5a:83:48:a0:41:73:47:e8:ba:09:6b:cd:ee:eb:43:b3:
         e4:35:fc:cd:66:a2:a3:ea:98:ca:cc:05:61:2c:98:6d:35:4e:
         a1:7a:83:30:27:32:ac:6c:b1:46:aa:3c:b4:40:2d:6d:b2:79:
         3a:52:cc:46:a9:e4:4f:90:b9:05:b7:9e:3b:a7:33:52:66:e4:
         d2:83:70:16:70:da:14:8b:46:d7:c0:20:4f:81:d1:bf:dd:43:
         66:f4:8a:cd:3d:f3:e9:87:e6:b5:1f:6c:40:45:49:77:ff:d6:
         40:b9:77:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:13 2024 by rpki-client on console-fra.rpki-client.org