Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7ff191-4b47-4a5d-a7aa-42b6f6637396/1/AJvEyYYXD12_1Fy9aRUPM26naoE.roa
File:                     AJvEyYYXD12_1Fy9aRUPM26naoE.roa (raw, json)
Hash identifier:          3Hiz1izs+kpgl8qlwp9jktjZ7dLXCK4pc1A7AwHZ+xM=
Subject key identifier:   00:9B:C4:C9:86:17:0F:5D:BF:D4:5C:BD:69:15:0F:33:6E:A7:6A:81
Certificate issuer:       /CN=072b4786a83b774cb5d1f7b85256fd6c51bb3460
Certificate serial:       0ABE57CC
Authority key identifier: 07:2B:47:86:A8:3B:77:4C:B5:D1:F7:B8:52:56:FD:6C:51:BB:34:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BytHhqg7d0y10fe4Ulb9bFG7NGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/7ff191-4b47-4a5d-a7aa-42b6f6637396/1/AJvEyYYXD12_1Fy9aRUPM26naoE.roa
Signing time:             Wed 30 Mar 2022 09:53:18 +0000
ROA not before:           Wed 30 Mar 2022 09:53:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43352
IP address blocks:        91.93.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180246476 (0xabe57cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072b4786a83b774cb5d1f7b85256fd6c51bb3460
        Validity
            Not Before: Mar 30 09:53:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=009bc4c986170f5dbfd45cbd69150f336ea76a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5b:28:9e:e1:d6:8e:8d:70:b7:c9:81:e4:1b:
                    20:98:e6:4f:88:6f:71:a7:ad:09:99:37:b5:e6:76:
                    f6:35:4a:69:52:2d:28:b1:fb:30:a5:1e:7e:c4:8a:
                    f9:46:f4:da:e0:23:71:80:77:3d:5d:bd:db:a4:cb:
                    ec:11:05:af:12:2a:ad:7a:df:5a:5a:83:00:31:78:
                    79:93:64:fe:0c:bb:28:d9:53:00:4d:f2:16:57:ab:
                    28:c2:ea:4d:25:59:cd:16:9e:d1:88:52:a6:28:1c:
                    40:22:07:54:3e:ee:3b:1c:64:f7:81:e6:3e:e1:27:
                    3e:d3:18:16:85:38:2c:96:a0:59:e5:21:3a:7e:78:
                    64:3f:68:95:0a:cf:f0:c2:e6:09:b8:74:81:71:ae:
                    2a:2e:35:08:ae:01:25:f6:5e:ca:3c:68:cb:b6:de:
                    5e:da:12:28:c3:7b:3b:1f:71:d3:08:6a:45:04:63:
                    ae:2f:f2:ff:95:c8:f1:54:b3:19:34:2c:0b:e5:41:
                    97:23:f1:2e:bc:d5:6f:ed:9d:e2:05:03:00:e8:ce:
                    d0:65:f9:36:bd:09:e9:d9:c6:bb:69:c9:ef:82:b0:
                    cc:d1:14:bb:75:39:0b:d2:b4:07:13:c5:44:b6:aa:
                    fc:be:79:fc:66:69:62:07:ab:f3:8b:5a:18:05:38:
                    f7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9B:C4:C9:86:17:0F:5D:BF:D4:5C:BD:69:15:0F:33:6E:A7:6A:81
            X509v3 Authority Key Identifier:
                keyid:07:2B:47:86:A8:3B:77:4C:B5:D1:F7:B8:52:56:FD:6C:51:BB:34:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BytHhqg7d0y10fe4Ulb9bFG7NGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7ff191-4b47-4a5d-a7aa-42b6f6637396/1/AJvEyYYXD12_1Fy9aRUPM26naoE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7ff191-4b47-4a5d-a7aa-42b6f6637396/1/BytHhqg7d0y10fe4Ulb9bFG7NGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.93.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:a9:ae:6a:bc:06:48:21:2d:8c:ee:98:67:a3:92:e6:04:fc:
         9d:73:df:ce:14:e2:da:f6:ce:ea:3e:20:22:ac:d4:b3:04:f7:
         29:6b:72:d8:19:fd:95:11:80:db:16:ea:93:ab:62:2c:31:a6:
         67:55:10:c0:4a:2b:e8:d5:15:cf:d0:21:37:9b:d5:2a:db:b9:
         90:6a:ce:34:1d:94:2c:0e:19:77:b5:6a:2c:5b:28:62:f2:3f:
         35:22:77:6a:fb:2d:37:36:e4:04:5f:40:79:e8:f4:25:c0:5b:
         00:a8:ff:28:16:db:7d:db:ee:83:45:28:03:95:4d:c3:86:31:
         c3:55:6c:3f:e5:19:d6:80:0d:16:e2:0a:20:f5:fe:68:b0:a1:
         9f:39:30:fa:ce:c8:e4:c2:9b:c0:94:f2:37:a7:81:b1:ac:ac:
         0b:31:a7:05:f8:2c:f1:27:ad:42:08:99:b2:7b:09:a6:bd:ea:
         fa:4a:2b:26:7c:54:ad:8e:14:20:bc:9a:7d:ca:62:6d:dc:7f:
         d1:af:41:7d:56:b3:48:3d:41:68:cb:09:c6:1d:f5:c5:7f:6e:
         2e:75:77:73:ab:4e:d0:76:f4:d9:7f:6a:5e:5a:15:93:63:c9:
         14:91:34:3c:57:ce:ab:12:09:f1:11:ae:15:fd:2b:33:14:b7:
         01:2f:b2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:17 2024 by rpki-client on console-ams.rpki-client.org