Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7ff191-4b47-4a5d-a7aa-42b6f6637396/1/E1-18nNGXkcLjh4VxaCR784sbHw.roa
File:                     E1-18nNGXkcLjh4VxaCR784sbHw.roa (raw, json)
Hash identifier:          Z9fEiMAe/RiItViI/ni34TIkL0y7PgQr0U+hiDQLKjA=
Subject key identifier:   13:5F:B5:F2:73:46:5E:47:0B:8E:1E:15:C5:A0:91:EF:CE:2C:6C:7C
Certificate issuer:       /CN=072b4786a83b774cb5d1f7b85256fd6c51bb3460
Certificate serial:       09F75343
Authority key identifier: 07:2B:47:86:A8:3B:77:4C:B5:D1:F7:B8:52:56:FD:6C:51:BB:34:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BytHhqg7d0y10fe4Ulb9bFG7NGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/7ff191-4b47-4a5d-a7aa-42b6f6637396/1/E1-18nNGXkcLjh4VxaCR784sbHw.roa
Signing time:             Sat 01 Jan 2022 01:51:34 +0000
ROA not before:           Sat 01 Jan 2022 01:51:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60027
IP address blocks:        91.93.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167203651 (0x9f75343)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072b4786a83b774cb5d1f7b85256fd6c51bb3460
        Validity
            Not Before: Jan  1 01:51:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=135fb5f273465e470b8e1e15c5a091efce2c6c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d0:88:a6:82:bc:3a:10:5c:c8:e2:ec:26:0b:
                    96:61:7d:b5:df:a8:e9:e0:b6:84:fa:0e:40:17:ad:
                    cf:b0:84:fd:c6:3c:57:f7:c7:42:ae:25:96:d3:61:
                    03:ef:a2:2a:03:36:91:49:11:1d:b9:4b:8f:8b:ce:
                    2d:49:87:28:8e:2b:38:05:12:25:57:ba:cd:77:f3:
                    cb:bd:87:c0:86:c5:e9:8d:5e:cf:f8:6d:83:03:9f:
                    50:d7:b1:95:cf:7c:2a:38:7c:05:b1:ed:22:07:62:
                    a8:c6:21:8b:f1:fc:15:51:56:b1:61:f2:b6:74:74:
                    0e:69:e6:dd:86:ed:04:84:bf:97:4b:24:9d:89:fd:
                    ad:ac:52:ca:66:f4:b2:82:32:49:c2:29:8b:8c:cb:
                    94:49:4c:50:04:fe:27:c1:7f:38:ef:4e:cd:88:e2:
                    0c:1d:bb:e8:b7:f6:87:2c:ca:55:7b:da:c8:07:15:
                    72:3d:80:f5:aa:29:d9:24:24:42:0c:d6:5f:7b:07:
                    0b:24:78:c2:98:f4:7a:2f:93:5c:3a:a9:c4:15:a1:
                    07:e3:26:25:a1:57:1a:d5:41:e3:a1:ae:ac:4e:db:
                    77:e2:5e:bb:e0:38:54:07:89:00:13:76:79:3a:ed:
                    9c:0f:e7:be:2a:45:29:c3:35:54:b8:57:68:3c:4e:
                    65:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5F:B5:F2:73:46:5E:47:0B:8E:1E:15:C5:A0:91:EF:CE:2C:6C:7C
            X509v3 Authority Key Identifier:
                keyid:07:2B:47:86:A8:3B:77:4C:B5:D1:F7:B8:52:56:FD:6C:51:BB:34:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BytHhqg7d0y10fe4Ulb9bFG7NGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7ff191-4b47-4a5d-a7aa-42b6f6637396/1/E1-18nNGXkcLjh4VxaCR784sbHw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7ff191-4b47-4a5d-a7aa-42b6f6637396/1/BytHhqg7d0y10fe4Ulb9bFG7NGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.93.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:cd:56:8d:1b:d6:d9:e0:67:46:7b:71:b8:25:af:2c:c3:ec:
         d3:ae:ff:84:15:1e:61:a3:d2:95:86:29:92:b2:e4:be:bf:6d:
         d5:43:85:54:42:fd:df:f3:fc:84:bd:40:85:60:ed:d4:c2:12:
         30:b0:bb:11:40:1c:d4:1c:48:e0:0e:94:e6:a5:0a:0b:49:b5:
         65:53:04:81:91:48:ae:bd:b8:bf:5d:c8:9b:8c:a1:fa:d8:e3:
         96:bd:52:9a:2e:60:ca:2c:4b:8b:c6:32:cc:f6:51:32:0c:a3:
         34:4a:79:ef:ea:3d:e6:ba:fc:ee:d1:1f:8c:30:e3:7d:9a:f0:
         8a:f2:51:4a:1c:48:ad:68:85:1e:36:de:21:8a:23:e3:5e:27:
         ac:a2:e7:9f:27:87:89:b2:d6:4e:d5:75:27:d9:e1:5c:38:8b:
         39:e7:9f:d2:a5:8c:3a:e0:8c:d6:3d:88:1e:35:c1:de:36:af:
         09:19:b5:97:a6:fe:47:2f:71:10:4e:2b:c8:ce:f8:28:12:b9:
         b3:17:19:e5:01:43:7f:fb:ba:3f:22:51:c5:66:66:70:84:54:
         0c:c3:70:46:b3:84:c3:fa:bc:16:58:e2:bb:5f:81:95:40:05:
         c3:6b:fc:36:ed:ab:aa:89:74:da:31:c2:b5:fc:6c:4b:4c:9b:
         22:fb:9c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:17 2024 by rpki-client on console-ams.rpki-client.org