Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/563c56-ef7a-4920-ab1d-d8e1194a9e96/1/m0dS5w9NPmZNFObvfzPF5lYIgjE.roa
File:                     m0dS5w9NPmZNFObvfzPF5lYIgjE.roa (raw, json)
Hash identifier:          1NRUm3VdMjWOXPU1mUQwGpunwSfUPf//DqBALYkjEwk=
Subject key identifier:   9B:47:52:E7:0F:4D:3E:66:4D:14:E6:EF:7F:33:C5:E6:56:08:82:31
Certificate issuer:       /CN=b934a487ba233e06bd2d3f957559f96de3a3e1fe
Certificate serial:       0225EF
Authority key identifier: B9:34:A4:87:BA:23:3E:06:BD:2D:3F:95:75:59:F9:6D:E3:A3:E1:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uTSkh7ojPga9LT-VdVn5beOj4f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/563c56-ef7a-4920-ab1d-d8e1194a9e96/1/m0dS5w9NPmZNFObvfzPF5lYIgjE.roa
Signing time:             Sat 28 May 2022 10:17:13 +0000
ROA not before:           Sat 28 May 2022 10:17:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47505
IP address blocks:        91.206.78.0/23 maxlen: 23
                          193.142.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140783 (0x225ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b934a487ba233e06bd2d3f957559f96de3a3e1fe
        Validity
            Not Before: May 28 10:17:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b4752e70f4d3e664d14e6ef7f33c5e656088231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8a:a1:a6:6c:05:a5:b3:02:ac:16:ff:6c:4e:
                    b4:1c:b4:18:62:1d:70:6a:e1:49:ae:27:e4:11:9e:
                    96:5b:ee:ae:db:ce:f9:97:e9:fe:df:8f:9d:79:76:
                    8b:22:44:4b:f0:56:f9:8f:5c:09:5b:69:36:9f:c4:
                    36:62:6f:4d:db:2d:2f:6f:f2:b7:bf:d5:59:0a:ee:
                    7e:81:01:e5:e1:02:46:ac:b0:c0:cb:cb:d3:db:8f:
                    14:a3:bf:36:ee:b0:23:4e:60:43:12:04:2e:11:02:
                    08:d9:53:31:ea:8c:26:5f:f8:92:a5:76:1f:7c:5d:
                    d9:8f:af:0a:c3:b1:87:45:46:75:56:4a:41:da:9b:
                    b1:cd:66:ba:d0:a4:7f:46:03:bd:1e:87:39:63:5b:
                    d5:24:8b:f0:2b:3c:45:d4:54:2c:39:24:c5:44:d9:
                    83:5c:12:9f:2b:55:9e:aa:96:3d:89:39:8f:c6:42:
                    a1:4a:49:51:e1:06:83:02:2f:d4:1f:7e:d5:89:0b:
                    f0:28:e5:45:be:89:9a:9f:a9:54:e2:84:e6:2e:f2:
                    b6:eb:9c:34:0c:8d:aa:b0:3c:60:b9:ab:8b:bb:de:
                    78:ef:43:cd:46:06:ff:34:7d:96:c0:8e:70:71:4b:
                    bf:f6:d3:73:79:24:c0:53:e2:e8:13:1a:4c:45:f2:
                    95:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:47:52:E7:0F:4D:3E:66:4D:14:E6:EF:7F:33:C5:E6:56:08:82:31
            X509v3 Authority Key Identifier:
                keyid:B9:34:A4:87:BA:23:3E:06:BD:2D:3F:95:75:59:F9:6D:E3:A3:E1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTSkh7ojPga9LT-VdVn5beOj4f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/563c56-ef7a-4920-ab1d-d8e1194a9e96/1/m0dS5w9NPmZNFObvfzPF5lYIgjE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/563c56-ef7a-4920-ab1d-d8e1194a9e96/1/uTSkh7ojPga9LT-VdVn5beOj4f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.206.78.0/23
                  193.142.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:f5:94:40:b4:09:49:34:4b:5c:96:33:8b:52:3c:fa:4b:f5:
         cd:06:73:91:78:aa:6d:b9:af:f3:85:89:45:33:ca:a0:fa:ab:
         fb:3a:f8:d7:4e:76:f5:d2:0d:14:c2:7a:19:43:c7:69:29:9b:
         8f:5e:6b:73:31:f9:5a:ce:ce:d0:95:86:9f:8b:5e:d6:50:b8:
         f2:35:46:2c:99:ab:9e:03:5f:1f:30:db:cc:01:de:38:c7:ab:
         87:67:db:dd:df:16:5b:3e:65:5c:35:5a:0f:0e:8a:8a:c9:7e:
         03:cc:f3:a0:15:75:54:05:fc:f1:56:bc:3a:71:80:99:05:15:
         2b:b1:d0:02:f8:bf:3b:40:8c:ab:72:ca:e2:f3:8c:2a:75:75:
         71:50:fb:c3:76:1f:74:4a:d3:76:ce:9d:4d:ac:85:a9:95:9c:
         9d:2f:62:75:6b:7e:16:5d:3e:b0:87:83:13:11:ce:6c:02:d8:
         1c:42:1d:48:d3:43:3b:c7:90:3b:f8:25:ed:2f:d8:b6:6e:69:
         ff:23:44:89:09:4f:40:99:18:3c:cb:00:71:26:d6:bc:3a:b2:
         1e:ff:7c:e9:82:7f:36:5c:f7:e6:34:c0:77:15:78:42:00:0f:
         3b:8b:17:9c:0c:a4:68:4b:fb:b5:fb:4f:8e:38:36:52:d6:9b:
         1a:35:dc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:13 2024 by rpki-client on console-ams.rpki-client.org