Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/27aae2-fe99-4b18-934b-9380fed8d02f/1/F6p3JMOga--6sBlOYIOM8UgoDOk.roa
File:                     F6p3JMOga--6sBlOYIOM8UgoDOk.roa (raw, json)
Hash identifier:          GinfGVdx43C9inr+s8JFou7Q+13GrJg6rMv63stsrdg=
Subject key identifier:   17:AA:77:24:C3:A0:6B:EF:BA:B0:19:4E:60:83:8C:F1:48:28:0C:E9
Certificate issuer:       /CN=75359e8fd9057727f6633a4afe230e30f7f02e0e
Certificate serial:       01856ED4AA91B71398B882F9D6B1EEF02704
Authority key identifier: 75:35:9E:8F:D9:05:77:27:F6:63:3A:4A:FE:23:0E:30:F7:F0:2E:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dTWej9kFdyf2YzpK_iMOMPfwLg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/27aae2-fe99-4b18-934b-9380fed8d02f/1/F6p3JMOga--6sBlOYIOM8UgoDOk.roa
Signing time:             Sun 01 Jan 2023 19:35:09 +0000
ROA not before:           Sun 01 Jan 2023 19:35:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39915
IP address blocks:        80.75.211.0/24 maxlen: 24
                          80.75.208.0/24 maxlen: 24
                          80.75.213.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:aa:91:b7:13:98:b8:82:f9:d6:b1:ee:f0:27:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75359e8fd9057727f6633a4afe230e30f7f02e0e
        Validity
            Not Before: Jan  1 19:35:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=17aa7724c3a06befbab0194e60838cf148280ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a4:8f:ac:ba:7c:ab:74:0c:e1:db:6b:97:0e:
                    ea:b3:4f:57:df:35:cf:ad:72:0a:f6:17:6c:63:15:
                    37:ce:fb:e5:1e:48:37:ec:75:aa:70:af:5b:79:cd:
                    34:c2:72:6c:de:3e:e4:da:5b:dd:d1:55:5c:58:de:
                    cd:b8:66:eb:21:2e:ad:c0:c6:9e:99:8e:2c:21:81:
                    fa:16:68:f1:87:65:e6:8b:80:af:f4:5c:b3:29:7d:
                    7a:57:6f:0d:bd:7e:9f:73:4c:8e:85:51:b3:76:fa:
                    b8:bb:76:24:c5:da:ae:6b:8d:9e:99:d3:e8:dc:c9:
                    1d:65:2d:31:43:05:da:7e:8c:24:d9:0d:79:5c:d4:
                    ed:6d:06:e2:98:ea:b1:23:89:4d:54:94:80:33:8b:
                    37:a9:3b:d6:25:42:8b:28:a8:1f:e4:3e:cd:eb:ed:
                    b4:25:8e:e2:18:0f:70:aa:00:88:53:b1:85:e5:5e:
                    e6:c5:7e:61:7e:f7:d6:e6:4b:95:e8:53:7b:09:d2:
                    df:c0:cf:aa:1d:7e:52:15:98:47:5d:1a:70:f2:0d:
                    ce:f6:23:0c:32:95:f2:5c:06:df:18:79:b9:30:7e:
                    ad:95:f4:37:ab:12:0b:e0:7b:55:ca:ed:87:bb:b3:
                    26:65:08:8a:d1:d9:29:eb:08:75:e5:dc:69:0c:ab:
                    6e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AA:77:24:C3:A0:6B:EF:BA:B0:19:4E:60:83:8C:F1:48:28:0C:E9
            X509v3 Authority Key Identifier:
                keyid:75:35:9E:8F:D9:05:77:27:F6:63:3A:4A:FE:23:0E:30:F7:F0:2E:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTWej9kFdyf2YzpK_iMOMPfwLg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/27aae2-fe99-4b18-934b-9380fed8d02f/1/F6p3JMOga--6sBlOYIOM8UgoDOk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/27aae2-fe99-4b18-934b-9380fed8d02f/1/dTWej9kFdyf2YzpK_iMOMPfwLg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.75.208.0/24
                  80.75.211.0/24
                  80.75.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:95:06:6a:43:5e:05:56:c4:70:6e:63:da:54:63:ca:7c:bb:
         7f:ad:6f:d9:d5:a0:e8:0c:4e:ee:ca:e6:7c:d2:4b:dd:6f:25:
         9f:58:4d:c7:82:da:5c:31:f3:db:53:4e:93:9c:5b:13:78:9c:
         86:34:5a:de:21:5d:6e:2f:35:e2:1a:17:a4:f1:18:90:fa:cc:
         52:93:16:ab:47:44:94:c0:04:57:95:5c:cd:76:14:3d:d1:43:
         bf:21:f1:00:d9:24:44:3f:33:60:8b:0c:32:b4:7a:16:e6:22:
         1d:94:a1:68:15:a6:21:27:bb:15:ef:8b:00:a1:66:c6:92:2c:
         5a:e1:58:d4:81:35:f6:51:60:41:ac:b5:9f:bf:01:86:ae:10:
         25:d6:28:fc:fc:34:d7:87:b2:76:f7:bc:3d:4a:ff:43:f7:45:
         fd:bc:7b:f6:c8:a5:e4:fe:d6:a1:f8:3f:ac:c0:fc:75:f0:38:
         30:35:23:00:20:f0:ea:c0:35:3f:e4:1c:6b:3d:34:d4:2c:90:
         6f:78:4e:81:5a:68:34:a2:06:00:0b:a7:c2:39:17:70:df:95:
         3b:95:52:81:76:39:9a:ba:a3:4c:8b:7b:02:b1:8a:4f:94:5a:
         7f:9e:86:00:51:db:95:2c:9e:d5:a0:1f:c6:3b:cd:93:d9:07:
         e2:f3:33:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:07 2024 by rpki-client on console-ams.rpki-client.org