Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/SKw5F2ZOTjgZ3Ob87reNWp3ks54.roa
File:                     SKw5F2ZOTjgZ3Ob87reNWp3ks54.roa (raw, json)
Hash identifier:          +J79YFhBuAYOGbxLrjFYLsp8Z9LKhNFTmj29gVhsXN0=
Subject key identifier:   48:AC:39:17:66:4E:4E:38:19:DC:E6:FC:EE:B7:8D:5A:9D:E4:B3:9E
Certificate issuer:       /CN=f69b35b084608cd1c2594bbaa5e4693760050037
Certificate serial:       017E368C
Authority key identifier: F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/SKw5F2ZOTjgZ3Ob87reNWp3ks54.roa
Signing time:             Mon 28 Feb 2022 18:04:39 +0000
ROA not before:           Mon 28 Feb 2022 18:04:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47689
IP address blocks:        64.187.208.0/23 maxlen: 24
                          91.193.114.0/24 maxlen: 24
                          2a06:a340::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25048716 (0x17e368c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69b35b084608cd1c2594bbaa5e4693760050037
        Validity
            Not Before: Feb 28 18:04:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=48ac3917664e4e3819dce6fceeb78d5a9de4b39e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2c:ba:72:d8:fd:fd:4e:32:97:03:20:69:ff:
                    66:1f:c9:fd:be:75:92:74:d7:47:d8:83:d8:9a:56:
                    80:97:ad:bc:06:aa:6b:6e:80:70:d9:a2:fd:94:ff:
                    80:d7:11:c5:f2:c7:01:82:f1:27:f9:17:23:73:95:
                    43:1b:c5:a5:80:20:39:d2:1d:fc:53:60:98:ec:0e:
                    77:7c:9f:14:14:46:c2:18:ec:29:42:8c:1b:6f:ba:
                    cb:71:82:d2:87:ba:32:a6:46:8f:b2:6d:95:33:34:
                    ac:c2:97:b4:e8:a0:68:a0:1d:99:52:5f:db:b8:2c:
                    0d:2e:b0:86:f0:d4:9d:51:1f:4f:23:12:7e:5c:3b:
                    70:82:96:ec:0e:ea:fe:07:cf:ee:dd:fc:a4:1c:16:
                    a0:c1:53:2a:1a:19:db:64:d1:e8:94:45:cf:3f:ad:
                    67:0d:84:87:09:e0:0e:7c:f2:4a:3b:9f:88:a4:8b:
                    d4:57:0c:8b:57:cd:11:d5:63:29:20:c7:e1:6c:93:
                    5a:77:1d:5d:43:68:b7:07:93:1f:08:03:5b:94:90:
                    49:5e:22:29:2f:6b:78:7c:4b:5c:7c:15:89:29:c8:
                    d4:b8:1b:52:7f:a9:82:4c:02:0a:9f:72:75:9b:57:
                    68:d5:e0:23:71:04:b2:41:e3:03:ab:99:24:01:3d:
                    92:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AC:39:17:66:4E:4E:38:19:DC:E6:FC:EE:B7:8D:5A:9D:E4:B3:9E
            X509v3 Authority Key Identifier:
                keyid:F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/SKw5F2ZOTjgZ3Ob87reNWp3ks54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/9ps1sIRgjNHCWUu6peRpN2AFADc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.208.0/23
                  91.193.114.0/24
                IPv6:
                  2a06:a340::/29

    Signature Algorithm: sha256WithRSAEncryption
         6f:cd:65:99:0c:1b:7d:fb:b1:1a:96:da:c1:de:b2:2e:65:54:
         bc:23:9e:bd:ad:96:cf:94:fc:0f:67:84:93:6f:e8:29:b1:28:
         cc:60:60:cd:37:d1:3f:5c:45:f5:f4:46:d4:07:3e:0d:88:0a:
         ae:01:ea:3a:41:67:d3:57:ad:7c:96:f7:4b:f0:34:b8:89:5e:
         44:0d:b9:e7:da:76:65:4e:83:5d:df:42:fc:0a:88:f4:b2:59:
         8a:2f:38:f9:15:29:a5:dc:c1:50:e3:57:1b:95:aa:41:c7:c0:
         a8:fe:ae:f8:c0:46:f9:f2:83:31:a8:7b:33:e2:30:ef:6a:7f:
         e0:39:0b:7d:31:91:8a:3b:06:f5:f5:82:26:0d:41:d1:8b:fa:
         37:fe:bd:93:76:18:d4:c1:2b:d1:ae:16:47:48:08:5e:23:48:
         c6:08:86:73:e5:1e:df:2e:3b:97:08:9a:94:a1:70:1e:26:08:
         e5:ef:6b:1a:ae:fc:15:85:05:2d:74:9b:0b:56:a0:81:7f:18:
         2c:d7:f0:1b:67:92:89:3a:05:d2:b0:90:dc:fe:d1:3b:d6:31:
         bc:7f:3d:c6:5c:ca:28:b4:a5:41:a8:ba:6b:00:13:ea:f7:2b:
         dd:85:0b:db:d2:3d:a1:67:05:c8:38:24:2b:1e:b4:d7:5d:54:
         f9:5e:21:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:58 2024 by rpki-client on console-fra.rpki-client.org