Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/ZzkFmxS-FRAza5B2XKL7oRuGPX8.roa
File:                     ZzkFmxS-FRAza5B2XKL7oRuGPX8.roa (raw, json)
Hash identifier:          KW55ZUPiKDhvyoET1BB2bAGtv80OkdMihOI5Pu5sTf4=
Subject key identifier:   67:39:05:9B:14:BE:15:10:33:6B:90:76:5C:A2:FB:A1:1B:86:3D:7F
Certificate issuer:       /CN=f69b35b084608cd1c2594bbaa5e4693760050037
Certificate serial:       018234038F8FA7B42C184FCA9BEA1866A5ED
Authority key identifier: F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/ZzkFmxS-FRAza5B2XKL7oRuGPX8.roa
Signing time:             Mon 25 Jul 2022 06:20:24 +0000
ROA not before:           Mon 25 Jul 2022 06:20:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56762
IP address blocks:        91.193.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:34:03:8f:8f:a7:b4:2c:18:4f:ca:9b:ea:18:66:a5:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69b35b084608cd1c2594bbaa5e4693760050037
        Validity
            Not Before: Jul 25 06:20:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6739059b14be1510336b90765ca2fba11b863d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4a:02:df:cd:02:b2:4f:20:5f:19:60:89:24:
                    5d:b1:b1:4d:d2:0f:f0:b7:f8:ed:2c:91:9a:dc:dc:
                    0c:89:b6:09:56:a6:f1:6b:d4:7c:d7:65:c7:89:3f:
                    e3:29:6c:d1:c7:e7:d1:a5:de:95:31:84:72:5c:22:
                    a3:5b:9f:d4:83:3e:e5:65:09:5b:75:42:b2:1d:94:
                    16:9d:00:18:20:b1:a5:5f:cf:32:6b:47:a7:f3:94:
                    ad:5a:d2:0b:b6:e1:23:75:c8:cc:79:9c:2a:93:e0:
                    ed:7a:a5:15:c9:2d:a2:e4:8a:4d:b4:9d:03:f0:63:
                    fb:d6:79:f5:08:57:48:44:b7:00:c5:f0:e8:70:8d:
                    5f:8d:c8:b2:23:15:d9:65:2c:43:09:76:90:f8:38:
                    b1:1a:d4:35:0c:12:f7:24:e5:2f:2a:28:39:32:90:
                    ba:84:6c:64:a7:2c:53:52:ee:02:73:38:d6:0e:7c:
                    90:6c:09:0c:6f:3d:ff:ff:98:59:ac:7b:0c:b5:bd:
                    cb:bd:26:fb:d2:02:e6:4a:3c:ef:8f:82:91:57:22:
                    fa:b1:75:05:69:89:82:25:2c:6b:eb:1b:b9:c3:25:
                    10:2c:77:78:e2:82:89:7f:f2:b8:c9:0a:57:d1:8d:
                    b2:a1:44:a4:76:a4:f4:a3:36:0b:8f:0e:e5:e2:cd:
                    c5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:39:05:9B:14:BE:15:10:33:6B:90:76:5C:A2:FB:A1:1B:86:3D:7F
            X509v3 Authority Key Identifier:
                keyid:F6:9B:35:B0:84:60:8C:D1:C2:59:4B:BA:A5:E4:69:37:60:05:00:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ps1sIRgjNHCWUu6peRpN2AFADc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/ZzkFmxS-FRAza5B2XKL7oRuGPX8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6d38ee-0ca6-4e1f-9a87-6450985129aa/1/9ps1sIRgjNHCWUu6peRpN2AFADc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.193.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:0f:f7:b4:b2:65:39:31:ed:75:03:bb:32:68:70:9e:0f:06:
         0a:eb:dd:79:23:dd:d2:ff:3b:0a:27:10:86:cf:9e:5f:d4:a4:
         c4:b9:78:b5:de:fa:d5:6e:63:e0:c1:6c:c1:8c:46:bd:11:78:
         f2:16:f2:7a:28:12:e9:f5:50:b0:be:27:25:4b:96:94:cd:20:
         55:fd:e5:67:e6:ba:cc:73:26:aa:a8:64:23:a2:bb:fe:f8:39:
         c3:22:c2:8c:4b:65:7e:5c:54:95:e6:e3:41:75:d4:66:86:b8:
         9f:7f:00:4b:bf:b2:7d:51:33:39:c6:57:f7:75:c7:95:72:74:
         59:fc:8d:ce:46:80:e7:a2:02:b7:58:a9:ed:7d:8c:3b:6e:0d:
         1a:0c:d0:f4:61:58:df:5c:48:ab:b7:aa:74:1c:4d:79:4d:85:
         1e:70:38:f9:24:6f:ff:68:09:bd:be:ba:fb:fc:3d:23:f6:93:
         e0:db:6a:57:a8:1a:15:a7:23:12:3d:d3:75:b3:0f:f1:94:48:
         1b:a5:9c:f4:f2:25:22:d6:10:4c:13:0a:ec:de:ff:50:ac:03:
         d4:84:9e:72:84:ab:a4:5e:54:0f:95:5b:d2:09:7f:90:63:3e:
         95:1a:48:72:02:8a:81:67:23:4b:38:1a:dd:4c:d1:ea:f0:0c:
         8b:df:46:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:58 2024 by rpki-client on console-fra.rpki-client.org