Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8ef679-5a0e-412e-bb04-3465ded52707/1/DotyoQKU2C_Y-vKvHbqwTM0ChfU.roa
File:                     DotyoQKU2C_Y-vKvHbqwTM0ChfU.roa (raw, json)
Hash identifier:          gvzOAefnsQs+wElRvNySxAx3oxjVk2xKx5//6lsY6hY=
Subject key identifier:   0E:8B:72:A1:02:94:D8:2F:D8:FA:F2:AF:1D:BA:B0:4C:CD:02:85:F5
Certificate issuer:       /CN=517d96d7b0ff75203b99249e37a566c8a5b51d4a
Certificate serial:       018C1668E1D4BF24EBC43665AF34FE0E33A3
Authority key identifier: 51:7D:96:D7:B0:FF:75:20:3B:99:24:9E:37:A5:66:C8:A5:B5:1D:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UX2W17D_dSA7mSSeN6VmyKW1HUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/8ef679-5a0e-412e-bb04-3465ded52707/1/DotyoQKU2C_Y-vKvHbqwTM0ChfU.roa
Signing time:             Tue 28 Nov 2023 14:50:21 +0000
ROA not before:           Tue 28 Nov 2023 14:50:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200296
IP address blocks:        91.247.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:16:68:e1:d4:bf:24:eb:c4:36:65:af:34:fe:0e:33:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517d96d7b0ff75203b99249e37a566c8a5b51d4a
        Validity
            Not Before: Nov 28 14:50:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0e8b72a10294d82fd8faf2af1dbab04ccd0285f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8a:cd:17:47:24:f8:6b:0d:d2:d6:db:89:19:
                    98:d3:4f:80:93:fe:b7:fc:e9:17:c9:14:9a:ab:c7:
                    39:93:ce:2c:e5:58:aa:3b:83:fb:fa:31:05:f0:fe:
                    37:79:98:c6:62:87:d1:01:01:cb:f6:af:ab:50:c3:
                    5d:10:36:1a:62:65:40:19:99:98:ea:e9:b3:ee:41:
                    5e:78:0a:52:2f:00:c8:46:17:e6:4e:fb:f0:b9:56:
                    87:36:d6:8b:6e:d6:5e:a0:f8:af:61:9e:39:d0:98:
                    05:2d:6f:33:79:85:8a:e3:8d:aa:28:8a:c7:43:7d:
                    e6:16:ef:ae:a9:22:4d:51:d1:b8:40:3c:4d:60:a4:
                    6a:6d:ea:33:e1:88:c2:25:35:fc:7d:97:f4:df:42:
                    25:d0:9f:d3:4b:38:3a:cf:52:05:1f:54:39:0b:ab:
                    dc:a1:64:44:3a:aa:f1:6c:5b:31:84:98:3f:b7:9c:
                    78:ed:4a:66:93:98:0a:95:b9:ec:09:5d:60:7b:0b:
                    38:50:1f:03:d3:5f:59:9e:a2:96:5f:28:51:0d:15:
                    e3:0b:ca:a0:09:1b:c9:37:e0:9e:91:0b:06:d8:34:
                    8e:96:68:b9:6d:8b:85:48:18:c0:aa:f3:1a:03:52:
                    87:cf:66:41:a2:9a:cf:82:91:91:53:d8:61:ad:1d:
                    a9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8B:72:A1:02:94:D8:2F:D8:FA:F2:AF:1D:BA:B0:4C:CD:02:85:F5
            X509v3 Authority Key Identifier:
                keyid:51:7D:96:D7:B0:FF:75:20:3B:99:24:9E:37:A5:66:C8:A5:B5:1D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UX2W17D_dSA7mSSeN6VmyKW1HUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8ef679-5a0e-412e-bb04-3465ded52707/1/DotyoQKU2C_Y-vKvHbqwTM0ChfU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8ef679-5a0e-412e-bb04-3465ded52707/1/UX2W17D_dSA7mSSeN6VmyKW1HUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.247.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:f8:f2:fe:cb:64:2d:5e:81:e2:14:3d:74:07:b2:12:3e:11:
         e9:ba:92:1d:8c:8b:9e:78:09:84:43:fd:87:e3:b1:00:b2:be:
         8f:8e:88:b2:a1:f1:81:c5:fc:94:89:41:9c:b4:6a:bb:99:cf:
         f9:db:b8:84:20:8b:ba:c0:d1:02:e8:03:b7:4f:be:dc:c7:6b:
         09:b0:1e:ca:9b:06:cd:5d:39:35:02:21:c4:e8:8c:9c:5f:dc:
         a1:32:7a:b1:52:fd:c5:52:32:25:bc:72:ad:c7:c1:c8:b6:fc:
         15:ed:11:81:7a:27:e5:ba:d7:7c:fb:75:82:cc:f4:1f:dd:80:
         ad:08:8c:23:57:c4:96:b3:7c:c9:09:ea:f9:15:45:95:ad:63:
         eb:ad:30:7a:9e:0a:07:d0:6e:23:cf:67:49:88:f9:8b:e7:de:
         ac:03:72:fc:03:85:ee:02:36:3a:6d:59:f5:b7:05:c3:5c:d3:
         f3:1a:99:b3:c3:32:65:ec:8c:fe:f4:80:e1:e0:66:e7:ac:82:
         86:7b:fd:e6:49:c3:d2:a4:a7:e5:4b:ee:58:27:88:73:cd:76:
         9b:d0:c1:19:7d:9e:44:fc:12:f6:a0:c0:b2:84:fc:67:01:54:
         65:2a:f9:91:ed:78:f4:96:7e:08:d0:d3:9c:0a:2d:99:c7:87:
         d4:4a:44:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:11 2024 by rpki-client on console-fra.rpki-client.org