Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8ef679-5a0e-412e-bb04-3465ded52707/1/ayMizEN0I6pooLGkG-mb4otya1w.roa
File:                     ayMizEN0I6pooLGkG-mb4otya1w.roa (raw, json)
Hash identifier:          gakbSxvUz1kJOUaLmpA0HN1d8FBEcb0gg/vdzkNyu5I=
Subject key identifier:   6B:23:22:CC:43:74:23:AA:68:A0:B1:A4:1B:E9:9B:E2:8B:72:6B:5C
Certificate issuer:       /CN=517d96d7b0ff75203b99249e37a566c8a5b51d4a
Certificate serial:       0183318C6D4B85DB2C00CCD8B24695D1AA19
Authority key identifier: 51:7D:96:D7:B0:FF:75:20:3B:99:24:9E:37:A5:66:C8:A5:B5:1D:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UX2W17D_dSA7mSSeN6VmyKW1HUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/8ef679-5a0e-412e-bb04-3465ded52707/1/ayMizEN0I6pooLGkG-mb4otya1w.roa
Signing time:             Mon 12 Sep 2022 11:53:49 +0000
ROA not before:           Mon 12 Sep 2022 11:53:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209642
IP address blocks:        91.247.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:31:8c:6d:4b:85:db:2c:00:cc:d8:b2:46:95:d1:aa:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517d96d7b0ff75203b99249e37a566c8a5b51d4a
        Validity
            Not Before: Sep 12 11:53:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6b2322cc437423aa68a0b1a41be99be28b726b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ac:f3:1b:52:c1:d3:da:ed:4a:22:85:cc:0d:
                    b4:57:7f:8d:12:84:02:7c:e7:eb:0e:a2:80:ee:3c:
                    5a:f1:30:31:86:88:ff:ef:74:ae:70:48:03:5b:26:
                    2d:72:06:75:f5:5f:40:48:6a:30:df:3c:77:5b:89:
                    86:f6:46:80:a8:3e:07:81:dc:e7:be:9d:58:44:96:
                    a1:9a:6b:8e:58:1f:7f:bd:d1:5a:25:f9:ad:b3:fc:
                    da:3c:e6:47:26:2d:93:c7:3f:48:bb:37:b6:ba:d5:
                    0e:2b:30:38:82:24:7f:97:f4:87:7b:33:6b:c2:ba:
                    6e:be:45:df:08:54:5e:c9:0e:91:d1:0b:2b:d3:44:
                    0b:a8:ee:e2:42:72:86:70:24:39:6b:65:99:d7:df:
                    71:de:ea:f2:55:45:2b:56:b9:78:1a:ff:72:63:3f:
                    bd:6d:37:fd:3f:24:1b:cb:7d:b8:2c:b8:4a:15:8a:
                    41:90:cb:84:6c:79:06:84:3a:40:51:36:fc:6f:8c:
                    1b:29:91:43:c6:59:6d:46:e5:1f:5b:d5:fb:0e:96:
                    52:55:4a:0c:53:1b:11:63:5e:cf:1a:99:68:bf:31:
                    ee:60:22:b3:55:40:fe:58:7e:7d:93:6e:72:6c:6b:
                    be:9c:25:55:2c:24:a9:a3:72:9a:5a:ea:99:60:90:
                    b4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:23:22:CC:43:74:23:AA:68:A0:B1:A4:1B:E9:9B:E2:8B:72:6B:5C
            X509v3 Authority Key Identifier:
                keyid:51:7D:96:D7:B0:FF:75:20:3B:99:24:9E:37:A5:66:C8:A5:B5:1D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UX2W17D_dSA7mSSeN6VmyKW1HUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8ef679-5a0e-412e-bb04-3465ded52707/1/ayMizEN0I6pooLGkG-mb4otya1w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8ef679-5a0e-412e-bb04-3465ded52707/1/UX2W17D_dSA7mSSeN6VmyKW1HUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.247.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:92:86:f1:38:20:62:85:b5:7f:77:57:3b:17:34:13:38:9b:
         d6:b9:6e:48:28:87:6a:73:8d:75:a0:37:a2:c5:ee:7c:91:94:
         e6:d6:c4:6e:23:39:75:6a:72:9d:50:bc:08:36:28:ae:50:36:
         0b:02:a5:aa:42:50:e7:1a:2c:1f:06:f6:13:92:98:60:6b:28:
         22:a5:97:06:79:08:05:99:ef:73:ba:fc:f7:8f:03:fa:dc:86:
         6d:53:4c:96:de:fa:99:67:7e:9e:2d:25:61:ed:88:fc:3b:cf:
         2a:a1:bb:60:4d:08:44:e0:a3:d0:5e:ca:88:1f:38:85:e2:89:
         1a:38:b7:b9:8e:3b:ed:0b:ab:5c:19:8e:50:4a:30:03:50:23:
         97:27:7b:d0:54:cd:d1:e8:cd:0b:68:48:56:33:77:45:24:b0:
         bc:bb:e3:c8:c6:e6:30:f0:fb:f7:bb:a0:95:fa:6d:9b:7c:89:
         d1:42:3f:f8:a8:77:2b:95:2e:89:b5:55:c3:37:5d:e1:4f:af:
         a8:0f:46:25:24:24:56:85:07:6b:f0:c3:8c:e9:4c:d8:5a:03:
         0d:a8:14:74:49:a2:a8:0b:15:72:3e:84:31:0c:93:4b:7c:c8:
         a1:7c:ec:90:b1:96:17:28:4e:e2:ef:d8:31:96:08:80:e6:ce:
         ae:d6:c0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:11 2024 by rpki-client on console-fra.rpki-client.org