Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8ef679-5a0e-412e-bb04-3465ded52707/1/b_6PbHbwXLG6A4BG_Hrd-6Ir5N0.roa
File:                     b_6PbHbwXLG6A4BG_Hrd-6Ir5N0.roa (raw, json)
Hash identifier:          zb8Y0DYhlNfLqEF2fK9dx43oQC4se8l4TmRQcuKf+u4=
Subject key identifier:   6F:FE:8F:6C:76:F0:5C:B1:BA:03:80:46:FC:7A:DD:FB:A2:2B:E4:DD
Certificate issuer:       /CN=517d96d7b0ff75203b99249e37a566c8a5b51d4a
Certificate serial:       019B77BD
Authority key identifier: 51:7D:96:D7:B0:FF:75:20:3B:99:24:9E:37:A5:66:C8:A5:B5:1D:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UX2W17D_dSA7mSSeN6VmyKW1HUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/8ef679-5a0e-412e-bb04-3465ded52707/1/b_6PbHbwXLG6A4BG_Hrd-6Ir5N0.roa
Signing time:             Tue 26 Apr 2022 13:16:39 +0000
ROA not before:           Tue 26 Apr 2022 13:16:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     10753
IP address blocks:        91.247.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26965949 (0x19b77bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517d96d7b0ff75203b99249e37a566c8a5b51d4a
        Validity
            Not Before: Apr 26 13:16:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6ffe8f6c76f05cb1ba038046fc7addfba22be4dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d5:b0:c3:1f:24:6d:0f:07:b1:55:1c:8e:97:
                    76:0e:29:93:48:f0:e4:60:04:4d:ff:a9:29:11:f6:
                    a7:0f:db:6a:5b:f1:ce:f1:33:55:f0:d1:68:54:ea:
                    b3:12:e7:3f:c1:13:ea:d8:5a:18:77:e6:67:53:34:
                    97:78:be:7f:8e:a8:c8:7a:ba:33:68:66:e4:e1:ef:
                    ee:19:a2:86:35:8a:97:af:e7:d2:44:15:55:b0:45:
                    eb:ca:2f:9f:f4:0b:25:cd:e2:77:80:d0:47:7f:61:
                    d9:81:44:02:1d:78:1f:b7:19:04:4f:ce:a3:95:38:
                    14:ad:c5:c0:a6:8c:fd:23:1a:84:41:59:0d:77:ab:
                    ad:eb:8c:fa:c3:7f:96:e5:12:2c:ae:35:3f:78:ed:
                    50:d7:43:a8:46:cf:85:68:a3:eb:bc:cd:73:bd:fc:
                    06:0c:5a:44:35:d1:b6:cc:25:dd:04:f8:19:d1:a8:
                    b0:84:5a:01:78:67:bc:38:bc:15:dd:37:d2:bd:57:
                    8e:93:89:c3:47:80:ce:7f:fd:5a:8f:bf:bd:a1:e3:
                    94:b0:2d:e3:f8:52:ce:41:9f:a7:ea:3a:57:55:68:
                    fb:12:bc:e4:eb:e5:98:a2:33:4e:5e:9f:de:a1:7a:
                    e7:d0:c4:e2:e5:4b:93:67:4a:a9:0e:6e:42:b3:1d:
                    37:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FE:8F:6C:76:F0:5C:B1:BA:03:80:46:FC:7A:DD:FB:A2:2B:E4:DD
            X509v3 Authority Key Identifier:
                keyid:51:7D:96:D7:B0:FF:75:20:3B:99:24:9E:37:A5:66:C8:A5:B5:1D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UX2W17D_dSA7mSSeN6VmyKW1HUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8ef679-5a0e-412e-bb04-3465ded52707/1/b_6PbHbwXLG6A4BG_Hrd-6Ir5N0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8ef679-5a0e-412e-bb04-3465ded52707/1/UX2W17D_dSA7mSSeN6VmyKW1HUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.247.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:76:45:22:a4:90:7f:be:6b:f1:e8:09:dc:15:dd:9f:47:e5:
         d5:f4:06:c1:d3:9f:0c:bb:21:4e:c1:c7:4b:65:26:3a:51:94:
         9c:bd:c5:1b:40:c5:e6:57:02:1d:15:9c:b0:77:c9:35:c5:c7:
         b7:52:85:93:20:e7:df:a4:84:06:80:ce:24:6b:7c:a1:20:c6:
         8c:2f:ee:a5:b3:d8:ff:1f:32:ad:f4:f7:b2:03:30:5a:05:57:
         31:ed:5e:e7:20:a9:37:fb:d5:0b:ee:db:fa:76:42:b6:ab:2b:
         6e:df:53:83:a4:82:ce:67:f9:64:4a:56:d8:fa:28:d3:4b:3f:
         f2:12:5a:a2:e4:ea:27:47:9d:81:6e:97:21:77:2d:e1:d6:ac:
         07:88:05:bc:9f:95:73:8d:c7:55:36:d0:88:b9:76:3c:69:0f:
         c7:f8:88:ba:bc:89:46:8a:60:04:5e:45:81:4f:75:cf:91:55:
         3a:a8:77:77:16:c9:69:02:2f:0a:99:cd:ac:19:16:96:48:8c:
         69:b7:9a:85:31:3e:f0:d3:b5:6d:86:c0:48:c8:2c:73:3a:f5:
         c0:c4:cd:b7:4f:5a:b0:68:14:d6:cd:d9:0b:cd:d6:4c:9c:7f:
         fb:bc:e6:1e:ae:20:f2:d1:45:91:2a:40:f1:74:9d:70:da:7a:
         b3:d9:8e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:11 2024 by rpki-client on console-fra.rpki-client.org