Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8ef679-5a0e-412e-bb04-3465ded52707/1/lWU2Xvd108kT8PSNl7yGRZSZrxY.roa
File:                     lWU2Xvd108kT8PSNl7yGRZSZrxY.roa (raw, json)
Hash identifier:          /vI9vrPEkXizZ/V69EBglaVGtPFeTTFUWovpsZksh9U=
Subject key identifier:   95:65:36:5E:F7:75:D3:C9:13:F0:F4:8D:97:BC:86:45:94:99:AF:16
Certificate issuer:       /CN=517d96d7b0ff75203b99249e37a566c8a5b51d4a
Certificate serial:       0168999E
Authority key identifier: 51:7D:96:D7:B0:FF:75:20:3B:99:24:9E:37:A5:66:C8:A5:B5:1D:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UX2W17D_dSA7mSSeN6VmyKW1HUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/8ef679-5a0e-412e-bb04-3465ded52707/1/lWU2Xvd108kT8PSNl7yGRZSZrxY.roa
Signing time:             Thu 07 Apr 2022 01:32:43 +0000
ROA not before:           Thu 07 Apr 2022 01:32:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7029
IP address blocks:        91.247.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23632286 (0x168999e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517d96d7b0ff75203b99249e37a566c8a5b51d4a
        Validity
            Not Before: Apr  7 01:32:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9565365ef775d3c913f0f48d97bc86459499af16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:00:6e:46:0b:fb:3c:01:5c:4f:cb:c0:79:46:
                    63:ef:5c:74:6b:d0:10:c9:97:99:eb:01:b4:78:7b:
                    a0:f8:9e:0a:15:42:68:85:b9:90:f5:f6:44:de:b7:
                    41:d2:b4:99:c0:48:5a:48:1d:14:96:53:61:d6:b4:
                    23:eb:1f:67:9c:a7:9e:2c:f4:17:d8:ba:79:a9:87:
                    62:14:29:f6:49:9f:7a:ba:2d:51:98:b7:ad:c1:96:
                    ba:00:30:20:9d:7f:4e:28:db:cf:58:d6:3d:c5:97:
                    85:63:e7:fa:fb:70:59:52:d0:f3:dc:b6:7c:57:90:
                    c2:75:db:a2:4a:9c:3a:cd:0d:38:83:d9:1c:b8:6e:
                    ba:19:04:61:4f:9f:69:38:12:95:44:93:e5:63:01:
                    54:80:78:e9:43:d1:67:4e:17:4e:b7:cc:36:9e:d5:
                    2e:56:c7:15:d3:c1:d0:96:82:6e:79:d7:7e:a2:7d:
                    4e:c3:5b:2e:24:af:0f:47:38:2a:33:b6:96:d7:2e:
                    5e:0a:81:22:13:a0:c0:58:8a:c7:d3:37:01:de:94:
                    cc:da:f1:07:52:50:2e:02:ad:48:13:2b:b8:db:20:
                    09:34:cc:f0:fa:85:98:56:50:7b:a4:45:30:c4:ae:
                    5d:cd:ae:68:ca:c4:6a:bc:ed:00:d0:5d:aa:e5:d1:
                    48:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:65:36:5E:F7:75:D3:C9:13:F0:F4:8D:97:BC:86:45:94:99:AF:16
            X509v3 Authority Key Identifier:
                keyid:51:7D:96:D7:B0:FF:75:20:3B:99:24:9E:37:A5:66:C8:A5:B5:1D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UX2W17D_dSA7mSSeN6VmyKW1HUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8ef679-5a0e-412e-bb04-3465ded52707/1/lWU2Xvd108kT8PSNl7yGRZSZrxY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8ef679-5a0e-412e-bb04-3465ded52707/1/UX2W17D_dSA7mSSeN6VmyKW1HUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.247.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:79:f2:a5:6b:61:1f:df:76:4c:3a:bb:f2:25:75:fe:49:e6:
         70:58:9b:a5:32:be:81:34:c9:24:51:e6:58:bb:fe:7d:7b:df:
         74:9e:3d:25:0d:da:ba:30:a4:1a:3b:50:9c:3b:18:ca:20:1b:
         46:5b:b7:5a:e1:af:7b:85:c1:92:ba:75:da:ee:ae:7e:bd:0a:
         bf:bd:3e:28:23:78:4e:49:8c:8a:85:32:69:0c:48:21:91:dd:
         f4:18:45:25:3b:67:56:a6:ea:a2:63:9b:55:6a:c9:bd:cb:e1:
         11:50:dc:9d:b3:ee:fd:7a:fc:43:45:3e:0c:ef:3f:81:d6:ae:
         92:b3:2d:11:e6:12:06:8b:e7:66:0c:c3:52:7d:f2:ea:7e:a7:
         6f:63:6a:88:80:11:2d:b1:0b:bb:be:bc:a6:27:bd:6c:c0:5e:
         57:3c:c0:6c:f7:4a:7b:ac:60:fa:47:af:2e:1b:13:15:2f:bf:
         44:80:99:e0:ca:bd:db:64:cc:15:f2:ac:d5:2d:64:f5:46:5d:
         20:5e:54:ff:e0:24:92:af:de:b7:48:bb:f8:5d:36:ca:70:0a:
         1f:79:fc:ca:93:7b:96:f4:b1:94:08:d5:3b:b5:2c:e9:07:60:
         a0:ff:61:2d:d6:d8:26:49:8f:97:0c:a6:3b:e6:76:b6:7a:92:
         2f:7a:e4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:31 2024 by rpki-client on console-ams.rpki-client.org