Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Fd_rp-s0ClKYlKUf0EK7sivq7c8.roa
File:                     Fd_rp-s0ClKYlKUf0EK7sivq7c8.roa (raw, json)
Hash identifier:          K6Z1ZU7eGcu04DXsFgX/cMe6hmc3eDdUJpvLlxIcO3w=
Subject key identifier:   15:DF:EB:A7:EB:34:0A:52:98:94:A5:1F:D0:42:BB:B2:2B:EA:ED:CF
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       03151A37
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Fd_rp-s0ClKYlKUf0EK7sivq7c8.roa
Signing time:             Sat 01 Jan 2022 07:53:55 +0000
ROA not before:           Sat 01 Jan 2022 07:53:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     46573
IP address blocks:        91.199.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51714615 (0x3151a37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Jan  1 07:53:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15dfeba7eb340a529894a51fd042bbb22beaedcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fc:25:51:51:2f:7d:23:25:77:14:68:0f:9d:
                    f4:bd:82:33:de:32:fd:dd:93:f8:6e:2b:b8:f6:70:
                    91:13:3d:2b:36:5b:a1:11:92:7a:f7:3b:ae:6d:5d:
                    79:c2:5e:3f:26:b9:0d:38:81:31:b2:df:fa:4b:1b:
                    05:c6:d9:60:ed:4f:52:86:76:16:76:ea:32:e2:cd:
                    7d:d2:26:06:2e:a8:86:9d:41:15:3d:c5:22:76:7b:
                    e5:b2:94:dc:27:53:00:1d:b4:bf:4e:d2:d7:04:14:
                    df:06:ec:c3:a9:e5:71:e7:b3:90:eb:b1:c2:fc:ac:
                    3c:97:7a:34:11:e4:c1:fb:3d:6b:4a:55:de:e1:f8:
                    5f:88:23:6f:70:c2:c5:76:85:42:07:5f:2a:78:8f:
                    c5:76:fe:46:0d:97:2b:9a:29:2f:51:2e:37:2a:00:
                    09:4b:28:b4:77:c8:f1:cc:af:a4:6a:54:1c:b2:04:
                    0b:8c:72:8e:8d:99:23:ce:cd:3e:20:b4:3c:b9:f2:
                    b6:85:e5:a3:43:f4:06:e3:ad:78:af:cc:de:83:f7:
                    76:8a:e8:15:78:2c:2a:47:95:45:cc:60:8f:3c:df:
                    eb:ee:a8:5f:7a:d7:46:a7:61:9a:8f:62:5f:d7:82:
                    13:5a:ec:fc:17:7f:5c:d9:8d:1f:38:1d:a3:65:cd:
                    2a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DF:EB:A7:EB:34:0A:52:98:94:A5:1F:D0:42:BB:B2:2B:EA:ED:CF
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Fd_rp-s0ClKYlKUf0EK7sivq7c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.199.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:72:9f:94:9c:00:36:fd:d0:e8:3b:40:cb:6e:0b:95:44:da:
         14:cb:64:aa:8c:df:c3:11:9a:c6:ae:3c:ab:76:31:a9:91:25:
         05:ef:ee:0c:72:3f:54:3a:70:4f:a1:4a:46:c9:f0:97:c3:81:
         06:ac:69:6e:ff:b3:86:eb:ee:77:60:d5:62:fe:8a:5f:0d:d9:
         ba:97:8e:c5:93:9c:ca:74:2a:b1:7c:5a:03:d8:7e:32:3b:cf:
         cc:1a:5f:d7:d3:7f:4a:01:7c:6b:ca:72:86:1f:27:b3:54:7a:
         85:65:99:c5:8b:e9:d3:6e:41:ac:50:77:17:9c:8b:30:86:2f:
         d3:03:51:87:7c:ce:ce:7c:b0:52:52:f4:34:09:81:f6:1c:79:
         72:4b:f5:5e:2f:f5:66:e2:57:cd:b0:0f:5a:f2:b7:c5:96:0a:
         da:fa:c7:21:36:40:59:e5:18:d9:1c:54:70:e6:56:fa:43:65:
         86:ec:3a:33:0d:66:69:51:05:cf:2c:69:4a:c8:8b:ac:3c:e5:
         36:c8:ef:a3:8c:44:05:8a:65:35:b8:11:54:16:92:d4:5c:83:
         36:df:74:44:68:b5:75:d1:f6:c6:91:5d:94:52:73:cd:6c:90:
         0a:1b:52:57:02:86:d3:94:a2:b6:37:6e:b0:8a:a4:83:e3:b0:
         09:4d:e5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org