Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/b2VDvaHX3G_K1vyHKfsPUvtoLpo.roa
File:                     b2VDvaHX3G_K1vyHKfsPUvtoLpo.roa (raw, json)
Hash identifier:          85lDUIZcq3S/FuOQyWKDUv6+B0ad+d9vfowGTKvRxo0=
Subject key identifier:   6F:65:43:BD:A1:D7:DC:6F:CA:D6:FC:87:29:FB:0F:52:FB:68:2E:9A
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       0183797898B776E6EEDB5A97AAAA5A116A92
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/b2VDvaHX3G_K1vyHKfsPUvtoLpo.roa
Signing time:             Mon 26 Sep 2022 11:04:49 +0000
ROA not before:           Mon 26 Sep 2022 11:04:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6894
IP address blocks:        91.206.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:79:78:98:b7:76:e6:ee:db:5a:97:aa:aa:5a:11:6a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Sep 26 11:04:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6f6543bda1d7dc6fcad6fc8729fb0f52fb682e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4d:c3:0c:b1:d3:38:c7:44:d4:1f:f8:d9:87:
                    9a:ab:76:dd:1a:b6:2a:91:94:ee:0d:5b:56:d2:d0:
                    0c:9b:ec:be:41:b0:0f:cd:6e:80:d6:81:ed:d2:57:
                    6c:e7:c8:66:7a:db:e0:ba:90:99:3f:d3:ff:46:b2:
                    67:20:01:e8:7d:3f:98:fb:cd:18:60:7b:b4:36:ed:
                    1a:81:34:54:d3:43:af:a7:4d:05:04:3f:87:83:30:
                    57:f5:cc:d1:1a:ad:1a:fd:85:aa:30:8b:4b:37:63:
                    a4:12:5f:0c:1c:2f:bf:ba:32:58:08:8b:2c:8b:c6:
                    4a:74:dd:09:db:65:d5:81:18:4f:bd:a3:5f:27:7a:
                    ca:2d:0c:7d:c6:da:f1:da:c1:2f:ec:b5:99:f9:8e:
                    5d:28:76:10:4f:b9:96:22:dc:b0:35:53:b0:f1:67:
                    7b:88:2f:b1:cb:b2:8e:90:84:7b:56:d0:41:54:c6:
                    bc:9f:e9:d6:27:46:d4:e1:b4:07:3c:2e:3a:92:c1:
                    a3:0f:9b:28:b9:c2:58:da:ac:f5:b3:98:64:e4:58:
                    e1:cf:29:b5:82:00:a6:ae:0c:3b:f9:50:73:ef:96:
                    6f:69:63:b0:c0:12:32:2e:a4:68:3f:cf:c3:48:7b:
                    47:94:fe:30:43:66:0d:81:ae:8d:50:66:4f:30:12:
                    09:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:65:43:BD:A1:D7:DC:6F:CA:D6:FC:87:29:FB:0F:52:FB:68:2E:9A
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/b2VDvaHX3G_K1vyHKfsPUvtoLpo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.206.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:2a:fe:f4:41:40:87:ea:88:c7:a9:ca:8b:57:56:1e:24:52:
         84:7b:98:ae:59:e6:79:1b:f8:23:67:2e:61:0e:86:dc:3c:01:
         65:6b:0e:f7:f7:b4:28:81:97:55:60:88:f6:a0:ce:45:86:26:
         99:41:3c:4d:02:de:8f:0b:c4:f8:8f:ac:89:17:68:6f:7f:2d:
         e9:5f:87:67:32:08:de:86:4e:df:db:ec:5f:6d:d7:be:fb:b1:
         3a:7c:2a:dc:b0:d1:bc:7e:6c:93:e7:f4:6a:40:45:ed:e2:1b:
         ae:0d:3f:ef:81:7f:15:4e:fd:fd:16:af:50:28:11:4f:1e:91:
         d3:d1:15:cd:a8:30:ec:a1:99:8c:f7:f2:35:8c:cc:24:b1:28:
         99:2b:66:cd:87:0b:98:aa:b8:6e:cf:6d:de:0d:0f:ec:78:12:
         20:ce:57:32:7c:fc:3c:1f:3d:4f:f9:34:ec:ba:62:20:0d:d6:
         35:d6:18:85:9c:b8:19:0d:e1:33:6f:1f:55:82:e6:39:eb:ad:
         6a:20:ef:0e:58:43:ab:78:be:44:81:5d:b2:93:cd:35:02:77:
         fc:44:45:d2:b9:94:28:51:9e:25:12:83:c0:be:63:91:ec:de:
         6a:aa:10:cb:b0:01:65:7e:27:02:62:8f:f9:ae:4a:46:43:6e:
         8b:aa:e3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:51 2024 by rpki-client on console-ams.rpki-client.org