Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/w4u8uwqNYiLARJ6kCkfW0-EBh1M.roa
File:                     w4u8uwqNYiLARJ6kCkfW0-EBh1M.roa (raw, json)
Hash identifier:          wSEi21Sbn21+c2BbXVz8OaTPcs13qnjix3AJr2mXELc=
Subject key identifier:   C3:8B:BC:BB:0A:8D:62:22:C0:44:9E:A4:0A:47:D6:D3:E1:01:87:53
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       0181D72E5CD280193D666D47970F097A1FCF
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/w4u8uwqNYiLARJ6kCkfW0-EBh1M.roa
Signing time:             Thu 07 Jul 2022 05:42:28 +0000
ROA not before:           Thu 07 Jul 2022 05:42:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48678
IP address blocks:        91.198.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d7:2e:5c:d2:80:19:3d:66:6d:47:97:0f:09:7a:1f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Jul  7 05:42:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c38bbcbb0a8d6222c0449ea40a47d6d3e1018753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b3:73:34:83:db:42:3f:2a:e6:8f:c0:06:0b:
                    a6:84:d3:1f:53:cd:d4:01:dc:42:14:06:26:e3:70:
                    28:09:7a:05:d6:42:1f:c2:45:05:43:d1:25:3f:ec:
                    b3:ed:5f:d4:dc:ab:7c:29:0d:da:3e:c1:00:de:97:
                    61:87:a2:5c:9b:3d:ae:fa:dd:63:4d:0c:bf:a8:cc:
                    4b:11:d4:fc:c4:fc:6d:b8:71:57:f8:7c:1a:a3:91:
                    c1:79:9f:4c:1a:f4:59:93:05:c0:2f:b0:50:60:cc:
                    08:72:80:bf:58:78:2c:89:93:21:34:01:eb:9d:dc:
                    4f:2d:76:9a:b4:12:ab:66:1e:6f:95:ae:4b:18:d9:
                    f7:a7:fc:49:2e:22:70:48:d3:36:e2:b4:9c:79:f4:
                    1b:55:2b:fa:49:5c:32:28:e5:b9:b6:9f:c1:c1:f1:
                    8b:0c:b4:75:b4:71:3a:12:da:c4:49:75:eb:dd:f7:
                    a7:48:bd:c9:5e:dd:54:25:08:31:04:2e:c7:97:5e:
                    7d:53:c1:ff:39:be:9f:35:06:f4:b0:ba:ba:38:77:
                    d7:18:89:60:74:27:28:b6:86:86:2f:da:8f:e4:7c:
                    80:c7:6f:da:38:cd:73:fe:4a:ba:9e:cd:a9:0d:26:
                    34:27:78:6f:e6:ba:37:9a:0b:6c:84:22:88:07:00:
                    b3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8B:BC:BB:0A:8D:62:22:C0:44:9E:A4:0A:47:D6:D3:E1:01:87:53
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/w4u8uwqNYiLARJ6kCkfW0-EBh1M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.198.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:78:7a:e1:ec:13:12:62:4c:a6:25:b8:72:f5:71:cb:63:96:
         3c:a9:82:88:60:bf:c5:ee:c7:6a:29:6f:30:01:b0:78:fc:b5:
         7d:62:da:6e:cc:c7:36:fd:16:73:5e:e5:ed:cb:a3:99:c2:18:
         dd:aa:df:56:f4:0c:d8:9f:11:40:fc:81:48:12:87:f8:73:80:
         12:89:56:8d:d3:d5:87:08:2d:19:b2:a8:c4:16:f2:ae:de:f9:
         29:51:9f:95:42:0e:24:9b:fb:55:42:fa:dc:d8:1a:41:d6:45:
         89:7e:41:02:7e:cb:cf:a1:d5:74:5a:9c:d9:7e:9a:3e:c5:ac:
         2c:5d:6c:e7:11:55:fb:09:d2:05:6b:2a:70:54:a7:d2:21:4a:
         d0:07:62:cb:57:d7:9a:32:3c:ed:18:1a:50:2e:f2:cb:da:5a:
         c6:40:e1:6d:c9:48:81:de:65:07:2c:e5:0e:29:e4:c9:5c:03:
         0c:50:cd:32:e8:05:20:08:76:39:12:7f:65:53:99:9c:35:3d:
         e2:3c:97:b9:7e:80:1b:7e:9e:75:0f:b8:7d:f9:c4:cc:7f:ce:
         78:eb:4a:4f:d5:4b:76:ad:be:b5:78:f3:22:83:db:ad:aa:02:
         59:ca:4f:41:9c:63:a9:2b:3d:81:d7:28:5a:ad:a2:6b:20:dc:
         1c:b5:82:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:59 2024 by rpki-client on console-fra.rpki-client.org