Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c4de5e-3ad5-455d-ad28-7c48488af02c/1/wL6BcdBDCCjRQyuK79sQHgyi5aM.roa
File:                     wL6BcdBDCCjRQyuK79sQHgyi5aM.roa (raw, json)
Hash identifier:          21xx2YCQkPTqjA3rjcfV5JPEsXrIhf+CTbYDODu6Jug=
Subject key identifier:   C0:BE:81:71:D0:43:08:28:D1:43:2B:8A:EF:DB:10:1E:0C:A2:E5:A3
Certificate issuer:       /CN=9de09a41cd7bed771d77205487e7a1823a0c03a2
Certificate serial:       01889172AF82B24261A2414FD14D93EB5E27
Authority key identifier: 9D:E0:9A:41:CD:7B:ED:77:1D:77:20:54:87:E7:A1:82:3A:0C:03:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/neCaQc177XcddyBUh-ehgjoMA6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c4de5e-3ad5-455d-ad28-7c48488af02c/1/wL6BcdBDCCjRQyuK79sQHgyi5aM.roa
Signing time:             Tue 06 Jun 2023 16:03:12 +0000
ROA not before:           Tue 06 Jun 2023 16:03:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51765
IP address blocks:        91.246.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:91:72:af:82:b2:42:61:a2:41:4f:d1:4d:93:eb:5e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de09a41cd7bed771d77205487e7a1823a0c03a2
        Validity
            Not Before: Jun  6 16:03:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c0be8171d0430828d1432b8aefdb101e0ca2e5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:da:eb:ab:d3:29:7a:4f:fe:93:dd:bf:df:
                    5b:c9:58:70:66:99:33:ff:00:df:fa:7c:a4:0f:d4:
                    60:7b:61:0e:1a:8e:82:e2:96:54:30:b2:59:50:8a:
                    3f:ed:58:14:93:b6:07:3e:6f:f4:38:ef:bb:58:76:
                    bc:13:25:bd:df:4d:a1:41:15:7c:0d:f8:b8:42:60:
                    97:d9:e9:bb:29:a4:af:55:b8:4b:3c:a6:0f:97:0b:
                    9a:64:47:c9:12:e5:e5:2f:a2:17:f0:94:d5:e9:b0:
                    f7:55:a7:b2:1c:ea:87:9b:7e:4c:a8:38:49:7b:c0:
                    88:aa:31:6b:4e:d9:29:cd:d6:2a:ab:95:5e:97:fa:
                    30:8a:ca:e0:39:f2:14:7b:c8:50:86:97:86:56:e4:
                    09:2f:fc:73:4b:1f:77:8f:75:2a:e3:ca:fd:63:c1:
                    21:5b:bb:24:d4:d0:9a:19:3b:1d:77:f9:d5:9f:5a:
                    e1:62:b5:c7:7c:a3:33:f0:e3:72:39:3c:91:2f:52:
                    2b:7e:f3:97:94:09:d5:f4:da:47:e7:b3:10:8f:14:
                    55:f1:2e:ee:81:6a:c0:cd:a2:f7:75:23:0b:21:9d:
                    d6:0c:c1:e3:f1:6f:e9:70:c7:11:86:a4:f4:8c:ac:
                    42:2c:4e:d4:1b:93:c3:4d:f6:db:d0:26:a6:da:a1:
                    5a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BE:81:71:D0:43:08:28:D1:43:2B:8A:EF:DB:10:1E:0C:A2:E5:A3
            X509v3 Authority Key Identifier:
                keyid:9D:E0:9A:41:CD:7B:ED:77:1D:77:20:54:87:E7:A1:82:3A:0C:03:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neCaQc177XcddyBUh-ehgjoMA6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c4de5e-3ad5-455d-ad28-7c48488af02c/1/wL6BcdBDCCjRQyuK79sQHgyi5aM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c4de5e-3ad5-455d-ad28-7c48488af02c/1/neCaQc177XcddyBUh-ehgjoMA6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.246.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:33:87:8f:a4:10:c0:8d:e7:ca:9d:e7:ff:40:58:dd:5b:c4:
         9e:33:07:14:0a:b8:98:20:64:d8:6e:8c:54:9a:a0:d2:b1:50:
         bc:60:99:db:7f:85:1e:2e:4f:be:c7:90:25:d1:62:07:54:c5:
         87:16:d9:7c:f2:64:fa:a0:a7:57:02:9f:45:e5:f6:1a:8f:8b:
         50:c3:db:40:fd:bb:0e:cd:2d:0b:92:60:9a:ea:8b:4c:41:67:
         b2:a3:30:1c:95:c4:a9:73:fb:89:29:17:a1:35:ad:5d:60:8b:
         1b:66:9b:ad:7c:81:54:49:72:77:c8:a8:6c:27:80:18:40:4d:
         1f:47:e1:70:5b:5a:da:13:ee:e1:d6:fe:a5:1b:fb:72:d2:0b:
         7f:22:55:3a:d9:25:7c:14:fb:c6:33:38:19:1a:9a:84:9a:8a:
         d7:61:f9:eb:fa:75:b4:41:81:72:03:1e:ab:76:4b:f6:70:26:
         73:39:f3:ab:9f:aa:96:47:ca:f4:d6:62:48:54:1d:af:87:57:
         6e:89:54:05:d8:0c:d6:fd:8d:d6:b1:6e:04:f9:19:8e:e6:89:
         96:2e:8d:c9:e5:d9:56:b0:06:84:78:58:d9:3a:8e:5a:e8:70:
         29:60:b4:e9:0a:12:43:e8:2e:87:b4:be:89:6e:fe:1a:0e:16:
         03:20:54:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:02 2024 by rpki-client on console-fra.rpki-client.org