Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/83d49c-1e18-43d3-8e3f-dc7a50e51b39/1/Ls-y_BV1v11UGLs0LiVEgEDK4bM.roa
File:                     Ls-y_BV1v11UGLs0LiVEgEDK4bM.roa (raw, json)
Hash identifier:          t4HLjB9X3V0bfJu1NlLUt7/uvT4ZsypK6mj6uJB3nKM=
Subject key identifier:   2E:CF:B2:FC:15:75:BF:5D:54:18:BB:34:2E:25:44:80:40:CA:E1:B3
Certificate issuer:       /CN=7971511116a533bd6aaf4217d4dfc3f3e0cb4978
Certificate serial:       01856F390F98D4A47EE88E2BC16E5502D5AB
Authority key identifier: 79:71:51:11:16:A5:33:BD:6A:AF:42:17:D4:DF:C3:F3:E0:CB:49:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXFRERalM71qr0IX1N_D8-DLSXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/83d49c-1e18-43d3-8e3f-dc7a50e51b39/1/Ls-y_BV1v11UGLs0LiVEgEDK4bM.roa
Signing time:             Sun 01 Jan 2023 21:24:48 +0000
ROA not before:           Sun 01 Jan 2023 21:24:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        91.247.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:39:0f:98:d4:a4:7e:e8:8e:2b:c1:6e:55:02:d5:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7971511116a533bd6aaf4217d4dfc3f3e0cb4978
        Validity
            Not Before: Jan  1 21:24:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2ecfb2fc1575bf5d5418bb342e25448040cae1b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:35:0d:c6:96:ac:bc:85:50:c7:de:1f:e5:1c:
                    ac:5d:6a:22:f3:cf:3c:f7:04:f3:94:e4:96:ca:fc:
                    94:bd:f0:40:2b:8c:3c:fe:f2:fe:a4:39:26:49:a1:
                    75:81:33:24:bf:c3:8e:f7:fc:4f:5f:6f:b0:aa:3b:
                    a7:75:df:51:67:95:ac:45:cd:a5:58:1b:fa:ae:b7:
                    ff:0a:3b:3e:6e:bb:aa:8a:b3:15:1d:0b:bd:22:35:
                    63:97:3e:2a:51:da:8f:8e:f0:1f:9a:fa:57:02:b3:
                    90:03:6c:ee:79:65:f1:f0:3f:31:c8:c1:f4:36:2a:
                    4f:41:b2:be:e9:04:4c:c0:b9:0c:ec:14:a0:c2:d7:
                    3b:fe:8c:57:40:a9:27:00:16:20:2a:49:fc:bb:4b:
                    8b:82:fe:1e:81:8e:ad:89:7e:1f:28:33:36:1a:dd:
                    a3:23:84:ba:5e:22:50:c3:64:0c:52:32:7f:26:29:
                    2b:1f:a6:87:e4:a0:e3:5f:14:ae:39:97:bb:d8:58:
                    4f:d8:71:0a:f5:dd:16:01:79:8a:e8:08:d1:a9:4f:
                    e1:3e:21:46:6e:a7:11:c8:79:d0:7c:59:cd:b5:ec:
                    83:7e:a1:37:2d:86:19:2a:78:77:5e:70:3d:73:7d:
                    4e:f3:12:7a:d3:6a:bc:f8:08:69:07:be:17:d4:a1:
                    63:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CF:B2:FC:15:75:BF:5D:54:18:BB:34:2E:25:44:80:40:CA:E1:B3
            X509v3 Authority Key Identifier:
                keyid:79:71:51:11:16:A5:33:BD:6A:AF:42:17:D4:DF:C3:F3:E0:CB:49:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXFRERalM71qr0IX1N_D8-DLSXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/83d49c-1e18-43d3-8e3f-dc7a50e51b39/1/Ls-y_BV1v11UGLs0LiVEgEDK4bM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/83d49c-1e18-43d3-8e3f-dc7a50e51b39/1/eXFRERalM71qr0IX1N_D8-DLSXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.247.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:32:6d:70:2f:52:65:3e:1b:4b:82:d1:77:11:4d:f7:99:63:
         cd:31:b5:ce:2d:4e:57:2d:ed:b9:1c:fe:ac:ff:26:08:6c:c7:
         75:a3:e7:99:6b:d2:9a:c5:48:e2:cc:18:9f:9a:4b:1b:9f:c0:
         10:3c:73:28:ee:56:f1:ca:7e:9c:bc:a7:48:9d:7f:97:1d:0c:
         1b:b8:60:7c:8a:2b:0f:24:01:ba:ba:ae:7c:39:63:d8:1c:2c:
         b5:ea:a8:68:c7:d1:35:d6:c9:e9:9a:eb:b4:3e:61:12:e2:6a:
         5b:b5:f6:1e:24:3a:bc:ec:b8:07:e4:bf:4d:aa:59:ae:9e:1b:
         95:6d:61:80:32:12:c5:21:77:89:bc:60:35:04:5b:aa:c1:c9:
         c0:d1:04:06:05:78:74:2d:3c:68:50:f2:67:82:f0:34:35:31:
         ea:d2:f4:12:b4:25:c7:fc:f4:78:a5:45:ea:c9:12:77:9b:84:
         e0:9b:ef:f7:65:4e:87:f0:3a:a1:b2:b6:7b:df:36:92:60:7c:
         76:d0:f8:c8:e2:16:13:33:09:62:d6:5d:f7:67:39:bb:14:04:
         db:45:30:7b:e6:8b:6e:11:87:9f:d5:90:23:be:94:10:32:a9:
         87:6b:8a:fd:d1:aa:04:f9:ee:8b:54:40:c3:b2:87:7d:ce:42:
         ee:19:e0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:04 2024 by rpki-client on console-ams.rpki-client.org