Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f3a076-27ca-4cb1-8efa-583faf827fa0/1/LOFrmM3yDqmfukGplt0sXk8GBtQ.roa
File:                     LOFrmM3yDqmfukGplt0sXk8GBtQ.roa (raw, json)
Hash identifier:          gnEX2Hl20yDQq0DOrhUK3Jp7hHJ9uuC3TOR9m/9G3mw=
Subject key identifier:   2C:E1:6B:98:CD:F2:0E:A9:9F:BA:41:A9:96:DD:2C:5E:4F:06:06:D4
Certificate issuer:       /CN=b549a600df1ad7974fa80e3466b5b76441393759
Certificate serial:       7DC2C7
Authority key identifier: B5:49:A6:00:DF:1A:D7:97:4F:A8:0E:34:66:B5:B7:64:41:39:37:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tUmmAN8a15dPqA40ZrW3ZEE5N1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f3a076-27ca-4cb1-8efa-583faf827fa0/1/LOFrmM3yDqmfukGplt0sXk8GBtQ.roa
Signing time:             Sun 27 Mar 2022 13:23:03 +0000
ROA not before:           Sun 27 Mar 2022 13:23:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203087
IP address blocks:        93.177.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8241863 (0x7dc2c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b549a600df1ad7974fa80e3466b5b76441393759
        Validity
            Not Before: Mar 27 13:23:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2ce16b98cdf20ea99fba41a996dd2c5e4f0606d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:87:68:a6:6c:77:ba:a9:ee:6d:68:4c:71:48:
                    c3:5c:0c:c1:13:6f:21:cd:52:36:b6:1a:cf:68:b2:
                    60:f1:b8:cf:55:31:b0:64:4e:92:88:98:b5:18:65:
                    28:b9:32:e0:04:16:84:86:4c:dd:c6:72:c7:a8:70:
                    de:1a:1b:b2:19:dd:33:d1:82:ce:e7:38:6b:71:2f:
                    94:7e:45:e1:c0:3f:fa:35:4c:c7:d9:73:a5:dd:a1:
                    c4:96:2a:1c:5a:60:10:1f:b9:7e:5e:04:1c:68:11:
                    70:f0:19:f8:a8:3f:7b:48:a3:2a:78:00:f3:56:5d:
                    82:7a:b6:27:86:10:70:e5:e6:7a:1d:56:a9:06:f7:
                    f4:69:dc:db:2b:28:7c:fd:aa:1e:48:27:6e:8f:ee:
                    77:53:b3:6d:7d:bc:3e:d9:90:8c:f5:a9:c8:fa:49:
                    48:8e:56:6f:37:4a:12:57:c6:b4:5d:ba:20:53:8e:
                    6f:15:e8:61:1f:0a:8b:73:3c:b0:fd:8d:2e:12:3b:
                    bf:4d:9d:c1:40:5e:7a:2f:cf:fc:ab:e6:7e:d8:dd:
                    c0:57:fb:c4:63:9d:57:a3:07:86:41:3b:0d:a3:b2:
                    64:26:86:39:a3:dc:65:4c:20:9e:ea:bd:a7:67:02:
                    d5:bb:19:3d:5b:15:d9:bb:90:1b:d6:7c:c7:95:7a:
                    51:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E1:6B:98:CD:F2:0E:A9:9F:BA:41:A9:96:DD:2C:5E:4F:06:06:D4
            X509v3 Authority Key Identifier:
                keyid:B5:49:A6:00:DF:1A:D7:97:4F:A8:0E:34:66:B5:B7:64:41:39:37:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUmmAN8a15dPqA40ZrW3ZEE5N1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f3a076-27ca-4cb1-8efa-583faf827fa0/1/LOFrmM3yDqmfukGplt0sXk8GBtQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f3a076-27ca-4cb1-8efa-583faf827fa0/1/tUmmAN8a15dPqA40ZrW3ZEE5N1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:27:75:bd:83:1c:3d:95:31:3f:e7:ba:1d:a0:85:71:fe:1e:
         78:16:10:3b:93:c5:e8:9a:94:90:89:cf:70:2d:0d:3f:82:56:
         b1:aa:bd:c0:f1:4c:fc:32:6e:21:95:28:26:47:83:ee:51:a2:
         f0:63:5b:15:43:7f:a6:0d:9a:23:f2:bd:e6:0d:3c:51:1b:24:
         b7:e6:1b:ba:0b:c3:fb:b9:a6:7f:e1:12:60:94:88:e1:82:40:
         77:43:9a:17:6f:f7:60:e8:7f:0a:f9:b9:89:9d:6e:17:e1:b7:
         c9:54:43:f4:61:c9:64:9e:b2:13:50:17:29:dd:28:af:ed:02:
         ef:e5:25:06:3a:2f:e8:1e:0d:46:cf:da:97:13:db:78:0b:3b:
         9b:e0:67:01:31:4c:f2:1a:09:f2:26:db:2c:26:65:82:d8:63:
         27:43:f3:f0:72:b2:e3:f5:ea:9f:90:20:cb:f1:de:ee:12:24:
         25:46:20:50:a5:a0:db:cf:9c:93:6c:2b:50:d6:0d:02:76:ab:
         fa:56:f0:b7:83:c8:9f:d3:de:ca:3b:98:b1:87:83:f1:96:f3:
         60:b1:30:e0:0a:b4:ab:f3:0a:e3:71:6b:7f:80:4e:df:de:d9:
         87:b9:7d:22:a3:54:76:14:5b:da:a5:17:60:f5:95:30:ed:74:
         8a:b9:cc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:24 2024 by rpki-client on console-fra.rpki-client.org