Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f5f0ca-2df8-430f-aea7-5de67c61298e/1/KfdmubQ1Oua_2QFje2ItLyXvuVY.roa
File:                     KfdmubQ1Oua_2QFje2ItLyXvuVY.roa (raw, json)
Hash identifier:          jigZw576cSfPXaH1gphYFuF4OcmrWBsO9YcCB84w/+8=
Subject key identifier:   29:F7:66:B9:B4:35:3A:E6:BF:D9:01:63:7B:62:2D:2F:25:EF:B9:56
Certificate issuer:       /CN=b0a371c5831db97063e0cc04bce0b4e9b0066ccd
Certificate serial:       465B
Authority key identifier: B0:A3:71:C5:83:1D:B9:70:63:E0:CC:04:BC:E0:B4:E9:B0:06:6C:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sKNxxYMduXBj4MwEvOC06bAGbM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f5f0ca-2df8-430f-aea7-5de67c61298e/1/KfdmubQ1Oua_2QFje2ItLyXvuVY.roa
Signing time:             Mon 31 Jan 2022 15:54:00 +0000
ROA not before:           Mon 31 Jan 2022 15:54:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49392
IP address blocks:        93.177.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18011 (0x465b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0a371c5831db97063e0cc04bce0b4e9b0066ccd
        Validity
            Not Before: Jan 31 15:54:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=29f766b9b4353ae6bfd901637b622d2f25efb956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7e:bf:f1:ca:b8:96:90:e1:b9:3d:ce:41:43:
                    8a:6f:b3:69:5a:30:c4:1f:da:b7:14:42:ee:c6:31:
                    3e:66:a7:9b:fe:56:6b:c9:b1:a3:b8:bf:95:4c:ef:
                    7b:16:b8:87:dd:57:73:d5:35:51:7d:44:8d:a0:83:
                    c9:9a:c4:91:e2:30:aa:cf:fc:60:9f:39:25:b5:2b:
                    1e:0f:bc:9b:a9:e5:3c:e1:6a:87:ad:9e:12:b0:5f:
                    8d:8f:c0:06:f7:fe:82:eb:61:14:38:f1:71:8f:e5:
                    19:2b:67:59:af:b9:78:5e:a1:eb:14:a8:0b:7c:15:
                    72:6c:9f:89:77:e7:a5:af:49:6f:ae:b8:d0:d8:2a:
                    4d:87:77:aa:87:39:95:3b:94:c4:25:c3:0b:0f:4a:
                    29:97:8d:4f:2c:2f:3e:cb:28:e7:4d:82:4f:64:68:
                    20:e5:06:24:c4:61:4f:41:3b:5b:f3:e1:8c:40:98:
                    d3:04:4d:d5:23:22:7f:c8:c0:62:9e:c9:31:ef:3c:
                    ed:a4:95:ce:d3:21:34:7e:2a:8e:60:bf:2b:24:e0:
                    be:b4:7a:ad:f7:59:e3:d3:d3:f0:dc:5a:b2:50:58:
                    e2:2c:3f:2f:17:a0:13:b3:b9:1c:ad:5c:42:3e:df:
                    4e:1e:6c:5f:51:21:f7:bf:60:a8:ec:8b:ab:5c:36:
                    e3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F7:66:B9:B4:35:3A:E6:BF:D9:01:63:7B:62:2D:2F:25:EF:B9:56
            X509v3 Authority Key Identifier:
                keyid:B0:A3:71:C5:83:1D:B9:70:63:E0:CC:04:BC:E0:B4:E9:B0:06:6C:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKNxxYMduXBj4MwEvOC06bAGbM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f5f0ca-2df8-430f-aea7-5de67c61298e/1/KfdmubQ1Oua_2QFje2ItLyXvuVY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f5f0ca-2df8-430f-aea7-5de67c61298e/1/sKNxxYMduXBj4MwEvOC06bAGbM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:4f:52:af:c2:b7:cf:4a:60:64:a1:55:01:05:e5:29:05:b4:
         97:89:f3:63:fe:45:da:5d:26:27:cc:43:ca:21:9f:57:43:ea:
         8d:98:d5:5e:93:17:00:2a:71:6c:c1:03:6c:b9:4e:40:d8:15:
         6e:62:83:51:31:24:b6:59:b6:58:44:b0:2f:4c:b0:23:66:75:
         e2:9f:76:bb:69:71:ea:89:ab:72:93:34:61:2a:a9:62:e4:aa:
         4f:9b:22:b4:d3:8f:c7:d9:0b:44:76:a4:dd:60:42:37:2e:1b:
         22:8f:9f:02:ae:0f:da:a7:52:7e:d9:6e:0f:aa:31:b6:c5:b2:
         3f:a5:b9:2f:04:39:88:d5:57:a6:89:fe:87:4c:9f:e7:07:47:
         85:ba:c6:80:3f:e4:9f:96:b1:91:61:50:a4:af:53:f1:23:7f:
         8e:41:a5:11:b0:d3:d8:6f:e1:66:49:e9:06:a5:f3:c2:34:29:
         4f:6c:f5:69:d4:64:b6:a9:53:a4:b3:23:13:b8:34:0e:cf:59:
         e5:9f:6c:c4:58:74:92:43:fc:c8:9d:a9:84:e0:71:32:3a:96:
         f2:f9:1e:a8:78:ae:6f:be:eb:44:83:e7:f7:ef:c2:ae:ca:0c:
         01:6c:0f:93:6d:6c:ed:76:ed:8d:8c:c4:77:8d:c9:53:2e:fa:
         67:dd:64:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org