Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a04b28-3918-4259-bd25-73d8df5eb288/1/myTjjpmw7kOacxtQfgK9VxXpQMQ.roa
File:                     myTjjpmw7kOacxtQfgK9VxXpQMQ.roa (raw, json)
Hash identifier:          vBpgiytCg3FDlySnorm9JSAB/oDsNiDNbSj3rowWD5I=
Subject key identifier:   9B:24:E3:8E:99:B0:EE:43:9A:73:1B:50:7E:02:BD:57:15:E9:40:C4
Certificate issuer:       /CN=0b0262eb9b43781af47bfd833d7b2a8ed5bd69c0
Certificate serial:       018382DE934F09D7CB89490037C59543943E
Authority key identifier: 0B:02:62:EB:9B:43:78:1A:F4:7B:FD:83:3D:7B:2A:8E:D5:BD:69:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CwJi65tDeBr0e_2DPXsqjtW9acA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/a04b28-3918-4259-bd25-73d8df5eb288/1/myTjjpmw7kOacxtQfgK9VxXpQMQ.roa
Signing time:             Wed 28 Sep 2022 06:52:48 +0000
ROA not before:           Wed 28 Sep 2022 06:52:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210703
IP address blocks:        31.41.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:82:de:93:4f:09:d7:cb:89:49:00:37:c5:95:43:94:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b0262eb9b43781af47bfd833d7b2a8ed5bd69c0
        Validity
            Not Before: Sep 28 06:52:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b24e38e99b0ee439a731b507e02bd5715e940c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:87:3f:e7:f2:9d:90:18:11:c0:07:e9:43:da:
                    86:b8:18:31:65:5a:80:5d:1a:5b:0e:d9:93:af:bc:
                    c2:e2:e8:55:21:a3:c5:d9:b1:27:45:5f:39:f5:6b:
                    7d:3a:89:94:e2:fa:ed:5d:8f:bd:f8:bb:fb:4e:cd:
                    37:62:19:b0:2f:17:97:22:fb:23:4f:b6:36:f5:bc:
                    c2:06:1b:91:a3:62:fb:86:7b:e1:3a:fb:c8:f0:fb:
                    71:dd:e5:06:28:b1:d0:59:35:ac:a0:2c:97:c0:0d:
                    cd:66:b4:fb:bf:32:1e:db:3a:c0:ea:ad:be:63:83:
                    16:f6:15:20:17:0e:0a:3e:1c:39:f4:98:60:89:5e:
                    6d:7d:5d:6a:3b:10:0b:52:56:4b:a4:43:45:15:4f:
                    b2:2d:96:a2:25:31:dd:a6:21:ac:1f:65:8b:69:2e:
                    9a:73:c3:2e:ae:5c:9c:54:0f:1b:5e:4c:c1:02:38:
                    7b:db:bd:b2:1a:0d:50:09:58:22:cc:a5:4f:ea:ff:
                    4c:5d:d4:70:67:04:d7:cb:0a:c9:7d:86:e0:10:e0:
                    fe:05:db:1a:39:9f:d7:ad:58:5c:b9:b9:3a:c3:1e:
                    c0:0f:6d:0a:22:72:51:9f:6b:f5:43:17:64:f9:45:
                    f2:19:b9:ab:33:15:31:87:d0:fd:fc:3d:09:66:6a:
                    11:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:24:E3:8E:99:B0:EE:43:9A:73:1B:50:7E:02:BD:57:15:E9:40:C4
            X509v3 Authority Key Identifier:
                keyid:0B:02:62:EB:9B:43:78:1A:F4:7B:FD:83:3D:7B:2A:8E:D5:BD:69:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CwJi65tDeBr0e_2DPXsqjtW9acA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a04b28-3918-4259-bd25-73d8df5eb288/1/myTjjpmw7kOacxtQfgK9VxXpQMQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a04b28-3918-4259-bd25-73d8df5eb288/1/CwJi65tDeBr0e_2DPXsqjtW9acA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.41.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:48:27:97:c1:78:87:8d:e9:db:87:e2:f0:63:1c:9d:3e:9d:
         bc:09:b0:49:55:2a:cd:90:54:4e:f7:51:e0:d9:91:b5:46:1c:
         dd:ce:d3:c2:4e:f4:1e:7b:38:fe:db:c3:2e:78:a9:08:40:5d:
         7e:b2:5c:97:d8:68:53:c4:ed:2b:21:67:b2:72:da:e5:61:b8:
         73:6d:7e:fc:50:79:c9:73:f8:2f:96:41:f3:b1:d6:bc:11:5a:
         60:2f:06:5f:1c:ff:ae:02:d7:73:0b:b8:3b:8e:63:c3:d3:8b:
         f0:ee:8a:09:5b:55:e8:00:91:eb:22:c7:0d:31:04:41:04:8a:
         72:ef:80:9a:83:1b:e7:ed:e2:89:29:0f:ed:3a:8a:d2:16:e0:
         33:9b:33:c5:20:a8:44:78:6f:f6:d9:0f:b9:f4:33:63:20:57:
         80:5e:72:ee:06:3f:5e:e2:a2:8a:7d:4b:c5:07:bb:f1:3e:c2:
         c2:9a:3c:64:3e:70:81:2d:34:c0:ad:e0:e7:07:87:ed:a2:2c:
         ec:e5:62:84:57:05:a8:89:ca:9a:be:31:95:c6:45:2d:03:ed:
         66:bb:64:8c:b6:72:e8:8d:17:36:e6:38:64:44:20:d4:4f:74:
         52:c8:12:20:2c:e5:7c:3e:af:70:a9:90:4e:3c:90:3a:d0:25:
         89:d0:a6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:20 2024 by rpki-client on console-fra.rpki-client.org