Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/871064-8ab3-406d-9170-ed63cbb56e33/1/R3tHvRzAhEjA6DzaaaIVtB3XFUk.roa
File:                     R3tHvRzAhEjA6DzaaaIVtB3XFUk.roa (raw, json)
Hash identifier:          1KH/eE9CwfKRLjHjPzJ4yv/TCHlaTH1IdrGP6LXmGx8=
Subject key identifier:   47:7B:47:BD:1C:C0:84:48:C0:E8:3C:DA:69:A2:15:B4:1D:D7:15:49
Certificate issuer:       /CN=6f6a32ddbc6531015e77d36d10c969d86013da4d
Certificate serial:       021172A5
Authority key identifier: 6F:6A:32:DD:BC:65:31:01:5E:77:D3:6D:10:C9:69:D8:60:13:DA:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b2oy3bxlMQFed9NtEMlp2GAT2k0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/871064-8ab3-406d-9170-ed63cbb56e33/1/R3tHvRzAhEjA6DzaaaIVtB3XFUk.roa
Signing time:             Sat 01 Jan 2022 05:57:14 +0000
ROA not before:           Sat 01 Jan 2022 05:57:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     5089
IP address blocks:        81.90.176.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34697893 (0x21172a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f6a32ddbc6531015e77d36d10c969d86013da4d
        Validity
            Not Before: Jan  1 05:57:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=477b47bd1cc08448c0e83cda69a215b41dd71549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:42:71:2a:98:96:5f:3c:d8:68:98:d1:1e:e5:
                    b4:00:92:1d:4b:d5:e1:99:f6:75:b8:58:95:54:58:
                    33:e8:48:df:4a:0d:7b:86:09:20:b3:ed:84:32:02:
                    12:62:28:9b:b6:69:8e:18:d2:9b:e7:79:bc:ea:60:
                    db:42:9d:72:57:95:be:c3:63:b0:87:3c:40:15:3d:
                    ae:98:9b:f4:8a:4a:9e:b0:0a:ec:72:1a:a3:ea:77:
                    52:98:06:0a:ac:83:fc:fe:36:eb:40:3c:e1:70:78:
                    8d:0a:ed:06:e5:22:10:fb:a7:8a:5a:c9:6d:2c:e6:
                    11:3b:c2:e9:45:40:80:43:2e:7c:2e:5c:42:8e:2d:
                    43:83:b5:0b:a7:c3:2a:b3:eb:83:e9:e4:a2:e6:77:
                    dd:87:1c:0c:34:99:9d:d6:e5:1e:50:83:69:90:54:
                    f1:3d:cf:1b:c3:cf:29:e6:b6:45:cb:38:43:9a:38:
                    01:93:61:9c:f9:c9:3a:2b:c1:b2:71:5a:b4:78:a8:
                    d7:75:4a:96:74:48:8c:d1:63:71:76:4c:f3:d3:6f:
                    a4:ae:fb:9e:2e:c3:ec:02:df:b9:55:5f:67:68:d9:
                    ff:3f:83:95:f0:0d:62:69:69:41:32:b6:60:8c:93:
                    6e:b7:72:c7:8c:94:7c:19:29:16:b1:6c:c5:c5:4f:
                    ee:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7B:47:BD:1C:C0:84:48:C0:E8:3C:DA:69:A2:15:B4:1D:D7:15:49
            X509v3 Authority Key Identifier:
                keyid:6F:6A:32:DD:BC:65:31:01:5E:77:D3:6D:10:C9:69:D8:60:13:DA:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2oy3bxlMQFed9NtEMlp2GAT2k0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/871064-8ab3-406d-9170-ed63cbb56e33/1/R3tHvRzAhEjA6DzaaaIVtB3XFUk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/871064-8ab3-406d-9170-ed63cbb56e33/1/b2oy3bxlMQFed9NtEMlp2GAT2k0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.90.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:f1:5b:01:80:6e:2c:a8:3e:f8:53:7c:67:81:f1:4e:a0:53:
         39:c5:9f:72:e8:a8:17:46:7e:76:b3:32:56:17:95:10:64:8e:
         57:52:81:e6:23:ba:29:26:67:95:21:79:12:46:9e:66:0d:58:
         b9:55:2d:58:df:51:3b:56:2c:93:70:c3:97:ff:2d:0a:97:c6:
         72:0c:c0:05:97:c2:55:19:71:fd:2c:96:b7:3f:3f:d4:be:c5:
         8b:9f:2c:7e:fd:70:15:2b:0a:52:d6:2d:06:2f:80:19:d9:b7:
         48:c7:c5:50:59:a8:e1:ad:1c:4e:33:5c:cf:22:72:0f:69:0e:
         89:67:43:33:85:2e:2d:91:a2:08:ab:3e:48:c8:62:95:0b:23:
         1b:6e:5c:1d:33:80:64:43:f4:cd:46:26:05:8d:fd:96:06:fa:
         45:84:20:d3:5f:1e:5a:48:a5:ae:1a:af:c9:13:62:c9:7a:e4:
         16:f5:91:be:d6:46:e0:77:5b:20:ae:fc:ac:39:59:b8:41:66:
         51:73:30:e3:19:2f:96:de:c2:b7:b0:9e:59:27:c5:7f:9c:3a:
         e7:5c:89:2b:4b:b4:68:33:47:d4:e0:de:0f:5a:2e:91:ee:50:
         0b:80:fb:c7:28:0d:74:7e:1d:c6:4a:55:7a:71:5d:7a:c0:cb:
         82:b4:21:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:16 2024 by rpki-client on console-ams.rpki-client.org