Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/871064-8ab3-406d-9170-ed63cbb56e33/1/vLxgFBpJ_AtS55V1UU8z8d2RgVI.roa
File:                     vLxgFBpJ_AtS55V1UU8z8d2RgVI.roa (raw, json)
Hash identifier:          tlGDFr8vZD1yHRmNIGjoVS8XpWptYztj42WfEoCH92s=
Subject key identifier:   BC:BC:60:14:1A:49:FC:0B:52:E7:95:75:51:4F:33:F1:DD:91:81:52
Certificate issuer:       /CN=6f6a32ddbc6531015e77d36d10c969d86013da4d
Certificate serial:       02C39EC7
Authority key identifier: 6F:6A:32:DD:BC:65:31:01:5E:77:D3:6D:10:C9:69:D8:60:13:DA:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b2oy3bxlMQFed9NtEMlp2GAT2k0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/871064-8ab3-406d-9170-ed63cbb56e33/1/vLxgFBpJ_AtS55V1UU8z8d2RgVI.roa
Signing time:             Fri 18 Mar 2022 08:14:31 +0000
ROA not before:           Fri 18 Mar 2022 08:14:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47952
IP address blocks:        81.90.177.0/24 maxlen: 24
                          81.90.176.0/24 maxlen: 24
                          81.90.179.0/24 maxlen: 24
                          81.90.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46374599 (0x2c39ec7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f6a32ddbc6531015e77d36d10c969d86013da4d
        Validity
            Not Before: Mar 18 08:14:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bcbc60141a49fc0b52e79575514f33f1dd918152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3d:11:5c:bb:17:e4:ae:73:18:e7:2a:9a:10:
                    15:79:e2:52:b6:41:a9:56:ad:a5:29:dc:56:e0:bb:
                    1a:3a:07:df:99:e3:42:3b:e4:94:8b:70:76:75:c5:
                    fb:1b:25:bd:65:49:0a:77:f6:29:0d:11:fa:58:9c:
                    e4:7e:a7:32:03:7a:cb:14:c3:57:be:2c:bc:32:a6:
                    75:dd:b7:53:6c:26:52:fd:1d:28:db:eb:ee:37:65:
                    59:74:a3:92:af:01:86:93:5d:a0:91:01:ac:4a:d4:
                    15:f0:c3:f0:2c:6f:74:8e:3c:c6:92:46:64:cd:94:
                    4b:b7:b6:1f:6c:59:88:26:24:09:5c:65:af:b3:20:
                    8d:c5:01:90:55:3f:e3:dc:d7:cc:67:2c:3d:fb:96:
                    9b:fb:88:00:a5:01:85:05:93:66:fe:ca:8d:76:dc:
                    e7:f0:94:40:ac:97:0e:5f:d3:76:69:b1:54:43:93:
                    4e:92:07:32:75:99:a5:8d:bd:3a:0d:13:c7:ec:62:
                    ff:ed:c6:35:ce:a3:4a:89:4a:26:c5:0a:53:19:2a:
                    49:3e:97:3a:96:39:f2:16:e6:c8:b2:47:fe:cb:b2:
                    78:3a:ac:7d:38:42:1f:46:4e:41:ac:be:29:49:e1:
                    ea:c7:e9:53:3b:59:12:c2:32:83:83:d5:70:60:48:
                    9b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BC:60:14:1A:49:FC:0B:52:E7:95:75:51:4F:33:F1:DD:91:81:52
            X509v3 Authority Key Identifier:
                keyid:6F:6A:32:DD:BC:65:31:01:5E:77:D3:6D:10:C9:69:D8:60:13:DA:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2oy3bxlMQFed9NtEMlp2GAT2k0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/871064-8ab3-406d-9170-ed63cbb56e33/1/vLxgFBpJ_AtS55V1UU8z8d2RgVI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/871064-8ab3-406d-9170-ed63cbb56e33/1/b2oy3bxlMQFed9NtEMlp2GAT2k0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.90.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:13:c1:07:6a:9c:a3:67:f4:76:b0:61:ff:9b:6e:19:96:eb:
         c6:10:25:1c:0e:bd:0d:ac:24:84:ad:16:1f:ac:44:74:f5:d4:
         38:3c:ce:e6:94:5f:94:b3:41:11:e9:6d:9e:96:96:b5:7a:6d:
         10:26:4b:b6:b9:9e:fa:dd:e8:24:a2:3f:4d:96:56:7c:92:92:
         27:3c:7c:2a:76:f8:16:0e:a4:1f:4c:e2:9c:e8:f3:a2:5b:40:
         02:55:52:17:09:74:93:59:39:02:1d:e0:88:92:da:e7:1b:26:
         69:be:9e:89:ca:97:45:ee:3f:1f:04:43:79:2e:d7:a2:1c:6b:
         ca:4d:f2:3a:51:47:59:05:30:0c:76:4e:7b:5d:0d:02:c1:85:
         c3:c3:c3:86:02:73:74:d9:04:89:34:26:e1:eb:af:9f:6b:98:
         01:b5:7f:89:75:86:7c:27:21:81:5e:8e:c4:96:0d:0d:cf:af:
         a6:d4:f4:66:ea:81:5c:7e:49:3c:f3:bd:69:93:54:fe:00:46:
         27:e6:56:3b:67:3f:f4:53:ab:7f:5c:f4:dd:86:43:54:a0:df:
         20:b0:4d:5f:0a:0e:6f:12:1d:6c:b3:db:20:87:3b:11:2b:de:
         2d:20:85:fa:51:20:d9:ad:11:17:de:81:b0:3b:9c:b6:8a:e9:
         f7:3f:16:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:14 2024 by rpki-client on console-fra.rpki-client.org