Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/WnLmSaiOdC-KkN4Y8jp_uti6j9Q.roa
File:                     WnLmSaiOdC-KkN4Y8jp_uti6j9Q.roa (raw, json)
Hash identifier:          YLNu5M3DH5Z+TzxZr0C2lyXSIzm9643cWqWjgfr4V80=
Subject key identifier:   5A:72:E6:49:A8:8E:74:2F:8A:90:DE:18:F2:3A:7F:BA:D8:BA:8F:D4
Certificate issuer:       /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial:       34A30F32
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/WnLmSaiOdC-KkN4Y8jp_uti6j9Q.roa
Signing time:             Wed 13 Apr 2022 07:36:22 +0000
ROA not before:           Wed 13 Apr 2022 07:36:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207710
IP address blocks:        91.108.255.0/24 maxlen: 24
                          91.108.192.0/19 maxlen: 24
                          91.108.192.0/22 maxlen: 22
                          91.108.196.0/22 maxlen: 22
                          91.108.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883101490 (0x34a30f32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
        Validity
            Not Before: Apr 13 07:36:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5a72e649a88e742f8a90de18f23a7fbad8ba8fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:51:41:1e:c4:5f:74:62:99:12:91:07:a6:62:
                    f2:f5:10:34:fa:f5:5a:ed:54:62:50:64:68:10:a8:
                    83:36:ce:2a:7a:ff:1a:72:1b:3a:8a:e6:e9:cc:f8:
                    0b:60:f9:49:0f:ac:f8:6b:6c:02:ee:04:15:88:b0:
                    70:ed:72:6e:c1:bc:9c:42:a2:65:d2:f3:c3:ee:45:
                    27:c3:d0:b0:ca:af:a0:55:96:60:ff:54:d5:cd:59:
                    43:6d:34:bb:59:12:1e:6d:fe:52:ae:22:3e:5c:90:
                    d5:14:88:5d:d7:f8:55:93:42:f7:d2:1d:51:21:d6:
                    f1:e3:eb:03:88:88:f4:57:68:f9:29:9a:27:5b:a3:
                    27:dd:35:c3:b8:7d:8c:b2:94:9a:3c:7f:ca:55:23:
                    a8:6e:1c:cd:c4:bd:51:d2:c2:4f:91:18:d5:da:39:
                    2f:4e:07:3d:6d:a6:ce:8e:40:5e:43:85:18:17:00:
                    1b:d1:be:94:f2:fb:8e:09:f1:ae:11:61:2c:61:0e:
                    b2:aa:f5:42:f3:b0:df:0a:8e:18:7f:d7:47:1d:71:
                    59:e5:d7:2d:4e:b5:41:43:11:4f:1c:1a:88:ac:23:
                    49:26:7a:f3:a6:93:a4:45:64:f4:09:80:b9:40:7b:
                    0e:45:60:58:6a:8a:08:93:5d:f4:9f:dc:ff:7a:44:
                    42:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:72:E6:49:A8:8E:74:2F:8A:90:DE:18:F2:3A:7F:BA:D8:BA:8F:D4
            X509v3 Authority Key Identifier:
                keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/WnLmSaiOdC-KkN4Y8jp_uti6j9Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.108.192.0/19
                  91.108.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:7d:36:a5:af:0a:6e:01:7a:43:38:b8:5d:aa:96:11:37:71:
         f7:51:6d:bb:b1:ff:37:ca:7e:f8:48:46:2b:5f:7c:88:86:74:
         cc:11:78:61:cb:3f:ef:11:e0:c9:cb:65:19:11:ea:88:66:0c:
         52:a1:33:5b:2f:48:5a:2f:a0:7f:ff:01:61:c9:b0:c3:d5:f4:
         29:39:4d:e5:44:4a:d5:3a:cd:14:4c:58:0d:94:81:5a:e8:6d:
         25:86:2e:21:28:73:a5:fd:13:89:03:ca:14:04:ab:8e:5f:83:
         13:ad:b1:b9:45:25:6a:14:bf:3a:b3:0d:8c:a0:ba:63:37:7b:
         53:37:b0:41:f8:4c:57:7f:4e:9a:4c:79:e5:03:bb:60:43:f2:
         56:93:57:63:f6:e8:a7:9a:6d:12:2a:ab:f5:e4:8f:43:db:c4:
         bf:43:be:c4:19:cc:9a:4a:b7:87:72:d8:ef:0b:cf:c7:a7:1e:
         91:59:4b:78:d2:6b:30:dd:18:25:80:eb:df:2c:cb:4d:c3:25:
         b3:0d:0d:25:62:48:e9:e8:11:08:13:aa:89:53:7a:87:50:68:
         1e:ca:b5:43:76:be:52:fa:f8:96:b9:a6:83:82:cd:37:4e:f8:
         67:f1:8c:5f:32:33:aa:be:3f:66:53:5a:9f:ff:29:fc:8c:57:
         91:e5:f9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:27 2024 by rpki-client on console-ams.rpki-client.org