Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/6e6c29-4972-4f4e-b428-aee1e39a24ed/1/wBQp-62Y_xHpfxQ3nF5PkL6UUUg.roa
File:                     wBQp-62Y_xHpfxQ3nF5PkL6UUUg.roa (raw, json)
Hash identifier:          1q2eLknkh9gHVvsRFaQKMQ4o1nbX7/Qf0RvNPYOsDdw=
Subject key identifier:   C0:14:29:FB:AD:98:FF:11:E9:7F:14:37:9C:5E:4F:90:BE:94:51:48
Certificate issuer:       /CN=29e679349da367884deb13dc5a21a7aee019e4a5
Certificate serial:       01896478E8D46CC47F66E4B29A776886026E
Authority key identifier: 29:E6:79:34:9D:A3:67:88:4D:EB:13:DC:5A:21:A7:AE:E0:19:E4:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KeZ5NJ2jZ4hN6xPcWiGnruAZ5KU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/6e6c29-4972-4f4e-b428-aee1e39a24ed/1/wBQp-62Y_xHpfxQ3nF5PkL6UUUg.roa
Signing time:             Mon 17 Jul 2023 15:29:52 +0000
ROA not before:           Mon 17 Jul 2023 15:29:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48031
IP address blocks:        84.246.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:78:e8:d4:6c:c4:7f:66:e4:b2:9a:77:68:86:02:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29e679349da367884deb13dc5a21a7aee019e4a5
        Validity
            Not Before: Jul 17 15:29:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c01429fbad98ff11e97f14379c5e4f90be945148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:99:f2:7d:8a:5f:52:38:27:46:4b:a0:14:e2:
                    0e:ad:3d:09:dc:71:cf:ce:20:b4:e8:05:2e:cd:f3:
                    70:06:1b:c8:00:df:30:9b:e6:5e:32:09:29:03:00:
                    e4:55:01:c7:0d:b2:af:34:e3:92:a9:ae:6f:76:10:
                    1d:94:6e:bd:39:4c:62:f3:c2:b4:08:01:7a:9a:3d:
                    26:f1:f7:01:22:6c:1e:66:5a:ec:52:59:49:1a:f9:
                    a8:a6:db:27:0a:b2:b2:49:48:01:29:6c:77:1f:1a:
                    b9:c5:3d:93:6b:b9:e3:70:4c:56:ea:f4:33:bd:8d:
                    21:6a:17:95:47:d3:f3:5d:5e:9e:23:61:da:64:82:
                    65:56:70:0d:22:ca:27:d6:24:bd:6f:5b:3c:db:42:
                    15:2d:09:63:74:d9:45:b6:30:09:6f:eb:5b:c3:1e:
                    6b:d2:6d:9c:68:52:6c:e7:f6:e5:9e:c8:65:c2:e6:
                    ce:15:e3:0b:de:0a:09:92:0a:24:8b:27:11:87:ea:
                    e1:31:4a:2a:3d:51:b4:49:47:cc:6c:d1:96:8a:ef:
                    ff:d8:79:a4:5d:62:ae:d6:2a:af:76:c8:74:76:df:
                    d6:2c:7d:af:0f:4b:26:24:19:e1:c3:6c:68:7f:ee:
                    6a:b3:f3:d3:6e:46:ec:91:ce:90:02:bb:5f:0b:6f:
                    76:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:14:29:FB:AD:98:FF:11:E9:7F:14:37:9C:5E:4F:90:BE:94:51:48
            X509v3 Authority Key Identifier:
                keyid:29:E6:79:34:9D:A3:67:88:4D:EB:13:DC:5A:21:A7:AE:E0:19:E4:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeZ5NJ2jZ4hN6xPcWiGnruAZ5KU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6e6c29-4972-4f4e-b428-aee1e39a24ed/1/wBQp-62Y_xHpfxQ3nF5PkL6UUUg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6e6c29-4972-4f4e-b428-aee1e39a24ed/1/KeZ5NJ2jZ4hN6xPcWiGnruAZ5KU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.246.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:5c:39:ff:df:c2:12:b2:b7:72:11:fa:ac:73:c0:8a:9e:13:
         09:66:43:e5:7a:1f:44:a9:fd:67:56:1f:24:41:63:98:59:63:
         78:57:be:fc:33:2c:a0:73:c9:e4:0f:20:84:21:55:da:a4:a8:
         36:54:89:6b:36:43:4c:82:23:6c:85:ab:93:65:08:af:79:7a:
         d5:6f:d7:ec:b0:6b:3c:7d:66:25:ac:bb:d5:da:84:d0:b9:1c:
         db:91:e1:91:3f:95:76:85:6f:98:e1:fd:9b:04:1c:02:33:98:
         9f:e3:3e:8d:e8:d2:00:ba:d7:3a:7c:4a:a8:8d:3b:24:6c:c6:
         ef:b7:4f:85:c7:36:3c:59:ad:d1:2e:e6:fe:fd:28:a1:ad:af:
         5b:f4:05:da:9f:e4:50:de:1e:e4:88:11:0d:ff:ac:61:b5:84:
         a5:b2:46:41:e0:f6:09:65:44:15:ab:ae:8f:0f:84:12:a3:28:
         60:3e:76:14:02:58:a1:4d:2b:69:69:f8:7b:4b:c4:5c:7f:02:
         36:2d:1e:6a:32:66:c6:6e:e0:2c:69:3c:18:ac:3f:bc:df:3a:
         3e:1c:ba:cc:7e:da:90:f1:b9:a8:63:c9:31:b5:89:68:eb:3b:
         7b:e6:cb:39:e7:eb:b9:52:9e:e6:8d:09:2b:7f:32:e6:63:d1:
         bb:1b:10:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:58 2024 by rpki-client on console-ams.rpki-client.org