Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/Fpq1kXMZkUhJZqqGJUf8YYwnNZY.roa
File:                     Fpq1kXMZkUhJZqqGJUf8YYwnNZY.roa (raw, json)
Hash identifier:          Hh0zv7cQeXUuSLK9YaGSfckUt5fpXFyUCrag901YIaw=
Subject key identifier:   16:9A:B5:91:73:19:91:48:49:66:AA:86:25:47:FC:61:8C:27:35:96
Certificate issuer:       /CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Certificate serial:       08E12108
Authority key identifier: A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/Fpq1kXMZkUhJZqqGJUf8YYwnNZY.roa
Signing time:             Fri 18 Mar 2022 20:18:23 +0000
ROA not before:           Fri 18 Mar 2022 20:18:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29405
IP address blocks:        91.149.228.0/22 maxlen: 22
                          91.149.244.0/22 maxlen: 22
                          91.149.248.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148971784 (0x8e12108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
        Validity
            Not Before: Mar 18 20:18:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=169ab591731991484966aa862547fc618c273596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:6c:7b:de:52:fe:45:37:43:cb:f9:d1:49:
                    d8:e6:c5:26:70:02:50:89:b5:87:13:22:a7:9d:43:
                    94:67:d5:4e:67:56:96:da:74:73:60:b8:9b:fe:24:
                    9c:78:5c:c0:33:09:0b:7f:df:8c:64:80:07:27:90:
                    08:16:99:3e:d9:cb:58:83:17:a4:ba:17:76:b1:8c:
                    05:62:7f:81:3b:f0:ca:f6:ba:61:01:67:95:29:e1:
                    e6:40:46:50:84:70:4a:2a:dd:09:59:be:76:79:64:
                    95:8b:48:e6:48:76:09:2d:79:0b:5a:85:03:2f:a2:
                    da:53:3c:ae:cc:fd:6b:61:fd:3f:1c:70:37:c0:dd:
                    be:65:33:c4:87:bf:4c:f9:c9:8c:ec:cb:5e:3b:d6:
                    b5:5f:2f:51:b5:39:6b:02:cb:1d:ca:b7:ad:b3:ac:
                    1d:2e:6f:a3:d6:77:b1:b4:01:41:b1:82:fe:6e:e8:
                    79:ed:28:ef:5c:51:01:fc:f2:34:cc:fe:e1:39:6d:
                    a4:f4:30:90:84:64:fc:3f:a3:c3:f8:8b:b9:bf:dd:
                    38:b5:ef:d1:51:82:38:14:24:3f:7f:74:12:b4:98:
                    2b:8e:b9:3f:69:04:72:47:aa:78:5a:e3:86:14:cd:
                    76:d2:7a:ce:d2:10:69:5b:51:b0:e5:53:44:4b:87:
                    00:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9A:B5:91:73:19:91:48:49:66:AA:86:25:47:FC:61:8C:27:35:96
            X509v3 Authority Key Identifier:
                keyid:A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/Fpq1kXMZkUhJZqqGJUf8YYwnNZY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.149.228.0/22
                  91.149.244.0-91.149.251.255

    Signature Algorithm: sha256WithRSAEncryption
         23:d6:32:0e:34:ec:44:67:b0:36:35:0b:e4:f6:d8:45:dd:ec:
         4c:af:8a:48:10:4c:54:bd:c8:d8:ce:f4:8c:37:db:dd:1f:d2:
         fd:3e:5a:96:d1:45:be:6e:e8:cb:21:ce:29:35:c7:7a:6c:1a:
         5a:74:30:28:49:1d:00:18:84:ec:35:9d:24:9d:34:7b:9a:d4:
         1d:ef:52:31:3f:69:bb:0b:96:18:b3:c9:82:02:ce:d5:bf:6e:
         b7:3c:f8:f5:09:01:9f:d5:c4:2f:d5:ba:cd:c2:81:fd:11:66:
         38:4f:f6:dd:d7:68:1e:6d:14:43:d9:c7:92:d0:03:66:d3:9f:
         d6:3e:7e:1e:a7:52:8d:cb:2b:d8:31:e1:3a:0a:16:66:08:c7:
         ae:cb:62:a1:e9:29:78:3e:84:dc:33:ad:80:76:c5:19:53:57:
         f3:44:79:4e:4c:9d:71:46:6f:8f:75:5a:a4:15:25:1c:29:5d:
         f2:ad:a1:39:cf:1f:2c:0f:48:c4:b9:8e:0d:4c:66:4a:02:5b:
         d1:53:39:80:22:a0:cb:ae:04:7a:a0:fc:fc:19:bd:ef:7b:cd:
         32:3d:f4:a7:aa:f9:cc:e3:91:d6:0d:1c:f2:fe:91:4f:79:72:
         13:e2:74:28:a4:56:38:26:c4:ec:be:b9:3e:19:71:5f:bf:20:
         03:24:6b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:20 2024 by rpki-client on console-fra.rpki-client.org