Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/7d7d35-55b1-4dab-bbaf-a5fc5c47dc74/1/6iJuo-5dFkKN6HTUAkgbVtXyBr0.roa
File:                     6iJuo-5dFkKN6HTUAkgbVtXyBr0.roa (raw, json)
Hash identifier:          Em3J3Hi7qZUz6eegZxbCO/zk/BIIaM2H6lM4E7mqVzk=
Subject key identifier:   EA:22:6E:A3:EE:5D:16:42:8D:E8:74:D4:02:48:1B:56:D5:F2:06:BD
Certificate issuer:       /CN=474180cc1112bd41687ba6609c2716757e5425de
Certificate serial:       018964C08A248AB080FCC9C6852B4A2DCD64
Authority key identifier: 47:41:80:CC:11:12:BD:41:68:7B:A6:60:9C:27:16:75:7E:54:25:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R0GAzBESvUFoe6ZgnCcWdX5UJd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/7d7d35-55b1-4dab-bbaf-a5fc5c47dc74/1/6iJuo-5dFkKN6HTUAkgbVtXyBr0.roa
Signing time:             Mon 17 Jul 2023 16:48:07 +0000
ROA not before:           Mon 17 Jul 2023 16:48:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59729
IP address blocks:        91.220.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:c0:8a:24:8a:b0:80:fc:c9:c6:85:2b:4a:2d:cd:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474180cc1112bd41687ba6609c2716757e5425de
        Validity
            Not Before: Jul 17 16:48:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ea226ea3ee5d16428de874d402481b56d5f206bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0b:e0:95:49:f3:e4:3f:e2:99:ee:97:d6:9e:
                    20:47:d2:6e:da:14:0f:ff:58:88:2a:b4:ff:c9:66:
                    29:0b:e8:65:16:6c:05:41:ba:8a:e9:97:18:ea:fc:
                    ec:89:88:06:93:e0:9e:b3:ce:e4:f6:34:a8:21:01:
                    44:c5:7e:e5:7f:df:27:25:22:d3:97:ea:93:58:3d:
                    38:4c:06:33:19:b9:2d:df:91:bf:7e:82:e5:4e:34:
                    6b:5e:3c:66:10:72:d0:a5:a2:9d:36:a3:88:37:1a:
                    b8:d0:d7:20:6c:83:ec:a5:bc:e9:07:68:a7:a5:63:
                    2c:6d:87:c0:c7:82:57:17:95:3d:fa:fd:db:da:02:
                    54:75:4e:68:c4:2a:fe:db:a9:26:3b:a4:28:80:7d:
                    aa:18:d5:26:c7:28:70:51:96:46:2d:f8:26:45:86:
                    5e:43:92:66:fe:65:40:ce:cb:fb:99:8c:b4:e3:07:
                    7b:fc:56:dd:7d:eb:23:ec:2c:13:34:ba:bb:87:8b:
                    8e:82:b9:5e:fe:39:72:51:ef:3c:da:7a:2c:8f:2f:
                    24:f2:5c:63:ee:9d:87:be:d4:33:be:62:65:96:36:
                    c6:1a:47:2b:0a:b5:a5:d4:8a:f8:ff:aa:2e:a6:e7:
                    0d:89:89:29:63:60:e3:2a:97:c1:46:68:65:c2:5a:
                    d0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:22:6E:A3:EE:5D:16:42:8D:E8:74:D4:02:48:1B:56:D5:F2:06:BD
            X509v3 Authority Key Identifier:
                keyid:47:41:80:CC:11:12:BD:41:68:7B:A6:60:9C:27:16:75:7E:54:25:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0GAzBESvUFoe6ZgnCcWdX5UJd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7d7d35-55b1-4dab-bbaf-a5fc5c47dc74/1/6iJuo-5dFkKN6HTUAkgbVtXyBr0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7d7d35-55b1-4dab-bbaf-a5fc5c47dc74/1/R0GAzBESvUFoe6ZgnCcWdX5UJd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.220.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:78:48:b5:be:6e:b8:5e:af:fc:7d:17:64:92:72:d2:33:db:
         91:7c:3d:37:9d:fe:8c:86:30:a4:71:09:18:63:f4:6f:78:23:
         12:b2:af:3c:e6:64:ae:76:10:e4:5d:c2:7c:fe:35:b4:8f:85:
         56:7d:c6:8f:45:d2:66:54:22:71:a3:31:a8:3f:45:64:5b:df:
         c9:53:67:cc:fa:6a:09:a6:1a:b1:5e:a6:76:9a:02:6d:24:c6:
         0b:df:b9:eb:37:ad:2e:5f:84:fb:8e:3c:67:a1:06:26:d6:58:
         14:e8:be:4d:fd:e9:80:dc:cb:4a:a6:47:5c:f5:0f:be:fe:e8:
         95:8d:40:4e:95:d0:78:c4:46:2b:aa:9c:3f:be:66:1c:4a:86:
         e2:d1:01:af:d7:e0:61:14:f6:0d:c4:08:bd:ca:62:28:3b:d9:
         63:cd:68:24:a0:5a:08:ba:96:42:d9:33:21:7f:78:74:0d:c7:
         dd:4d:13:7a:b5:75:8d:81:eb:8d:27:47:83:4f:4b:b4:a0:47:
         b0:58:e1:fe:88:00:ba:a9:2a:38:e1:3a:18:c0:d1:c5:a1:2e:
         73:00:aa:34:9c:4d:95:58:23:e5:98:aa:54:43:96:d3:5c:3e:
         bb:dd:d8:37:12:cb:5b:b6:39:0f:10:c1:32:ab:1f:8a:0d:df:
         d9:00:55:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:47 2024 by rpki-client on console-ams.rpki-client.org