Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5dbeff-f1ad-4ceb-b473-81973ebb0794/1/GGajVjR7MI8ICWb5gKAwwApW2e0.roa
File:                     GGajVjR7MI8ICWb5gKAwwApW2e0.roa (raw, json)
Hash identifier:          BYQ12bKkvSYsEAyCYD22myNQ6NXRUkDkopV4gYGS8fY=
Subject key identifier:   18:66:A3:56:34:7B:30:8F:08:09:66:F9:80:A0:30:C0:0A:56:D9:ED
Certificate issuer:       /CN=70a9b97f1f8a1ed4738c500aecffad24f1367166
Certificate serial:       0187FACECBE164D73CBE76C902DDB4D0A874
Authority key identifier: 70:A9:B9:7F:1F:8A:1E:D4:73:8C:50:0A:EC:FF:AD:24:F1:36:71:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cKm5fx-KHtRzjFAK7P-tJPE2cWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/5dbeff-f1ad-4ceb-b473-81973ebb0794/1/GGajVjR7MI8ICWb5gKAwwApW2e0.roa
Signing time:             Mon 08 May 2023 10:01:09 +0000
ROA not before:           Mon 08 May 2023 10:01:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47721
IP address blocks:        91.247.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:fa:ce:cb:e1:64:d7:3c:be:76:c9:02:dd:b4:d0:a8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70a9b97f1f8a1ed4738c500aecffad24f1367166
        Validity
            Not Before: May  8 10:01:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1866a356347b308f080966f980a030c00a56d9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8f:61:8d:82:8c:66:28:3a:dd:a9:17:b1:2c:
                    ee:78:a0:6a:2b:93:51:8d:64:9f:98:2d:32:f7:82:
                    10:93:a8:29:39:9a:b7:b2:6a:13:1c:ac:09:41:75:
                    37:18:fb:49:d1:43:9c:b6:32:fc:59:e7:24:77:c5:
                    1d:b8:66:ff:f1:b7:fe:9f:03:52:ff:73:8a:ba:6f:
                    36:4f:01:66:91:88:a1:6a:ea:fd:e4:47:e2:0c:eb:
                    ee:d7:45:09:ec:3c:34:43:58:32:f9:24:78:63:8c:
                    4d:86:6c:f7:e4:c2:3a:87:4e:a3:74:ea:46:b7:ef:
                    78:bb:d9:1b:ff:0b:ee:5a:12:43:3c:24:ca:00:6b:
                    b2:1c:f8:cb:82:35:84:2b:33:39:b4:e5:33:e2:c4:
                    3d:54:e3:3e:9d:79:54:3e:49:0d:62:eb:2f:15:55:
                    4d:ee:b7:20:2a:0b:c4:2f:fc:1a:80:89:4d:5f:e9:
                    ea:58:b1:db:a8:e7:3a:84:cd:ce:d4:ac:d6:ad:21:
                    19:bf:a0:fa:05:8a:b8:fa:39:b7:9e:0f:78:85:22:
                    4f:5f:45:ba:fa:c2:4e:db:21:fd:cb:d1:36:14:30:
                    73:ff:b6:ad:9d:b0:83:6c:75:f6:15:ef:37:a9:fa:
                    85:d2:2f:ed:ed:d5:86:cc:cf:a3:5e:68:39:e4:ec:
                    02:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:66:A3:56:34:7B:30:8F:08:09:66:F9:80:A0:30:C0:0A:56:D9:ED
            X509v3 Authority Key Identifier:
                keyid:70:A9:B9:7F:1F:8A:1E:D4:73:8C:50:0A:EC:FF:AD:24:F1:36:71:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKm5fx-KHtRzjFAK7P-tJPE2cWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5dbeff-f1ad-4ceb-b473-81973ebb0794/1/GGajVjR7MI8ICWb5gKAwwApW2e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5dbeff-f1ad-4ceb-b473-81973ebb0794/1/cKm5fx-KHtRzjFAK7P-tJPE2cWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.247.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:f7:81:4c:b2:6f:81:cc:fb:86:f4:84:eb:e4:fd:20:31:b3:
         8e:5a:29:84:30:49:e4:1e:0e:f5:32:50:44:a9:1c:0e:4c:e1:
         0b:99:ee:a7:40:4e:d6:8a:15:6a:d2:22:c2:b4:d6:f2:14:ae:
         12:3a:b8:44:7f:95:bc:e3:65:89:44:eb:de:b6:3c:86:5f:58:
         c7:bb:cf:eb:60:6a:8c:85:30:72:c0:66:70:9d:e3:9a:be:b4:
         cd:06:0d:f0:5b:81:5a:cc:d4:63:89:df:5a:2f:bf:03:4d:db:
         2c:61:2d:a3:0a:8b:61:39:ef:64:06:96:41:57:5d:5c:ad:9f:
         96:49:e8:c8:bd:4c:25:7e:42:29:2e:76:d5:d5:be:6c:cb:bc:
         c0:27:00:e3:a9:35:0d:e9:d0:b4:84:0f:8b:d8:89:03:08:ff:
         c9:61:26:50:5f:e5:72:0a:de:82:42:de:1d:a5:50:3f:74:bc:
         b6:e9:fa:99:f4:63:e9:67:3c:a3:26:04:f4:1e:35:f6:94:28:
         69:c9:4c:04:0c:68:db:bd:9b:7a:30:cb:a2:eb:f5:55:f6:4d:
         89:36:c1:10:63:2b:43:ac:51:18:c0:a7:ad:bf:03:80:75:49:
         18:d1:93:4c:be:5c:dd:b0:0c:f2:e0:ca:05:a9:37:9c:9b:42:
         77:ef:f8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:18 2024 by rpki-client on console-fra.rpki-client.org