Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/bcb697-f4d9-4114-b4dc-bd1cb3c49b5b/1/1-FdKrWZRYzaMunhP3EfIRwob5iY.roa
File:                     1-FdKrWZRYzaMunhP3EfIRwob5iY.roa (raw, json)
Hash identifier:          qwx+vI6yymxEnT68bvWvvCQiayW/LjGCJ0q1KgiK0uk=
Subject key identifier:   F8:57:4A:AD:66:51:63:36:8C:BA:78:4F:DC:47:C8:47:0A:1B:E6:26
Certificate issuer:       /CN=06771d23ce8756dfb911e863c08424927a5dde34
Certificate serial:       018A3DE03975CB557EC75AD773C778B4F82F
Authority key identifier: 06:77:1D:23:CE:87:56:DF:B9:11:E8:63:C0:84:24:92:7A:5D:DE:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BncdI86HVt-5EehjwIQkknpd3jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/bcb697-f4d9-4114-b4dc-bd1cb3c49b5b/1/1-FdKrWZRYzaMunhP3EfIRwob5iY.roa
Signing time:             Mon 28 Aug 2023 20:40:19 +0000
ROA not before:           Mon 28 Aug 2023 20:40:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29107
IP address blocks:        91.216.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:3d:e0:39:75:cb:55:7e:c7:5a:d7:73:c7:78:b4:f8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06771d23ce8756dfb911e863c08424927a5dde34
        Validity
            Not Before: Aug 28 20:40:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f8574aad665163368cba784fdc47c8470a1be626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8a:1d:54:dd:92:bf:c9:3d:8c:9a:06:07:41:
                    81:48:1f:e0:c5:1b:6a:32:9c:86:66:f9:4e:a7:32:
                    1a:e1:21:27:d5:dc:08:2a:8d:68:d7:a8:dc:2a:ea:
                    5a:98:6e:77:ec:ac:3d:b9:3e:80:9f:6d:23:90:27:
                    2b:ec:d0:19:f4:48:e7:7f:97:04:9f:46:34:9f:d6:
                    9f:98:97:b9:fc:8b:6d:fd:ff:1d:69:32:ee:37:a0:
                    27:1a:3c:00:f0:ed:43:da:52:12:d8:0f:f0:51:af:
                    71:fd:14:d7:16:4f:26:9c:e3:a6:28:c8:f2:20:ed:
                    79:ad:dc:51:9d:7a:1c:4e:b0:81:57:af:88:0c:b2:
                    38:b9:2a:0b:60:90:2e:79:ea:df:57:52:db:d1:4f:
                    bc:14:d3:4d:e3:8e:18:f2:73:da:81:ae:54:b4:c7:
                    9c:c0:c3:c1:38:d6:f8:f1:a9:e8:39:32:34:69:94:
                    ca:17:8b:9e:37:c1:5a:87:38:d2:f3:8a:b4:4e:d5:
                    14:ae:d3:2c:a2:0c:a7:05:19:b2:03:f8:2a:5b:13:
                    50:63:b8:7a:ca:cf:1d:4f:d0:ee:6b:9d:ef:5a:6a:
                    51:27:52:13:ef:50:ad:f4:54:03:d7:ef:13:7f:7b:
                    e9:70:9a:42:db:e5:5b:94:9e:d3:2b:b1:28:2d:34:
                    0c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:57:4A:AD:66:51:63:36:8C:BA:78:4F:DC:47:C8:47:0A:1B:E6:26
            X509v3 Authority Key Identifier:
                keyid:06:77:1D:23:CE:87:56:DF:B9:11:E8:63:C0:84:24:92:7A:5D:DE:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BncdI86HVt-5EehjwIQkknpd3jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/bcb697-f4d9-4114-b4dc-bd1cb3c49b5b/1/1-FdKrWZRYzaMunhP3EfIRwob5iY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/bcb697-f4d9-4114-b4dc-bd1cb3c49b5b/1/BncdI86HVt-5EehjwIQkknpd3jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:d5:f4:34:5a:21:cb:c8:43:5d:00:50:d4:bf:aa:b3:6b:05:
         7a:49:db:0d:a4:80:fe:c2:ff:97:68:e5:7e:ce:40:b1:5c:cf:
         a9:0f:96:fb:d7:2a:79:00:3c:d5:86:23:ca:9e:e2:90:11:88:
         09:87:fa:8d:46:8e:70:4d:d7:4a:9b:1f:e7:d3:14:0c:37:08:
         70:21:d0:bc:db:fb:f8:93:d0:fb:70:ef:2c:88:2b:95:a2:01:
         b2:2e:bc:e6:33:0b:a1:2d:6e:d0:bf:8e:1d:06:0d:28:56:d9:
         eb:93:ed:fb:54:5f:ab:41:a8:51:cb:41:86:ab:85:cb:13:9c:
         37:3e:2f:69:e8:c1:51:45:d5:83:a8:85:14:4a:72:6a:55:33:
         b4:76:f9:be:75:2e:33:6a:d6:62:81:86:4c:12:54:f4:36:69:
         36:47:b9:2a:9c:29:47:69:3c:8b:c4:76:73:4b:1d:cb:73:10:
         e0:a1:a6:c2:3f:5d:e6:b0:88:e0:5b:14:9a:69:d3:df:f3:a7:
         ec:b1:2b:0e:e6:56:ae:7c:5a:d5:80:8f:58:02:5d:1d:6f:47:
         c2:52:2e:f3:1f:f8:12:9b:f2:9d:86:14:e6:9f:51:46:79:a3:
         c5:01:c4:b5:2b:ce:96:c2:ea:bb:a3:e3:b4:10:b0:97:86:51:
         01:62:dd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:31 2024 by rpki-client on console-fra.rpki-client.org