Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/bcb697-f4d9-4114-b4dc-bd1cb3c49b5b/1/wkeELE6n9zi2xQSAlexDi7pcX_o.roa
File:                     wkeELE6n9zi2xQSAlexDi7pcX_o.roa (raw, json)
Hash identifier:          DQhil1PA2rMVzIs4ADw3slUU+NsRRr4JUOVd/8umnmA=
Subject key identifier:   C2:47:84:2C:4E:A7:F7:38:B6:C5:04:80:95:EC:43:8B:BA:5C:5F:FA
Certificate issuer:       /CN=06771d23ce8756dfb911e863c08424927a5dde34
Certificate serial:       018A3D265E8911D0EE5381DB62AE1063C401
Authority key identifier: 06:77:1D:23:CE:87:56:DF:B9:11:E8:63:C0:84:24:92:7A:5D:DE:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BncdI86HVt-5EehjwIQkknpd3jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/bcb697-f4d9-4114-b4dc-bd1cb3c49b5b/1/wkeELE6n9zi2xQSAlexDi7pcX_o.roa
Signing time:             Mon 28 Aug 2023 17:17:19 +0000
ROA not before:           Mon 28 Aug 2023 17:17:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51160
IP address blocks:        91.216.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:3d:26:5e:89:11:d0:ee:53:81:db:62:ae:10:63:c4:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06771d23ce8756dfb911e863c08424927a5dde34
        Validity
            Not Before: Aug 28 17:17:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c247842c4ea7f738b6c5048095ec438bba5c5ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:05:9e:d3:00:55:1a:64:6e:be:1c:af:98:9a:
                    4c:41:9d:f0:02:86:c7:e4:4c:91:c3:4c:03:4d:b8:
                    f9:f8:b0:9d:2e:63:a2:b6:69:a1:f3:a2:8c:7e:5c:
                    60:b6:b1:dd:16:16:69:92:70:1e:2a:ba:3d:09:9a:
                    aa:0f:a8:2b:55:a9:bf:f3:12:96:a8:23:41:81:af:
                    ce:90:39:e5:1a:1c:37:89:03:1e:75:49:cf:ae:06:
                    c8:21:24:89:4d:58:b2:d8:d9:1f:f8:93:e7:1f:04:
                    ac:43:c5:f9:40:e2:bd:14:33:c6:e0:ad:6f:f4:ce:
                    2e:f7:25:18:00:5e:00:49:74:68:f8:d5:e0:e5:4a:
                    51:13:b4:c0:2e:d3:0d:af:9b:01:65:d3:d6:c6:35:
                    93:45:fb:54:71:c3:79:40:4f:d9:27:2f:ba:0b:a3:
                    76:32:ab:a4:56:cb:e4:1d:2f:85:44:a7:a4:b9:61:
                    a7:5b:c8:8a:0a:b2:cc:33:92:5a:25:af:42:1f:a6:
                    ae:bd:01:64:0c:74:fd:bf:e0:f2:74:e8:84:46:32:
                    89:e3:34:e0:ce:69:6f:5d:8c:fa:df:60:c0:97:a3:
                    fc:b9:fb:93:cb:3b:68:ad:9e:94:b9:0d:5a:b5:a8:
                    ba:c4:88:5a:78:9d:eb:ab:d1:29:65:0a:5c:0b:a8:
                    e8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:47:84:2C:4E:A7:F7:38:B6:C5:04:80:95:EC:43:8B:BA:5C:5F:FA
            X509v3 Authority Key Identifier:
                keyid:06:77:1D:23:CE:87:56:DF:B9:11:E8:63:C0:84:24:92:7A:5D:DE:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BncdI86HVt-5EehjwIQkknpd3jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/bcb697-f4d9-4114-b4dc-bd1cb3c49b5b/1/wkeELE6n9zi2xQSAlexDi7pcX_o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/bcb697-f4d9-4114-b4dc-bd1cb3c49b5b/1/BncdI86HVt-5EehjwIQkknpd3jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:d3:13:f4:c0:5c:34:54:3a:5d:cc:1f:1c:42:fa:ad:e1:62:
         f0:a7:80:3a:d9:f3:13:6b:40:88:e4:c7:f6:8b:fd:46:37:e7:
         0f:f2:6f:42:1d:9a:d8:7d:49:27:7d:7a:0e:68:ec:34:b8:25:
         14:e5:0b:c7:fc:f0:01:1d:d4:25:52:54:ea:f2:de:3f:ba:55:
         b2:91:c5:6c:3b:d1:67:a3:f3:ad:1b:5c:90:f6:94:6c:4b:8a:
         bf:fe:49:f7:72:81:20:f3:63:68:21:44:09:80:b8:68:29:2e:
         44:fa:86:cb:70:53:08:33:ea:f8:d3:b3:41:1f:b3:8f:8e:11:
         5e:5b:d3:47:b7:aa:35:2f:43:11:0d:62:d5:47:6b:b2:ad:95:
         f1:f2:cb:1c:26:b9:67:fd:ac:85:c6:a9:5b:79:31:b3:31:6b:
         b5:d5:07:40:60:85:33:3e:10:ca:f7:91:54:57:34:88:13:a2:
         4d:e2:64:8b:bd:c5:3f:51:5f:84:3c:12:99:06:2c:63:ea:05:
         31:53:69:36:87:bf:86:34:ad:f3:62:24:9e:c4:0f:85:3d:bb:
         58:6e:10:07:00:1d:43:59:3c:89:25:33:fd:5f:9c:87:54:6f:
         3b:d4:01:38:be:e7:ca:4b:80:9d:b2:7f:9b:c3:ef:ab:31:d1:
         f2:fd:5c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:31 2024 by rpki-client on console-fra.rpki-client.org