Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/alZHssqf_x0i-M-15W6ycjUtPYw.roa
File:                     alZHssqf_x0i-M-15W6ycjUtPYw.roa (raw, json)
Hash identifier:          OY5IJMkivMU8YgtYIowrcwcZWVP5RKwwuiE1BNHL9MQ=
Subject key identifier:   6A:56:47:B2:CA:9F:FF:1D:22:F8:CF:B5:E5:6E:B2:72:35:2D:3D:8C
Certificate issuer:       /CN=71f6cf046dc0060cc53f39a94f62557ef00a8993
Certificate serial:       0183E5FCD0A0F0DC5D3DEA42A866E08B3A27
Authority key identifier: 71:F6:CF:04:6D:C0:06:0C:C5:3F:39:A9:4F:62:55:7E:F0:0A:89:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cfbPBG3ABgzFPzmpT2JVfvAKiZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/alZHssqf_x0i-M-15W6ycjUtPYw.roa
Signing time:             Mon 17 Oct 2022 12:48:14 +0000
ROA not before:           Mon 17 Oct 2022 12:48:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8100
IP address blocks:        147.78.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:e5:fc:d0:a0:f0:dc:5d:3d:ea:42:a8:66:e0:8b:3a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71f6cf046dc0060cc53f39a94f62557ef00a8993
        Validity
            Not Before: Oct 17 12:48:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6a5647b2ca9fff1d22f8cfb5e56eb272352d3d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:0d:43:80:95:a8:29:2d:e8:62:48:50:9f:
                    d9:36:f6:87:a7:da:12:74:7c:84:44:8a:62:4e:f2:
                    4c:ec:12:f7:2d:17:81:e9:d7:e2:81:74:11:45:d0:
                    63:6c:03:0a:0d:56:f7:61:ee:06:9a:7a:b9:7d:d5:
                    8a:bb:4b:50:b1:10:d2:e5:8c:fe:54:ed:df:f4:2b:
                    74:89:f6:63:95:d9:00:f3:91:1f:ad:01:aa:71:63:
                    1a:cd:45:fc:09:c9:2b:33:e1:e2:cc:6a:9d:7b:dd:
                    60:c1:3e:1b:0e:a0:0a:ae:be:46:28:7d:dc:db:4d:
                    9f:cf:04:c0:aa:1a:bf:47:bd:92:19:49:2a:c2:26:
                    3e:18:4c:7c:a0:09:f1:63:9b:92:2c:77:a2:ef:18:
                    a0:ed:c5:c9:d9:04:7c:67:10:8a:ac:4e:39:a8:87:
                    80:b0:81:62:e4:05:63:4f:1f:b0:ec:5c:1d:30:95:
                    c2:c9:3e:7c:0f:d0:81:c0:28:d2:f5:40:52:89:fb:
                    4a:50:27:35:d6:dd:52:ab:2d:2f:59:48:a8:13:15:
                    bd:a2:88:ce:54:20:0d:06:45:e2:6b:01:78:8c:59:
                    de:81:0a:22:9e:4d:48:92:55:08:0f:6f:fc:a4:c7:
                    aa:bf:ec:4a:44:fe:5f:f2:45:01:15:1c:5d:1b:b2:
                    f3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:56:47:B2:CA:9F:FF:1D:22:F8:CF:B5:E5:6E:B2:72:35:2D:3D:8C
            X509v3 Authority Key Identifier:
                keyid:71:F6:CF:04:6D:C0:06:0C:C5:3F:39:A9:4F:62:55:7E:F0:0A:89:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfbPBG3ABgzFPzmpT2JVfvAKiZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/alZHssqf_x0i-M-15W6ycjUtPYw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c7a255-16a5-4d4c-a737-692f6a89839a/1/cfbPBG3ABgzFPzmpT2JVfvAKiZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.78.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:54:fd:f8:ff:68:dc:d1:b8:c5:2c:40:0c:a1:b6:48:50:4f:
         94:55:88:21:a1:4b:7c:f3:f5:1e:ad:68:14:21:52:51:de:76:
         48:9f:ec:4b:10:00:ff:8b:1e:3c:e2:32:86:2f:78:b6:13:81:
         74:fd:e2:b9:f2:5a:99:b1:a7:32:73:3c:43:4c:f9:21:88:d6:
         5f:29:be:62:dc:1b:4c:81:fa:a8:15:92:58:f6:8a:7f:2f:d9:
         1d:48:c4:7c:29:ce:ef:d6:4b:3d:d8:5f:d4:c9:48:91:ef:54:
         c4:82:c5:75:5f:80:f1:53:ab:c7:59:40:40:21:1d:d2:fa:55:
         1e:38:1a:26:25:4e:53:f6:1b:11:53:08:8d:da:3a:41:db:40:
         44:14:64:0a:22:79:2d:06:65:7b:c0:e0:66:c3:0b:21:64:8c:
         2a:97:53:39:bf:c4:da:0f:d3:41:47:d4:f2:82:54:a9:62:cb:
         e4:f2:59:5d:f4:6f:ba:ab:62:0f:81:89:fb:9f:19:9d:0b:e1:
         54:f3:40:58:99:de:03:ba:18:66:6e:ea:09:49:be:60:e5:23:
         df:d2:d6:e3:16:62:52:02:fa:6e:32:c2:fc:5c:bb:20:5e:13:
         96:de:04:fc:b3:3e:a0:d6:40:c6:41:90:38:81:a8:c2:e4:18:
         42:54:42:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:39 2024 by rpki-client on console-fra.rpki-client.org