Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2c75ca-5960-4f11-99c7-cc43ca9776fe/1/kkRgj11E4lRTF9NYjYXBhq-Cl5A.roa
File:                     kkRgj11E4lRTF9NYjYXBhq-Cl5A.roa (raw, json)
Hash identifier:          z4gCOc8svZVQxz6z+53rSAdyrUtTLcKeDxEJD7EBYRA=
Subject key identifier:   92:44:60:8F:5D:44:E2:54:53:17:D3:58:8D:85:C1:86:AF:82:97:90
Certificate issuer:       /CN=358267b991dde780bf1820e5bc82dcd99f820076
Certificate serial:       01DD918E
Authority key identifier: 35:82:67:B9:91:DD:E7:80:BF:18:20:E5:BC:82:DC:D9:9F:82:00:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NYJnuZHd54C_GCDlvILc2Z-CAHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/2c75ca-5960-4f11-99c7-cc43ca9776fe/1/kkRgj11E4lRTF9NYjYXBhq-Cl5A.roa
Signing time:             Sat 01 Jan 2022 06:06:16 +0000
ROA not before:           Sat 01 Jan 2022 06:06:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57934
IP address blocks:        91.236.230.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31297934 (0x1dd918e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358267b991dde780bf1820e5bc82dcd99f820076
        Validity
            Not Before: Jan  1 06:06:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9244608f5d44e2545317d3588d85c186af829790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:05:5d:17:c4:20:6c:36:1a:ff:1c:0e:2d:b2:
                    80:8f:d5:86:8c:b3:47:aa:54:65:03:27:b4:46:fb:
                    45:a3:0f:ef:10:c0:76:6a:44:dc:61:f1:16:6e:ca:
                    77:eb:22:a2:c6:54:49:6f:d4:27:79:5f:95:61:da:
                    9c:6c:57:95:ef:fe:f6:22:3a:67:1b:18:60:4b:6f:
                    57:1f:48:08:df:62:ef:2d:c8:3d:f2:93:0f:7b:f8:
                    4a:45:6c:6c:08:76:98:4e:32:0f:95:61:21:88:7e:
                    17:13:19:8d:0c:fc:a5:96:00:a6:b0:88:c2:e9:c3:
                    0d:f0:f7:48:0e:4d:a1:14:a9:4d:4c:05:68:ec:d6:
                    12:bc:30:af:2d:64:0b:3a:76:c1:8c:4d:39:44:2f:
                    c3:f4:cf:c1:c3:81:8c:ce:d0:3f:7a:99:48:45:ad:
                    20:9b:29:a0:c0:68:c9:8b:8b:e7:38:85:40:67:84:
                    43:5d:fa:b6:03:4f:d4:8e:d0:14:2a:f0:27:bf:85:
                    54:66:e3:ca:bb:c0:3f:d3:b5:62:93:e6:c5:b5:6a:
                    8d:81:38:52:ab:f8:53:79:18:a4:0c:a2:d3:7d:97:
                    92:b4:04:43:fd:8b:1f:95:18:33:24:58:dc:c4:f4:
                    08:f8:dc:8e:25:52:e7:fb:39:40:e7:93:36:55:df:
                    bf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:44:60:8F:5D:44:E2:54:53:17:D3:58:8D:85:C1:86:AF:82:97:90
            X509v3 Authority Key Identifier:
                keyid:35:82:67:B9:91:DD:E7:80:BF:18:20:E5:BC:82:DC:D9:9F:82:00:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYJnuZHd54C_GCDlvILc2Z-CAHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2c75ca-5960-4f11-99c7-cc43ca9776fe/1/kkRgj11E4lRTF9NYjYXBhq-Cl5A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2c75ca-5960-4f11-99c7-cc43ca9776fe/1/NYJnuZHd54C_GCDlvILc2Z-CAHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.236.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:b9:d9:3a:d4:4d:93:87:2c:8e:7a:cd:a8:36:6e:72:83:76:
         1d:7b:9d:ec:0f:33:7b:bb:ac:6c:a7:a3:aa:1f:0e:bb:c6:1b:
         f0:15:06:17:e0:09:f4:d4:74:7b:3b:14:db:92:6d:f2:fb:9d:
         f4:fd:12:48:14:6c:48:d1:b9:53:c7:d1:f3:b1:1c:15:53:c4:
         f5:4d:bf:2f:4d:3a:21:e1:8b:80:41:c1:8e:5f:fa:ce:e8:51:
         fc:70:77:33:60:04:09:3b:cf:31:86:3e:ff:48:84:7f:91:35:
         9e:5a:7a:29:b4:01:15:65:7c:9d:f1:0b:27:6b:37:a8:ad:0c:
         24:24:f9:0f:0e:40:48:aa:dc:ab:13:bc:25:fe:4d:79:52:c3:
         d6:7b:95:a7:28:9b:2c:dd:87:30:26:b6:bb:9b:60:52:e9:15:
         98:62:85:ab:d5:2b:56:b4:64:dc:4e:cf:8a:f5:8e:a4:d4:fb:
         f6:15:f4:a4:70:61:67:51:96:4a:7a:26:bb:ba:30:ff:14:1b:
         57:65:6c:e7:57:84:9d:13:20:c0:a1:9e:f4:4b:b8:83:b2:13:
         93:d5:e8:cb:7d:bf:61:e5:da:10:72:ad:bd:6b:85:9e:cc:ce:
         00:30:bb:1a:39:c6:bd:aa:c5:1d:c2:d2:13:0d:f5:bf:a0:a1:
         33:b6:71:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:08 2024 by rpki-client on console-ams.rpki-client.org