Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/fa1cf4-e0c7-479e-989b-ec71c9d02944/1/1-r6cUdXYSXR5pGeb3e3Mc9PLutI.roa
File:                     1-r6cUdXYSXR5pGeb3e3Mc9PLutI.roa (raw, json)
Hash identifier:          FIrPvkgGEWUnG/Km0Cbgh/9x8YDhhbDsAoWcRJB4pkI=
Subject key identifier:   FA:BE:9C:51:D5:D8:49:74:79:A4:67:9B:DD:ED:CC:73:D3:CB:BA:D2
Certificate issuer:       /CN=da9d849907de1b6bf1f516296e5ad8a44a38a232
Certificate serial:       070468B2
Authority key identifier: DA:9D:84:99:07:DE:1B:6B:F1:F5:16:29:6E:5A:D8:A4:4A:38:A2:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2p2EmQfeG2vx9RYpblrYpEo4ojI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/fa1cf4-e0c7-479e-989b-ec71c9d02944/1/1-r6cUdXYSXR5pGeb3e3Mc9PLutI.roa
Signing time:             Sat 01 Jan 2022 04:56:06 +0000
ROA not before:           Sat 01 Jan 2022 04:56:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24642
IP address blocks:        91.224.164.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117729458 (0x70468b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da9d849907de1b6bf1f516296e5ad8a44a38a232
        Validity
            Not Before: Jan  1 04:56:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fabe9c51d5d8497479a4679bddedcc73d3cbbad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c7:8c:47:6f:a8:a5:ec:a2:40:d2:a4:c1:91:
                    1d:aa:b9:34:5e:b8:e9:32:8c:33:a3:69:55:06:76:
                    59:d5:b0:dc:e0:63:bd:87:7d:8c:00:23:62:27:31:
                    84:49:38:41:7f:08:c0:97:fa:99:a2:76:3c:cc:64:
                    5a:f0:34:5b:4e:fb:bc:0d:a3:35:85:2b:72:b5:30:
                    6d:6c:4f:41:cf:6c:c2:aa:a0:10:86:80:ff:46:84:
                    2d:0c:13:85:e6:06:0b:4c:d0:33:30:ae:11:c0:c9:
                    ce:39:6f:65:60:72:4b:14:5a:e6:97:4c:76:39:04:
                    5d:7c:83:d4:29:e5:2d:8e:04:23:3c:f3:d3:a0:9d:
                    5a:b1:9f:1b:ca:99:4c:05:c5:39:41:b2:2a:cd:3d:
                    05:40:ea:0d:6b:46:fb:99:c6:7f:6b:10:cd:7e:5e:
                    64:a8:24:5b:8c:59:27:67:5d:05:4a:7a:75:47:b6:
                    00:5b:97:9e:db:d9:53:50:14:74:22:bb:35:1a:a1:
                    a5:5e:ff:57:6c:eb:48:4c:9e:ab:b3:8f:26:d8:39:
                    cd:aa:9f:30:9b:8d:f9:2f:58:45:04:17:4c:bb:c1:
                    63:f0:62:b8:69:19:66:69:f0:84:3e:b8:82:5e:5f:
                    dd:18:ba:49:21:59:9f:ea:40:23:15:bb:4e:20:98:
                    73:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BE:9C:51:D5:D8:49:74:79:A4:67:9B:DD:ED:CC:73:D3:CB:BA:D2
            X509v3 Authority Key Identifier:
                keyid:DA:9D:84:99:07:DE:1B:6B:F1:F5:16:29:6E:5A:D8:A4:4A:38:A2:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2p2EmQfeG2vx9RYpblrYpEo4ojI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/fa1cf4-e0c7-479e-989b-ec71c9d02944/1/1-r6cUdXYSXR5pGeb3e3Mc9PLutI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/fa1cf4-e0c7-479e-989b-ec71c9d02944/1/2p2EmQfeG2vx9RYpblrYpEo4ojI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.224.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:24:df:6a:0a:9e:2e:20:de:90:df:41:4c:ca:10:73:23:e6:
         03:b9:5d:63:c2:7e:08:5c:ba:b9:2e:8d:61:99:c7:59:9c:54:
         67:2b:5a:61:43:71:91:f6:92:71:82:0e:27:6f:b5:87:ce:e6:
         e6:80:df:f2:cd:7d:11:97:79:e3:d7:e6:3f:0f:a8:80:6a:c3:
         34:d6:91:28:31:b5:92:9f:cf:70:51:08:8b:bf:08:00:6e:3d:
         6a:31:7a:de:de:eb:82:69:75:ba:57:e5:6f:2d:4a:ee:dd:fa:
         36:62:e6:d8:7f:84:4d:3b:5b:df:91:73:d1:97:5f:d1:d6:a0:
         73:69:81:a0:44:de:02:9e:98:16:fa:60:17:f3:d3:14:48:9d:
         96:d4:74:20:33:41:56:58:88:1c:3b:20:b6:64:07:2e:8f:2c:
         da:13:b6:94:99:2f:6d:55:ce:5e:61:2c:14:96:5f:35:6f:6f:
         07:c5:c6:2f:43:2c:8b:b8:24:38:a6:db:60:07:78:78:12:2b:
         3a:c4:fe:3d:37:49:2b:5c:7e:78:e5:b5:b1:bb:2e:06:33:1e:
         b0:2f:20:0f:57:ff:6a:94:1a:c3:48:73:d3:bf:69:56:92:0f:
         f1:b2:d9:58:5b:50:9d:16:d9:0e:cd:5f:9f:f0:29:9b:f1:85:
         63:df:08:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:35 2024 by rpki-client on console-ams.rpki-client.org