Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b5f798-f518-4f95-ad5e-9dd55e1ff892/1/K0MsSMIr80a8836h61RuGjqH3EE.roa
File:                     K0MsSMIr80a8836h61RuGjqH3EE.roa (raw, json)
Hash identifier:          DpgCgz75X3PD3ULirqE790YUc+CJxRtjNdKAq8UA+Mg=
Subject key identifier:   2B:43:2C:48:C2:2B:F3:46:BC:F3:7E:A1:EB:54:6E:1A:3A:87:DC:41
Certificate issuer:       /CN=dc980bb7e0718e3ce1f0a0ae268afe79af774f2f
Certificate serial:       018964C05F497349EFB734DE51B7B6F0E656
Authority key identifier: DC:98:0B:B7:E0:71:8E:3C:E1:F0:A0:AE:26:8A:FE:79:AF:77:4F:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JgLt-Bxjjzh8KCuJor-ea93Ty8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/b5f798-f518-4f95-ad5e-9dd55e1ff892/1/K0MsSMIr80a8836h61RuGjqH3EE.roa
Signing time:             Mon 17 Jul 2023 16:47:56 +0000
ROA not before:           Mon 17 Jul 2023 16:47:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        91.242.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:c0:5f:49:73:49:ef:b7:34:de:51:b7:b6:f0:e6:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc980bb7e0718e3ce1f0a0ae268afe79af774f2f
        Validity
            Not Before: Jul 17 16:47:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2b432c48c22bf346bcf37ea1eb546e1a3a87dc41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3b:cc:80:6e:b5:5f:29:c4:cf:14:fd:c3:a8:
                    dd:0d:61:4b:32:63:e6:1c:8b:da:95:2d:b7:90:34:
                    79:75:cd:eb:a5:d9:0a:0c:e6:db:ce:64:ff:75:35:
                    4f:97:33:fc:6c:4c:ec:33:f5:25:40:26:a5:90:8d:
                    d9:d2:e6:68:31:f8:d6:0a:59:f4:75:d9:51:5b:a1:
                    ec:a3:09:98:17:45:50:7c:b3:d8:a4:6b:1c:59:1e:
                    c9:f5:10:7d:8d:65:52:ea:67:41:74:6f:00:a0:fb:
                    15:d1:a6:7d:68:5b:3e:91:44:44:c8:92:aa:0b:52:
                    13:a8:50:4e:36:7f:e7:03:7a:05:f7:29:24:cb:ea:
                    92:92:dd:51:a9:e5:34:24:48:45:53:f6:75:9f:c4:
                    ce:4c:67:89:18:c6:4c:69:b8:2b:2b:36:5e:85:12:
                    28:41:6a:81:70:47:a4:ea:bf:40:5f:d8:5d:07:b3:
                    23:34:76:47:08:ee:a9:19:75:67:be:f1:4c:fc:79:
                    27:aa:fe:24:bb:74:e4:ce:c9:0d:c9:b3:f0:af:38:
                    66:4c:49:e1:41:06:6a:4a:d0:89:9f:5a:f2:93:0c:
                    e7:1a:1c:c9:dd:8f:9f:93:ca:3d:ca:9a:4b:bb:02:
                    bc:7c:ce:84:fe:d5:e8:ef:e5:b9:6a:34:7e:b0:07:
                    94:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:43:2C:48:C2:2B:F3:46:BC:F3:7E:A1:EB:54:6E:1A:3A:87:DC:41
            X509v3 Authority Key Identifier:
                keyid:DC:98:0B:B7:E0:71:8E:3C:E1:F0:A0:AE:26:8A:FE:79:AF:77:4F:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JgLt-Bxjjzh8KCuJor-ea93Ty8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b5f798-f518-4f95-ad5e-9dd55e1ff892/1/K0MsSMIr80a8836h61RuGjqH3EE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b5f798-f518-4f95-ad5e-9dd55e1ff892/1/3JgLt-Bxjjzh8KCuJor-ea93Ty8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.242.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:ea:7c:03:c0:fa:73:fa:bb:31:16:a1:da:c9:f7:e0:66:e9:
         1e:60:e5:51:c5:1d:ad:e4:fd:3f:08:06:fc:7b:88:9c:4c:e2:
         10:cb:e3:26:99:0a:e2:cc:35:76:7c:e5:c4:06:27:cd:29:ff:
         2f:03:b2:c2:4f:e9:2d:f6:b3:c7:1a:51:89:57:c6:a5:2d:d5:
         ef:24:11:c3:0d:ce:99:dd:88:97:be:8d:82:68:d7:2c:8f:23:
         33:30:a2:94:26:02:d5:e0:f0:00:af:85:4e:f5:ae:f4:d0:6a:
         76:f8:1a:7d:3c:68:3d:fc:de:84:bf:ea:23:eb:fb:48:56:db:
         c8:8c:d6:90:b7:c4:f0:03:f6:fc:6c:a6:aa:87:ba:82:00:9e:
         95:a1:2a:d4:df:33:5a:03:90:2f:e5:84:cf:20:6f:77:60:e2:
         8e:cb:d3:e0:3e:2f:a2:04:eb:2e:64:0a:f3:a3:e4:f8:36:c0:
         7d:25:3c:28:83:47:5c:c2:01:52:bd:e3:d1:53:8c:bf:c1:e2:
         25:f9:25:60:44:b4:2a:5a:2d:80:78:ee:6c:4e:c1:db:df:b9:
         be:28:bf:dd:ce:db:4f:a1:54:30:d8:7b:c5:b6:b0:4f:15:56:
         1b:c4:86:b8:a6:23:52:63:2c:6a:ab:33:fd:02:70:fe:af:ad:
         c8:81:50:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:27 2024 by rpki-client on console-fra.rpki-client.org