Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c4b7b6-edcf-40ba-8867-ac4f6494aa38/1/IB05zTxRii9h2TnAJg_vsTln6EM.roa
File:                     IB05zTxRii9h2TnAJg_vsTln6EM.roa (raw, json)
Hash identifier:          cuEW9lftqvKRtggRY9jt23SQzCzekPGvgDkl5fA6OwU=
Subject key identifier:   20:1D:39:CD:3C:51:8A:2F:61:D9:39:C0:26:0F:EF:B1:39:67:E8:43
Certificate issuer:       /CN=747bc81ad6dd0e1c06ab07be683b6c86fd8a6c06
Certificate serial:       A673C9
Authority key identifier: 74:7B:C8:1A:D6:DD:0E:1C:06:AB:07:BE:68:3B:6C:86:FD:8A:6C:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dHvIGtbdDhwGqwe-aDtshv2KbAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/c4b7b6-edcf-40ba-8867-ac4f6494aa38/1/IB05zTxRii9h2TnAJg_vsTln6EM.roa
Signing time:             Sat 01 Jan 2022 02:57:43 +0000
ROA not before:           Sat 01 Jan 2022 02:57:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48031
IP address blocks:        91.246.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10908617 (0xa673c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747bc81ad6dd0e1c06ab07be683b6c86fd8a6c06
        Validity
            Not Before: Jan  1 02:57:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=201d39cd3c518a2f61d939c0260fefb13967e843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:70:74:0b:f5:6a:73:b7:12:1c:ad:c0:ef:73:
                    57:dd:24:e8:16:70:ff:2f:5d:cf:27:b0:55:ff:73:
                    7b:3d:2d:f6:06:63:13:c7:14:6a:4c:fd:c2:ed:79:
                    e8:66:39:d6:4b:b4:67:5f:e1:4a:b9:4e:af:ca:d2:
                    f7:7c:6c:98:bc:2b:c5:d8:ff:e9:af:fd:c8:17:ba:
                    10:84:c6:06:3a:77:c3:3c:e1:ae:11:62:53:92:4d:
                    2e:1f:56:62:0c:69:d6:40:83:cc:14:30:43:7f:0d:
                    26:31:a5:b0:77:8a:41:80:c0:fa:18:21:e9:83:b0:
                    76:19:dd:b4:32:0a:31:fc:7f:39:31:a2:3a:d9:8a:
                    aa:8c:b3:d0:29:63:65:04:61:91:21:39:85:cc:c1:
                    50:d2:47:30:22:99:75:82:a3:bb:13:a2:7d:f0:be:
                    24:52:59:5a:2f:18:39:9f:53:58:17:71:4c:16:8a:
                    ab:51:9a:0c:6e:59:0c:23:99:c1:97:3a:1f:16:19:
                    4f:47:12:c6:a8:8b:a9:fa:02:24:3e:f8:78:db:08:
                    87:e2:e5:82:e4:59:98:11:12:12:87:e6:a5:d7:71:
                    d3:b7:01:8c:bd:85:41:19:df:29:50:26:1e:b2:b5:
                    9d:bf:c9:97:58:8e:ba:2a:20:89:2f:0a:12:4c:2c:
                    ba:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1D:39:CD:3C:51:8A:2F:61:D9:39:C0:26:0F:EF:B1:39:67:E8:43
            X509v3 Authority Key Identifier:
                keyid:74:7B:C8:1A:D6:DD:0E:1C:06:AB:07:BE:68:3B:6C:86:FD:8A:6C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHvIGtbdDhwGqwe-aDtshv2KbAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c4b7b6-edcf-40ba-8867-ac4f6494aa38/1/IB05zTxRii9h2TnAJg_vsTln6EM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c4b7b6-edcf-40ba-8867-ac4f6494aa38/1/dHvIGtbdDhwGqwe-aDtshv2KbAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.246.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:40:2d:d0:ce:45:61:b4:aa:1d:4f:80:8b:87:eb:95:57:43:
         8d:c9:27:1d:9a:06:cf:44:34:d6:20:5c:ce:74:89:3d:e7:75:
         01:9e:1f:08:6f:f1:f9:53:ca:0a:22:a6:ca:d3:f6:24:c4:52:
         06:c9:4b:ba:b4:7f:80:a6:e2:06:cc:ee:66:95:d6:54:d1:db:
         4b:e6:16:0a:9f:14:43:91:09:4c:b7:17:a0:b0:da:61:37:7b:
         19:f9:28:9a:5f:00:58:0a:27:a9:96:e9:48:db:87:72:ac:3f:
         69:96:9f:59:15:af:24:1f:29:70:81:fe:0d:77:02:00:0f:8c:
         9a:11:7b:c2:64:80:6e:7e:b5:2b:57:2b:26:27:c4:7c:88:10:
         66:fc:04:3a:ed:16:75:cc:2e:49:14:d8:f4:c6:24:92:55:95:
         0a:e8:f6:13:4b:76:18:80:9e:bc:c2:43:2a:36:8c:03:da:d8:
         02:49:d5:02:45:65:6c:3d:49:d9:08:4a:58:a7:eb:e5:77:43:
         7a:ac:2a:e1:23:33:73:b2:00:01:d5:05:d5:c2:a4:7b:c4:b1:
         d5:8c:73:b2:f8:a1:e6:f1:7f:2e:23:dd:fa:f4:09:7c:60:21:
         1c:8c:2b:51:84:10:1f:2e:8f:3c:4c:c7:69:1c:78:1a:7e:12:
         9e:1a:aa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:51 2024 by rpki-client on console-fra.rpki-client.org