Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0472d7-4d1f-4618-b0a8-006b83e10438/1/gabgMjaQBzby16xNhL6O__pwDdI.roa
File:                     gabgMjaQBzby16xNhL6O__pwDdI.roa (raw, json)
Hash identifier:          aswJWLfLsuQg15E8Jl+dYfiTu3+4VML0MuXPVczq5II=
Subject key identifier:   81:A6:E0:32:36:90:07:36:F2:D7:AC:4D:84:BE:8E:FF:FA:70:0D:D2
Certificate issuer:       /CN=93c7dc5f72745dc11891ab06ee4bb6ea04dbf44d
Certificate serial:       01856C7818592F9A05F3AD56B360A1CAFBDC
Authority key identifier: 93:C7:DC:5F:72:74:5D:C1:18:91:AB:06:EE:4B:B6:EA:04:DB:F4:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k8fcX3J0XcEYkasG7ku26gTb9E0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0472d7-4d1f-4618-b0a8-006b83e10438/1/gabgMjaQBzby16xNhL6O__pwDdI.roa
Signing time:             Sun 01 Jan 2023 08:34:47 +0000
ROA not before:           Sun 01 Jan 2023 08:34:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        91.247.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:78:18:59:2f:9a:05:f3:ad:56:b3:60:a1:ca:fb:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c7dc5f72745dc11891ab06ee4bb6ea04dbf44d
        Validity
            Not Before: Jan  1 08:34:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=81a6e03236900736f2d7ac4d84be8efffa700dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4f:d8:f1:ac:91:e2:96:1d:fc:e6:3e:43:8d:
                    01:01:04:c6:87:27:a0:58:cc:d9:cb:4b:d2:cb:ad:
                    b6:dd:87:ee:ca:b1:33:ed:a6:81:9f:92:45:55:bc:
                    20:be:54:17:e3:b2:90:10:2c:c6:a5:57:2d:b6:df:
                    ec:94:21:b5:f7:73:d3:c2:cd:33:cc:52:e1:b3:c5:
                    74:28:3f:92:c9:f7:9a:16:e2:75:2b:14:5e:b8:9a:
                    69:4e:2d:68:ea:a1:0e:d0:6c:c4:f8:80:04:fe:3e:
                    d6:ff:7e:00:d5:1a:c9:c5:f3:6c:9d:0b:78:48:2c:
                    e5:f9:29:b0:8c:36:50:d1:f2:9e:c1:eb:2c:84:c5:
                    77:e8:a7:a1:65:ea:61:72:77:5d:07:a1:ea:ef:06:
                    8d:6a:19:55:3c:87:28:8d:72:d4:20:5f:cc:0c:c1:
                    2e:20:11:9c:ec:86:31:5f:57:85:6e:2c:b6:d0:a5:
                    b7:36:e1:51:a6:72:d1:02:9d:f5:db:c2:10:4e:e5:
                    a4:e2:dc:0b:64:30:b6:cb:c0:53:f9:a9:fc:81:83:
                    94:60:36:6b:db:ad:14:68:e9:96:9d:df:38:48:90:
                    2e:22:77:29:5f:ed:12:6e:45:71:68:1c:d6:12:33:
                    1a:83:6e:6f:02:42:58:17:db:4d:a2:32:47:bd:1c:
                    ad:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A6:E0:32:36:90:07:36:F2:D7:AC:4D:84:BE:8E:FF:FA:70:0D:D2
            X509v3 Authority Key Identifier:
                keyid:93:C7:DC:5F:72:74:5D:C1:18:91:AB:06:EE:4B:B6:EA:04:DB:F4:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8fcX3J0XcEYkasG7ku26gTb9E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0472d7-4d1f-4618-b0a8-006b83e10438/1/gabgMjaQBzby16xNhL6O__pwDdI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0472d7-4d1f-4618-b0a8-006b83e10438/1/k8fcX3J0XcEYkasG7ku26gTb9E0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.247.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:1b:37:67:be:5a:95:b8:d0:a5:5c:ca:e1:9b:44:2d:d2:01:
         2c:dd:c1:ca:fb:5c:1d:37:b0:9b:ca:4f:1e:63:2b:67:cd:56:
         cb:ee:74:d6:94:10:27:2c:ec:a9:d5:a8:1b:28:56:35:7f:e9:
         77:98:28:0b:7d:31:59:d7:95:0c:ad:40:4b:f0:97:11:b1:e2:
         e1:54:79:66:c4:67:48:52:9e:08:eb:59:31:de:c5:86:84:3d:
         4b:b7:59:f3:cd:22:0e:a3:88:1b:2b:f4:6d:5b:71:1d:f9:62:
         0e:6b:d5:b6:59:1f:d8:e9:25:d7:1c:a2:ad:15:a1:10:39:33:
         5a:8c:6a:c3:9a:ce:4a:8e:ee:ef:b7:1b:af:46:72:47:9a:5f:
         21:18:2a:f4:b4:a4:f3:55:c2:f1:32:f6:c7:25:67:92:36:7e:
         72:87:d0:f9:71:34:b8:10:1d:a2:66:80:9c:fa:74:e5:a8:99:
         10:5c:47:3f:d8:02:66:91:88:d3:82:46:c2:b9:05:3a:a9:90:
         5f:29:10:fb:19:48:63:06:e0:97:ff:0a:26:44:50:33:0d:e3:
         51:bd:72:07:7f:b4:74:1f:de:c2:ae:a0:c9:3e:6b:0f:b1:83:
         f9:c4:ca:74:0f:d0:26:d9:82:85:0f:50:f8:a5:cd:c7:dc:17:
         51:52:20:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:42 2024 by rpki-client on console-ams.rpki-client.org