Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0bffbb-b21c-43d2-82a5-2b24b6723aff/1/dVUChmjEOY0ib68ccijGM9A8JcM.roa
File:                     dVUChmjEOY0ib68ccijGM9A8JcM.roa (raw, json)
Hash identifier:          nnE0yoogmTw4KcP2Z0nOvyefiIkmKzIon8cnkGvLczg=
Subject key identifier:   75:55:02:86:68:C4:39:8D:22:6F:AF:1C:72:28:C6:33:D0:3C:25:C3
Certificate issuer:       /CN=e14a9ac72ce8b28ab6349dad075f4eec3dcb847d
Certificate serial:       0185728C84D02386FDAD9A36D0E604B05827
Authority key identifier: E1:4A:9A:C7:2C:E8:B2:8A:B6:34:9D:AD:07:5F:4E:EC:3D:CB:84:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Uqaxyzosoq2NJ2tB19O7D3LhH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/0bffbb-b21c-43d2-82a5-2b24b6723aff/1/dVUChmjEOY0ib68ccijGM9A8JcM.roa
Signing time:             Mon 02 Jan 2023 12:54:49 +0000
ROA not before:           Mon 02 Jan 2023 12:54:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51067
IP address blocks:        91.216.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:8c:84:d0:23:86:fd:ad:9a:36:d0:e6:04:b0:58:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14a9ac72ce8b28ab6349dad075f4eec3dcb847d
        Validity
            Not Before: Jan  2 12:54:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7555028668c4398d226faf1c7228c633d03c25c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:27:6c:81:e5:f6:c9:c5:3e:b9:78:49:e0:06:
                    f1:9a:2d:47:ef:42:a9:3c:8f:3b:29:d0:59:e8:19:
                    ff:ac:3f:a4:1b:34:f8:dc:49:3a:cb:e4:43:16:9f:
                    d2:cd:d4:0a:13:51:c4:a5:cf:22:06:f8:f1:2d:07:
                    47:c4:c9:3b:04:da:4d:5d:6b:fe:d5:33:50:8a:a4:
                    7b:bc:ac:c9:f5:c8:97:51:e2:cf:2d:74:d2:82:2d:
                    ce:54:2c:a6:38:72:ba:14:68:86:ba:d3:b3:a6:89:
                    bf:8f:f7:37:be:d5:90:7f:f2:6a:12:20:7f:25:ee:
                    81:a9:22:8f:88:05:aa:75:6f:d2:de:58:35:b3:bc:
                    39:db:70:6e:9b:ba:2e:d7:c4:06:4b:16:24:56:30:
                    df:b6:69:79:4b:01:03:d8:c2:ee:54:7b:4f:b1:d3:
                    60:51:4a:49:1d:6c:a7:de:17:76:3d:93:5a:db:44:
                    18:04:bd:52:54:a3:72:24:92:78:cf:49:c1:85:03:
                    47:2c:c2:a9:44:34:18:e8:78:11:bd:96:14:fd:62:
                    09:70:d3:c3:61:91:ff:fb:ec:1f:81:b6:47:ed:8f:
                    5d:3f:11:d3:fd:06:d3:22:fa:72:49:c6:33:39:04:
                    7c:9e:6a:a3:94:6a:70:15:28:07:20:35:80:5b:ed:
                    35:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:55:02:86:68:C4:39:8D:22:6F:AF:1C:72:28:C6:33:D0:3C:25:C3
            X509v3 Authority Key Identifier:
                keyid:E1:4A:9A:C7:2C:E8:B2:8A:B6:34:9D:AD:07:5F:4E:EC:3D:CB:84:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Uqaxyzosoq2NJ2tB19O7D3LhH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0bffbb-b21c-43d2-82a5-2b24b6723aff/1/dVUChmjEOY0ib68ccijGM9A8JcM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0bffbb-b21c-43d2-82a5-2b24b6723aff/1/4Uqaxyzosoq2NJ2tB19O7D3LhH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:67:0c:0a:6d:ce:ef:a4:2c:0f:3a:b4:2a:d7:8a:bb:ea:26:
         16:cf:fb:ff:c2:5b:aa:77:c7:c1:3f:ba:ae:24:44:46:e5:9e:
         19:ba:b6:30:55:43:f5:49:21:10:2c:9f:f2:63:c3:36:85:c8:
         0a:bb:91:c4:1a:a3:d1:6d:1e:21:a8:af:a7:04:13:ba:05:d0:
         e9:ca:a4:97:30:ec:a2:ce:58:e7:e4:a7:24:0d:09:9d:c7:49:
         a5:6c:60:70:29:10:8e:87:f0:eb:2c:ba:5c:5b:3c:51:cf:62:
         75:25:2d:e4:9d:19:48:0f:3e:3b:48:a6:60:e2:de:bd:e5:31:
         2b:d3:a0:14:8d:67:ea:4b:80:5f:66:44:25:d1:e9:c7:68:95:
         36:90:bb:06:13:23:2b:3f:1d:e3:49:a1:54:05:5f:22:2b:21:
         c6:b9:d6:56:c1:9c:6f:6e:4e:ab:84:1e:18:0e:b4:c5:37:22:
         db:76:ef:19:ad:29:07:39:0f:cf:69:0b:2c:71:e9:9e:ee:9c:
         4c:f1:9f:f1:a2:a1:77:b1:66:ee:c9:4a:e8:1b:c7:84:c4:fb:
         b7:07:53:06:db:fe:d3:b8:39:6d:79:13:4f:92:5d:ec:b3:63:
         53:1d:b9:b1:f4:69:0d:da:ee:78:4b:45:f0:6d:b2:69:ec:70:
         15:fd:3d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:46 2024 by rpki-client on console-fra.rpki-client.org