Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/df0a38-9cad-464c-a836-42306f633155/1/83RJy09Pa4VZAGTHVKohd3b9SSo.roa
File:                     83RJy09Pa4VZAGTHVKohd3b9SSo.roa (raw, json)
Hash identifier:          f/nJtDu8MuVSMCQyc4eQrwevWxRAECf82jckZPyBRho=
Subject key identifier:   F3:74:49:CB:4F:4F:6B:85:59:00:64:C7:54:AA:21:77:76:FD:49:2A
Certificate issuer:       /CN=4d7a544d73e368f69830cc8be0b203222267ee50
Certificate serial:       06740051
Authority key identifier: 4D:7A:54:4D:73:E3:68:F6:98:30:CC:8B:E0:B2:03:22:22:67:EE:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXpUTXPjaPaYMMyL4LIDIiJn7lA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/df0a38-9cad-464c-a836-42306f633155/1/83RJy09Pa4VZAGTHVKohd3b9SSo.roa
Signing time:             Sat 01 Jan 2022 09:01:55 +0000
ROA not before:           Sat 01 Jan 2022 09:01:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197077
IP address blocks:        91.220.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108265553 (0x6740051)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d7a544d73e368f69830cc8be0b203222267ee50
        Validity
            Not Before: Jan  1 09:01:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f37449cb4f4f6b85590064c754aa217776fd492a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:15:a2:de:32:e3:cd:af:ba:34:e1:06:39:5c:
                    ab:87:be:a0:4e:07:15:ae:fd:92:24:ae:ad:11:1d:
                    8b:c5:8f:b4:4a:41:59:6d:9c:98:c3:8c:70:bd:ce:
                    0d:f7:c7:54:ba:99:18:fe:b3:b9:0e:c5:78:a0:aa:
                    f3:a3:10:42:cc:e2:32:4b:7c:de:44:aa:9b:81:5c:
                    38:fb:ac:7b:ec:5f:04:62:5b:2b:c4:40:2b:34:60:
                    ec:f8:17:2f:ef:77:5e:58:f9:f0:1c:ac:30:6a:f4:
                    7f:40:ae:06:79:5f:5d:c0:6d:e7:18:99:f3:d9:75:
                    50:f9:b2:14:cc:98:ca:02:4d:68:b9:a4:e8:c8:78:
                    0a:67:6f:fd:04:8a:1b:5b:b7:4b:cc:c4:ca:ac:91:
                    48:1b:0f:f8:90:ed:52:0e:df:dc:40:6f:bb:0e:79:
                    39:4c:59:20:e6:54:5d:d0:34:8d:67:76:2a:39:81:
                    7e:ab:c0:d6:57:10:44:1a:eb:84:2f:f5:67:1c:42:
                    57:5a:34:63:00:72:d1:3f:bf:6b:91:76:d9:f7:b9:
                    d3:fd:71:35:d3:a0:9d:c1:e7:2d:82:86:d6:8c:c4:
                    db:df:60:dd:2b:7c:c2:ca:84:6f:42:86:18:14:2c:
                    59:60:18:c8:a5:95:d3:60:77:34:50:a7:0c:2b:08:
                    3d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:74:49:CB:4F:4F:6B:85:59:00:64:C7:54:AA:21:77:76:FD:49:2A
            X509v3 Authority Key Identifier:
                keyid:4D:7A:54:4D:73:E3:68:F6:98:30:CC:8B:E0:B2:03:22:22:67:EE:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXpUTXPjaPaYMMyL4LIDIiJn7lA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/df0a38-9cad-464c-a836-42306f633155/1/83RJy09Pa4VZAGTHVKohd3b9SSo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/df0a38-9cad-464c-a836-42306f633155/1/TXpUTXPjaPaYMMyL4LIDIiJn7lA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.220.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:3d:b7:16:78:90:2a:4c:8e:7c:12:b7:35:02:a4:b9:63:f8:
         a8:ec:41:1a:d9:13:09:97:fa:d9:4c:65:96:2e:ca:18:2b:9a:
         1a:35:6b:fb:41:3f:f0:39:53:70:d2:36:37:79:68:ad:ac:c1:
         4b:82:44:8a:0c:96:ca:1c:83:36:7f:d8:af:fb:51:d2:64:89:
         9e:5c:5a:77:e2:5a:ed:38:c4:1e:75:82:1c:b9:99:45:94:79:
         bd:3b:55:0e:fc:c9:67:9c:ad:b0:f2:7c:21:ce:3e:07:c5:ce:
         85:f3:4f:df:3f:fa:9d:df:04:0d:ea:a3:23:34:ad:6a:15:cc:
         6d:a3:fd:44:f8:fc:5d:34:07:94:b7:1b:09:cd:d3:b2:96:c8:
         e3:e0:1c:80:df:2e:97:d3:78:1b:40:c8:64:6e:87:0f:5e:77:
         5f:fe:0a:84:aa:0c:32:35:9b:18:c1:fc:7e:93:72:63:45:5c:
         0c:b9:b6:5e:ec:e4:9f:48:b8:69:33:99:93:da:8c:da:7d:14:
         dd:3a:67:9f:8c:b2:b5:d6:f5:9d:b9:fe:91:7c:6b:c1:35:8c:
         46:8c:2d:c8:d3:a6:ed:a0:03:8f:13:eb:4a:50:43:9f:92:c2:
         af:9c:46:f3:d2:c9:85:cd:62:16:d3:e5:d7:30:b8:93:b3:b6:
         58:04:8e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:50 2024 by rpki-client on console-fra.rpki-client.org