Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3c57c6-9739-4625-b029-5b8716dd3623/1/N_peZp5-JtLsNgRsdEf3lvf3ERg.roa
File:                     N_peZp5-JtLsNgRsdEf3lvf3ERg.roa (raw, json)
Hash identifier:          tFP+OE2AaX0D4ChjuPMKz8qCKmYGL8d31gKXDDS0abU=
Subject key identifier:   37:FA:5E:66:9E:7E:26:D2:EC:36:04:6C:74:47:F7:96:F7:F7:11:18
Certificate issuer:       /CN=2eac2dd8b1280594aef6becb195a55b451c7b09b
Certificate serial:       04A53C04
Authority key identifier: 2E:AC:2D:D8:B1:28:05:94:AE:F6:BE:CB:19:5A:55:B4:51:C7:B0:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lqwt2LEoBZSu9r7LGVpVtFHHsJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/3c57c6-9739-4625-b029-5b8716dd3623/1/N_peZp5-JtLsNgRsdEf3lvf3ERg.roa
Signing time:             Sat 01 Jan 2022 09:57:56 +0000
ROA not before:           Sat 01 Jan 2022 09:57:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49445
IP address blocks:        91.214.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77937668 (0x4a53c04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eac2dd8b1280594aef6becb195a55b451c7b09b
        Validity
            Not Before: Jan  1 09:57:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=37fa5e669e7e26d2ec36046c7447f796f7f71118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:69:21:c2:83:4f:a7:10:6d:46:6d:0f:7b:6d:
                    01:b5:37:87:49:32:ce:59:da:1d:5d:f5:bb:17:b4:
                    69:43:09:0f:7c:d0:32:a4:2e:f2:9c:08:b5:89:c3:
                    86:13:ec:c4:90:eb:ff:18:6f:d5:fb:40:a3:a7:d7:
                    48:4c:08:d8:2b:e1:15:22:29:83:b4:82:1f:3d:f8:
                    63:d1:df:b4:06:4a:5f:34:16:01:82:09:c6:f0:c7:
                    44:69:02:b0:80:bb:d0:ee:ac:97:fc:2e:f0:f0:3e:
                    95:66:68:e5:d5:f2:d4:7c:11:b2:f7:da:1d:7b:c2:
                    1c:14:39:ca:c5:c0:bb:ae:2a:39:c7:35:0c:e0:f7:
                    5f:d4:09:4b:1b:f3:9b:dc:ce:ac:eb:8e:16:db:83:
                    05:10:c1:e9:77:2d:e8:b8:b4:97:22:df:c9:28:3c:
                    04:e4:60:fb:5e:93:40:f9:76:98:b9:e5:8b:4e:83:
                    2c:b9:77:e2:75:5f:01:72:17:60:cc:3c:d5:b2:41:
                    10:ef:e2:bf:be:3c:52:fd:3a:64:8e:2f:0c:f7:fa:
                    6f:8f:32:d3:be:9e:62:67:96:d6:b6:ce:78:4f:c5:
                    6a:b4:91:f1:85:7f:12:1a:e4:ff:8b:44:50:09:18:
                    1a:5e:e7:c4:b8:46:0a:20:39:59:aa:02:41:41:51:
                    17:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FA:5E:66:9E:7E:26:D2:EC:36:04:6C:74:47:F7:96:F7:F7:11:18
            X509v3 Authority Key Identifier:
                keyid:2E:AC:2D:D8:B1:28:05:94:AE:F6:BE:CB:19:5A:55:B4:51:C7:B0:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lqwt2LEoBZSu9r7LGVpVtFHHsJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3c57c6-9739-4625-b029-5b8716dd3623/1/N_peZp5-JtLsNgRsdEf3lvf3ERg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3c57c6-9739-4625-b029-5b8716dd3623/1/Lqwt2LEoBZSu9r7LGVpVtFHHsJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.214.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:e1:53:33:99:67:77:5b:ee:04:67:a2:5d:75:68:f0:6d:92:
         02:3b:f3:59:07:ff:50:39:70:be:62:79:ff:4e:b9:5a:83:e3:
         9c:34:d7:18:5c:63:ba:25:03:86:04:52:43:7f:9f:74:2b:89:
         b2:88:d9:f3:ec:74:90:92:49:6c:3c:27:28:00:98:bf:29:c4:
         39:50:1d:b0:49:6c:87:55:cf:77:d5:85:46:39:61:e6:5c:96:
         13:e9:2c:87:64:d9:45:90:3a:7c:c9:13:17:37:ff:f8:4e:42:
         e0:0f:e7:28:a2:b6:54:28:fd:73:21:d9:c5:26:e7:3e:78:d7:
         67:7f:ca:cc:82:4b:e0:50:57:cd:45:28:ec:33:c3:41:57:75:
         e8:9a:8d:67:b9:d2:20:bf:a0:45:13:5e:09:50:f4:59:5d:aa:
         93:1c:b4:98:f5:cb:83:47:56:a0:9f:84:c6:78:b0:0e:d1:22:
         aa:9c:7c:7b:00:46:cb:42:12:56:9a:03:1c:e8:7c:22:45:48:
         f2:b9:69:53:29:f9:ce:e8:80:ac:8f:0f:db:85:4f:d3:95:bd:
         75:8d:cf:8c:e5:ff:b3:cd:27:da:66:a5:97:a5:35:36:5e:7f:
         b8:06:50:33:67:f9:df:ef:6c:7c:b0:8f:5a:c8:17:f0:04:2c:
         41:ba:98:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:37 2024 by rpki-client on console-ams.rpki-client.org