Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/N5yWU8PmAFrtZGGJDR4EFEVYkIc.roa
File:                     N5yWU8PmAFrtZGGJDR4EFEVYkIc.roa (raw, json)
Hash identifier:          OZbTNh9JqWV4J5u8odtIoZuZdgLIAHEqiXNlycudf6M=
Subject key identifier:   37:9C:96:53:C3:E6:00:5A:ED:64:61:89:0D:1E:04:14:45:58:90:87
Certificate issuer:       /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial:       01856D11CFFF65AF306ACB1E56B5A9DD69EB
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/N5yWU8PmAFrtZGGJDR4EFEVYkIc.roa
Signing time:             Sun 01 Jan 2023 11:22:41 +0000
ROA not before:           Sun 01 Jan 2023 11:22:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3214
IP address blocks:        91.193.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:11:cf:ff:65:af:30:6a:cb:1e:56:b5:a9:dd:69:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
        Validity
            Not Before: Jan  1 11:22:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=379c9653c3e6005aed6461890d1e041445589087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:63:d9:f8:42:23:98:bf:7e:92:99:d0:84:da:
                    16:78:82:c3:14:bf:d8:8b:62:cf:9a:45:39:82:98:
                    1a:4e:76:c6:1c:20:f5:5a:8e:c7:b4:00:09:6a:8a:
                    67:af:c8:25:94:f7:e1:ea:f6:50:5e:c2:62:6d:ab:
                    e1:58:9e:c5:01:dc:c7:f0:97:42:03:c7:56:a2:3d:
                    46:5c:aa:59:ce:a2:da:cf:d2:a3:5a:cf:0c:07:d8:
                    64:72:17:05:f9:31:57:9d:48:f2:1c:a9:e1:45:e2:
                    6f:ee:84:d3:bc:cc:78:c3:9f:eb:4f:61:c2:58:f7:
                    eb:09:24:d4:da:d6:85:ff:92:08:ae:10:10:f7:e1:
                    eb:8b:bd:db:60:cf:c1:5a:5c:0b:4b:69:0d:2b:6d:
                    48:96:a2:22:6a:b9:44:89:0a:96:fb:75:2d:ca:52:
                    d5:ad:f3:98:f3:4e:96:e2:fc:13:7e:93:f9:49:53:
                    84:67:1e:2b:e7:37:fc:d2:8a:d9:3d:c9:35:82:9c:
                    8a:f1:c9:de:20:18:1b:f1:82:40:29:58:08:c6:18:
                    dc:96:29:75:43:c1:c5:4b:f2:cf:68:81:5c:ed:8c:
                    bf:63:72:d8:c8:4d:e7:3c:99:af:83:a2:f2:a9:42:
                    82:50:0d:c3:71:a6:af:86:b2:d0:64:23:09:2d:d2:
                    8e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9C:96:53:C3:E6:00:5A:ED:64:61:89:0D:1E:04:14:45:58:90:87
            X509v3 Authority Key Identifier:
                keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/N5yWU8PmAFrtZGGJDR4EFEVYkIc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.193.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:c9:2c:0e:6d:d4:ab:a3:32:d4:03:86:c7:23:21:ff:89:63:
         1b:81:bb:95:31:61:97:6d:34:c4:ef:ad:a7:4e:01:ea:e8:72:
         90:f9:7f:f4:7e:1b:6d:13:b7:e8:c6:97:b5:d8:c0:09:48:1e:
         93:29:35:69:6c:34:72:45:a6:4c:87:18:47:d0:85:69:a8:01:
         0f:66:13:58:8d:66:89:f6:4e:eb:5d:0c:d7:bd:9d:e8:8a:92:
         aa:c7:39:2f:01:56:44:dd:03:48:42:01:a2:37:4e:49:a1:8e:
         87:5b:63:21:b6:69:ea:10:64:38:b8:46:eb:65:f9:03:f0:78:
         f8:e0:2c:d1:73:c9:b5:5c:cc:09:5e:4a:d9:cf:94:bf:89:d0:
         28:97:5d:8c:49:83:b0:1e:8b:c4:2f:a8:e0:a5:b2:cf:1c:95:
         50:8b:53:75:3c:e3:9c:8f:fa:8b:d2:55:b7:2e:ed:31:a2:ec:
         3a:55:63:c1:e6:8a:a6:ce:91:77:92:0c:e6:a4:ce:77:bb:ad:
         70:d3:b7:9e:5e:aa:28:98:f9:36:2d:82:b5:b6:2c:a0:b4:75:
         f2:60:41:db:d3:93:1c:df:13:93:2f:21:c3:b9:d7:4a:e4:76:
         cc:b0:7e:43:e3:2b:66:bd:0f:5a:9b:1d:36:59:7f:27:b4:70:
         fa:83:27:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:17 2024 by rpki-client on console-ams.rpki-client.org