Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/008ca6-6ca8-4c5a-9bb2-b69d13b2e39e/1/1ZWVRdB7aZ5N-2GqNrfRq9GeQ44.roa
File:                     1ZWVRdB7aZ5N-2GqNrfRq9GeQ44.roa (raw, json)
Hash identifier:          WTWeW0Wx/dOBSVIFgdIOYHnRfPIhc+6fOYr7+HfrvRQ=
Subject key identifier:   D5:95:95:45:D0:7B:69:9E:4D:FB:61:AA:36:B7:D1:AB:D1:9E:43:8E
Certificate issuer:       /CN=8fc18efa49c2768e31ff9073d35189b908c52077
Certificate serial:       0185EBBBD37200D466ECD7E3989F98CEE608
Authority key identifier: 8F:C1:8E:FA:49:C2:76:8E:31:FF:90:73:D3:51:89:B9:08:C5:20:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j8GO-knCdo4x_5Bz01GJuQjFIHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/008ca6-6ca8-4c5a-9bb2-b69d13b2e39e/1/1ZWVRdB7aZ5N-2GqNrfRq9GeQ44.roa
Signing time:             Thu 26 Jan 2023 01:40:33 +0000
ROA not before:           Thu 26 Jan 2023 01:40:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        91.246.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:eb:bb:d3:72:00:d4:66:ec:d7:e3:98:9f:98:ce:e6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc18efa49c2768e31ff9073d35189b908c52077
        Validity
            Not Before: Jan 26 01:40:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d5959545d07b699e4dfb61aa36b7d1abd19e438e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:02:7f:a9:65:35:fa:87:12:07:ce:0d:22:76:
                    c1:dd:d7:6f:28:69:69:36:9e:09:0a:bb:0d:fa:a4:
                    0c:a6:5a:94:02:61:9f:66:2f:e3:8a:61:8d:14:dd:
                    a9:4b:c2:ce:c6:6e:89:7d:af:d1:b9:a4:0e:f7:b4:
                    46:c4:5d:7a:f6:61:cb:f0:a7:b9:d7:0e:3a:96:3a:
                    21:11:3b:cc:e9:d1:26:9a:d2:d3:22:b0:a9:35:bb:
                    07:8c:b9:98:f3:9c:f5:4f:a1:06:61:0e:01:f3:11:
                    d8:d7:7b:e6:81:18:2d:ca:af:a7:ae:1f:e7:be:cc:
                    d6:16:77:b8:09:f6:8d:8a:cc:ef:1c:a6:a0:23:4e:
                    2f:f2:5d:6b:9e:98:96:9f:ae:6c:16:81:a7:e6:c7:
                    ae:e5:90:5d:52:47:72:6f:32:4a:c8:82:76:4b:60:
                    31:0a:e9:9a:07:6b:0f:2b:1e:6c:12:ab:98:a9:e6:
                    99:9e:60:c0:f8:3e:1f:13:ab:99:e7:04:1b:fe:ea:
                    8c:93:bc:ad:08:bb:25:4e:87:43:39:b1:94:34:f9:
                    75:aa:b0:03:10:9b:a4:38:88:3a:d2:13:04:6b:08:
                    25:13:58:30:74:de:39:d6:85:99:5c:0d:20:3d:ad:
                    14:a9:c1:74:1a:2f:e0:c3:00:6d:09:a5:17:4d:96:
                    32:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:95:95:45:D0:7B:69:9E:4D:FB:61:AA:36:B7:D1:AB:D1:9E:43:8E
            X509v3 Authority Key Identifier:
                keyid:8F:C1:8E:FA:49:C2:76:8E:31:FF:90:73:D3:51:89:B9:08:C5:20:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8GO-knCdo4x_5Bz01GJuQjFIHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/008ca6-6ca8-4c5a-9bb2-b69d13b2e39e/1/1ZWVRdB7aZ5N-2GqNrfRq9GeQ44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/008ca6-6ca8-4c5a-9bb2-b69d13b2e39e/1/j8GO-knCdo4x_5Bz01GJuQjFIHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.246.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:56:89:b5:2f:00:f8:41:85:fd:81:e2:5a:08:bf:30:0b:80:
         cb:e5:f5:5c:91:ed:5f:13:4b:4e:28:33:d2:8f:65:e3:ce:d4:
         45:e6:64:f6:e9:d6:d3:94:74:43:4d:96:7a:73:39:6d:35:67:
         03:1b:bc:6a:6e:f9:94:28:8d:97:87:f1:cf:16:4d:92:96:cc:
         2d:13:5e:61:fc:56:7e:24:dd:5a:8d:7e:fa:f2:d9:a3:5a:81:
         ba:bf:88:ad:9e:41:f9:d6:c7:ff:a1:eb:c3:78:53:8d:46:82:
         00:6c:73:7e:f2:d1:12:49:b3:c8:49:98:3f:ca:a6:41:3a:1e:
         ec:74:bd:b3:24:8a:f3:b8:ae:71:c5:64:a9:0b:ba:da:50:c6:
         6a:16:9d:3b:6c:0e:44:09:ff:f3:36:74:fc:75:fe:e8:e6:a8:
         81:95:fa:51:d5:d3:6e:d2:0f:83:40:c6:2c:53:89:c0:3b:e3:
         98:43:78:f6:fd:75:45:fc:e3:ac:70:46:e0:69:44:33:0b:06:
         41:27:c0:b9:a5:83:80:fa:05:9d:7e:07:53:56:8b:86:d5:9e:
         41:21:96:18:cb:1f:2b:24:d7:68:d3:f1:98:91:7d:d9:a9:e4:
         c4:2b:e4:20:b9:ca:7a:26:9e:df:5c:c7:53:1d:62:3b:5f:96:
         09:be:f6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:22 2024 by rpki-client on console-ams.rpki-client.org