Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/008ca6-6ca8-4c5a-9bb2-b69d13b2e39e/1/V1u4i9lB4I6HYXM7ZkrXBUDJ0Ks.roa
File:                     V1u4i9lB4I6HYXM7ZkrXBUDJ0Ks.roa (raw, json)
Hash identifier:          SDKXyQ9lZBZouDtq5XyXMm6B9kwlxCosnU1roIN+3Jw=
Subject key identifier:   57:5B:B8:8B:D9:41:E0:8E:87:61:73:3B:66:4A:D7:05:40:C9:D0:AB
Certificate issuer:       /CN=8fc18efa49c2768e31ff9073d35189b908c52077
Certificate serial:       01820C22B1639D5022507688885209A8BA8B
Authority key identifier: 8F:C1:8E:FA:49:C2:76:8E:31:FF:90:73:D3:51:89:B9:08:C5:20:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j8GO-knCdo4x_5Bz01GJuQjFIHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/008ca6-6ca8-4c5a-9bb2-b69d13b2e39e/1/V1u4i9lB4I6HYXM7ZkrXBUDJ0Ks.roa
Signing time:             Sun 17 Jul 2022 12:29:36 +0000
ROA not before:           Sun 17 Jul 2022 12:29:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        91.246.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:0c:22:b1:63:9d:50:22:50:76:88:88:52:09:a8:ba:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc18efa49c2768e31ff9073d35189b908c52077
        Validity
            Not Before: Jul 17 12:29:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=575bb88bd941e08e8761733b664ad70540c9d0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7c:a9:ec:23:73:ac:5d:c5:c2:64:44:25:9d:
                    3e:e1:8f:a3:c5:89:a3:0f:ef:e1:61:09:dc:3b:b8:
                    42:02:ce:44:d4:b0:3c:32:04:25:d6:31:4d:b5:c1:
                    bd:b8:88:1b:ea:c1:8c:27:1e:9d:7f:73:70:3d:f9:
                    64:b0:d6:de:2d:6f:23:11:fd:d8:6c:b1:06:86:f3:
                    2b:25:47:3c:53:f0:8b:14:67:f0:0a:64:c1:75:59:
                    52:28:90:46:d5:0b:b6:07:0e:fe:89:2c:bf:36:2e:
                    b9:f3:21:c9:6d:19:e7:fd:ee:c3:bd:16:c4:8f:93:
                    bd:70:62:80:a0:8e:d0:c9:83:d9:26:f6:69:96:a6:
                    61:29:40:a0:3b:77:40:75:c8:ec:7f:17:fd:8d:60:
                    a4:34:29:23:1b:45:1d:01:5d:32:91:a9:10:f3:d6:
                    16:8e:6d:83:15:9a:70:52:5b:80:52:e3:d2:04:03:
                    b5:1b:a4:20:63:89:41:4b:8f:08:51:d7:73:da:13:
                    c3:f1:26:fa:ce:08:48:f4:d0:05:11:31:ce:f3:64:
                    f3:79:b2:1a:9a:d2:f8:d2:89:98:78:ce:33:7c:fa:
                    af:8b:18:45:c3:36:69:5a:9e:b7:76:13:a8:eb:6e:
                    14:72:a5:24:6d:06:06:e7:e2:af:43:a2:e9:af:cb:
                    d5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5B:B8:8B:D9:41:E0:8E:87:61:73:3B:66:4A:D7:05:40:C9:D0:AB
            X509v3 Authority Key Identifier:
                keyid:8F:C1:8E:FA:49:C2:76:8E:31:FF:90:73:D3:51:89:B9:08:C5:20:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8GO-knCdo4x_5Bz01GJuQjFIHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/008ca6-6ca8-4c5a-9bb2-b69d13b2e39e/1/V1u4i9lB4I6HYXM7ZkrXBUDJ0Ks.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/008ca6-6ca8-4c5a-9bb2-b69d13b2e39e/1/j8GO-knCdo4x_5Bz01GJuQjFIHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.246.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:54:13:9f:38:62:66:16:b7:b2:3e:6f:65:00:4d:1a:6f:03:
         1e:b9:94:c3:bc:74:a8:7d:22:53:c9:7a:95:88:8e:32:67:07:
         9b:dc:31:9e:1d:e4:97:65:b6:25:7c:a2:62:1e:73:fb:9f:fa:
         fb:82:f3:ba:c5:88:da:f0:85:65:60:a1:95:cd:05:d8:1c:61:
         8a:d2:40:77:76:fa:25:b1:15:6d:a1:b5:64:79:1c:87:79:e2:
         12:fa:83:7c:a3:0c:1a:44:11:0d:76:f9:54:b9:c6:37:26:47:
         76:0c:ab:0b:4a:b5:f1:80:26:5f:82:ce:a7:0e:ef:dd:5e:1d:
         64:a6:1b:d4:a6:f2:98:d7:10:f0:7f:2b:0e:ea:06:c1:50:29:
         3f:60:a0:35:14:1f:7b:10:c4:62:5f:b9:99:90:23:ea:be:93:
         42:8c:e0:74:6e:f5:74:08:07:9d:a3:e3:72:a3:fb:aa:ac:a9:
         bc:9f:05:12:e2:d6:60:8e:be:c5:05:29:1f:e8:03:f6:2f:da:
         30:bd:73:e0:c2:8e:3a:5b:b3:62:eb:dc:eb:cb:48:e0:9d:2c:
         da:57:0e:77:fd:7a:1f:ae:04:b0:5f:cc:82:fe:42:e9:89:e3:
         9a:ab:40:e1:ec:05:6a:a4:49:ef:ca:3d:8d:38:d6:70:48:5d:
         88:a4:70:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:49 2024 by rpki-client on console-fra.rpki-client.org