Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/008ca6-6ca8-4c5a-9bb2-b69d13b2e39e/1/noyB0m05qsmSfCYqmHxMdsp_y3I.roa
File:                     noyB0m05qsmSfCYqmHxMdsp_y3I.roa (raw, json)
Hash identifier:          l8zM1ZnalmMP+6eTZap5I4F/0yBf6wwL1kpnwuQUOwA=
Subject key identifier:   9E:8C:81:D2:6D:39:AA:C9:92:7C:26:2A:98:7C:4C:76:CA:7F:CB:72
Certificate issuer:       /CN=8fc18efa49c2768e31ff9073d35189b908c52077
Certificate serial:       0185A59C593BAD74DF468B045FD5166E9505
Authority key identifier: 8F:C1:8E:FA:49:C2:76:8E:31:FF:90:73:D3:51:89:B9:08:C5:20:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j8GO-knCdo4x_5Bz01GJuQjFIHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/008ca6-6ca8-4c5a-9bb2-b69d13b2e39e/1/noyB0m05qsmSfCYqmHxMdsp_y3I.roa
Signing time:             Thu 12 Jan 2023 10:52:45 +0000
ROA not before:           Thu 12 Jan 2023 10:52:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34636
IP address blocks:        91.246.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a5:9c:59:3b:ad:74:df:46:8b:04:5f:d5:16:6e:95:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc18efa49c2768e31ff9073d35189b908c52077
        Validity
            Not Before: Jan 12 10:52:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9e8c81d26d39aac9927c262a987c4c76ca7fcb72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:79:71:c3:7d:ff:f1:ff:48:f8:9e:4e:f4:2a:
                    b6:73:d1:09:7d:88:b8:ea:02:e6:ae:8a:c0:1d:33:
                    b7:aa:31:ee:0f:d9:4e:70:ec:1a:cf:d1:09:a6:f0:
                    10:06:f6:49:b7:ba:37:9d:f0:a6:fc:07:d4:8b:02:
                    24:45:94:19:47:0d:e0:c8:cd:e4:ff:cb:cf:58:5e:
                    ea:c0:45:27:94:76:0b:f0:60:6a:ed:de:0c:3f:10:
                    e0:7a:16:7f:b2:1b:53:97:74:39:27:75:23:29:52:
                    ac:0d:1d:41:03:04:ea:e2:68:4a:02:e1:dd:7a:0e:
                    b6:ce:53:37:fd:c8:88:f9:82:bd:aa:6b:f6:4e:0b:
                    0d:b0:cc:7a:f1:7c:7f:56:b9:7d:f7:cb:b5:de:df:
                    09:5a:29:9d:50:ed:73:90:4e:aa:1c:de:96:80:11:
                    8d:c7:c6:2b:95:1d:bd:bc:05:ae:f5:d6:6d:8d:1b:
                    4b:7b:49:3c:1f:ec:c0:40:be:d8:fb:a3:7f:86:b7:
                    eb:27:21:38:ed:b8:85:21:5b:b0:a1:35:67:5e:7f:
                    5d:28:fe:e5:7a:d9:ca:01:4e:07:66:61:f0:6d:d1:
                    3d:cf:81:32:dd:83:2a:4f:6e:4c:10:10:1a:4f:82:
                    f9:d8:4a:ff:77:d0:a7:d8:a2:37:36:25:0b:e5:68:
                    f7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8C:81:D2:6D:39:AA:C9:92:7C:26:2A:98:7C:4C:76:CA:7F:CB:72
            X509v3 Authority Key Identifier:
                keyid:8F:C1:8E:FA:49:C2:76:8E:31:FF:90:73:D3:51:89:B9:08:C5:20:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8GO-knCdo4x_5Bz01GJuQjFIHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/008ca6-6ca8-4c5a-9bb2-b69d13b2e39e/1/noyB0m05qsmSfCYqmHxMdsp_y3I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/008ca6-6ca8-4c5a-9bb2-b69d13b2e39e/1/j8GO-knCdo4x_5Bz01GJuQjFIHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.246.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:29:85:5b:a7:8b:a2:f5:4d:8e:68:08:98:21:e5:41:92:5e:
         34:57:c2:74:73:5a:80:3d:10:33:58:2b:67:03:0c:93:14:bc:
         71:8f:85:9a:23:11:d8:ba:93:c4:49:9d:79:95:7a:d1:0d:ea:
         05:3f:77:62:fa:38:5f:01:c5:4a:e2:c3:59:ee:51:62:11:79:
         dd:80:c6:d7:0f:fb:0b:08:fa:06:27:8f:5f:2e:96:5f:60:85:
         83:d6:18:6c:a1:73:91:8b:9c:f0:01:1d:69:18:e7:34:31:df:
         39:c7:0a:89:63:fb:9b:40:f3:64:ba:da:a8:d2:f4:0f:51:e7:
         3c:03:f1:57:2d:61:87:ea:44:dc:2d:1c:9e:9e:b6:47:30:5c:
         48:06:81:02:7a:6c:34:74:b3:2c:3b:5e:65:f3:d0:d4:eb:ba:
         8d:d3:35:c3:d0:98:00:3c:e9:ab:39:73:47:eb:dc:d6:d8:d0:
         38:ff:9e:e9:e6:0a:67:54:f3:ec:2b:57:d6:2e:2a:52:a3:70:
         10:90:fc:38:14:4e:74:0b:34:27:51:9f:89:ee:4f:d6:6e:7d:
         4d:99:ea:0c:bb:75:a5:3e:9e:13:12:e8:c1:29:17:ad:79:41:
         d3:4a:24:af:9a:f6:51:cf:b4:8a:56:b3:00:ae:f5:2c:e9:43:
         7f:da:80:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:49 2024 by rpki-client on console-fra.rpki-client.org