Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/pluyN6ITHQi5TzgFral8tOFeGso.roa
File:                     pluyN6ITHQi5TzgFral8tOFeGso.roa (raw, json)
Hash identifier:          PR1cMMCUO2I5Kw95b0N4mSQ2C/ax6D7t/iuAqCG2fxI=
Subject key identifier:   A6:5B:B2:37:A2:13:1D:08:B9:4F:38:05:AD:A9:7C:B4:E1:5E:1A:CA
Certificate issuer:       /CN=720606eddbcec7a57211941a67cc729b42915c5e
Certificate serial:       055898
Authority key identifier: 72:06:06:ED:DB:CE:C7:A5:72:11:94:1A:67:CC:72:9B:42:91:5C:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgYG7dvOx6VyEZQaZ8xym0KRXF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/pluyN6ITHQi5TzgFral8tOFeGso.roa
Signing time:             Thu 24 Feb 2022 22:09:27 +0000
ROA not before:           Thu 24 Feb 2022 22:09:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62240
IP address blocks:        91.213.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350360 (0x55898)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=720606eddbcec7a57211941a67cc729b42915c5e
        Validity
            Not Before: Feb 24 22:09:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a65bb237a2131d08b94f3805ada97cb4e15e1aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:68:d8:7a:de:de:f7:5e:74:6a:44:de:22:
                    d9:5c:70:9e:16:e3:58:12:a1:29:ba:1b:79:b5:c4:
                    94:66:2b:1d:26:ae:34:73:71:4c:27:e5:7c:31:09:
                    36:09:2e:5a:e0:47:62:fc:1b:09:e3:3d:f4:8e:2e:
                    51:c5:07:ec:6e:ab:55:55:fa:37:8b:3d:35:f4:7f:
                    dc:8f:15:b5:dc:0b:e9:16:6e:65:ba:f9:3c:c8:cd:
                    56:34:fc:1e:8a:b0:53:5d:f7:b2:86:6e:a1:4d:ef:
                    14:04:4e:e5:cd:82:b6:b7:dc:30:e9:1d:27:49:89:
                    ed:36:f4:01:4e:49:f9:e9:c8:1b:2f:08:f9:5c:06:
                    08:33:4e:43:35:fa:60:f9:a7:56:21:77:83:1e:b6:
                    ec:ea:f6:f7:07:69:be:41:8c:e2:a3:53:9a:73:b8:
                    8c:ae:6b:96:ab:94:cb:62:6c:4e:58:fa:82:6d:2f:
                    39:9d:55:80:c0:0f:47:23:9e:56:c2:ff:e2:5f:b5:
                    41:0b:f4:c0:e5:f1:e7:46:df:b7:d4:bf:75:36:fc:
                    89:de:a6:f7:88:b1:40:50:42:34:8a:05:3e:66:15:
                    2c:22:e2:f0:7f:57:63:14:e9:68:19:1f:fd:ae:1a:
                    57:b6:94:82:9b:3e:c7:ee:ad:49:df:d7:1b:b5:c9:
                    39:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5B:B2:37:A2:13:1D:08:B9:4F:38:05:AD:A9:7C:B4:E1:5E:1A:CA
            X509v3 Authority Key Identifier:
                keyid:72:06:06:ED:DB:CE:C7:A5:72:11:94:1A:67:CC:72:9B:42:91:5C:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgYG7dvOx6VyEZQaZ8xym0KRXF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/pluyN6ITHQi5TzgFral8tOFeGso.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/cgYG7dvOx6VyEZQaZ8xym0KRXF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:2c:1a:05:76:2d:84:60:ab:2c:aa:ce:4a:60:03:31:c5:0a:
         df:db:a9:31:4c:a7:97:5b:be:42:09:16:e5:7a:b7:31:ee:0d:
         2f:31:59:b8:bb:12:65:81:f0:05:51:13:b7:3c:9a:9b:5c:39:
         5d:b4:11:85:2f:85:b4:28:5d:bf:58:22:87:51:b7:c2:47:79:
         83:88:06:41:33:6c:29:5f:42:bf:87:e1:1b:02:93:f6:43:81:
         c0:b3:a2:86:03:ab:50:c3:db:90:0c:f9:5e:33:27:85:dc:74:
         eb:bb:e8:50:61:d4:c7:8d:5b:3f:b6:bf:5e:ff:ad:44:6d:f6:
         8e:6c:6e:ba:ab:72:87:85:19:11:2a:73:75:95:95:ff:96:2c:
         a8:14:71:00:17:18:5d:bb:df:59:b4:09:cd:b4:a0:2d:5c:c6:
         8d:47:2d:4d:60:15:a8:c5:75:e8:b1:15:54:e5:58:d8:e1:c2:
         b5:b5:4a:34:74:aa:fd:1d:d4:a7:ef:d0:e9:6f:d9:ca:46:5c:
         92:1f:d1:8f:e3:8c:8f:f9:2a:3e:94:76:22:e9:b5:24:50:28:
         1d:ad:ed:ce:bc:61:ad:05:a1:29:45:05:b3:b9:6b:b1:b3:62:
         88:94:06:dc:70:4a:47:66:63:c7:be:63:6a:4f:69:e1:34:91:
         17:37:9b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:38 2024 by rpki-client on console-ams.rpki-client.org