Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e1a66f-ea3b-4d10-9e2d-f5d9c2c27fe3/1/UUYQ5-NwbsCTmb2KB6K-q-ksIOQ.roa
File:                     UUYQ5-NwbsCTmb2KB6K-q-ksIOQ.roa (raw, json)
Hash identifier:          1rw3woSzpbHDyIQ12JdO4X+C2MXUkrS1II+PPWa/mZ0=
Subject key identifier:   51:46:10:E7:E3:70:6E:C0:93:99:BD:8A:07:A2:BE:AB:E9:2C:20:E4
Certificate issuer:       /CN=8115992494f84b601f919431d123614149babaee
Certificate serial:       018CC26D4B8D763B33A3A799EF4F4131B008
Authority key identifier: 81:15:99:24:94:F8:4B:60:1F:91:94:31:D1:23:61:41:49:BA:BA:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gRWZJJT4S2AfkZQx0SNhQUm6uu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/e1a66f-ea3b-4d10-9e2d-f5d9c2c27fe3/1/UUYQ5-NwbsCTmb2KB6K-q-ksIOQ.roa
Signing time:             Mon 01 Jan 2024 00:29:51 +0000
ROA not before:           Mon 01 Jan 2024 00:29:51 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57783
IP address blocks:        91.231.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:4b:8d:76:3b:33:a3:a7:99:ef:4f:41:31:b0:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8115992494f84b601f919431d123614149babaee
        Validity
            Not Before: Jan  1 00:29:51 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=514610e7e3706ec09399bd8a07a2beabe92c20e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5a:8d:d6:ef:a3:19:67:79:6e:55:36:56:07:
                    b5:ad:e4:58:2b:32:1b:2f:5d:1a:cd:20:51:5a:95:
                    3e:5b:2a:51:a8:e9:95:20:6b:bb:b3:cd:c1:43:b7:
                    9a:4d:16:3d:fd:df:b7:64:44:cd:10:c7:77:4f:c0:
                    be:c4:59:1d:c5:5a:02:c3:ec:5e:33:d7:1d:e9:ab:
                    d6:8f:d5:71:a5:57:64:b0:08:9f:12:35:3f:ca:e0:
                    27:ad:9e:c2:0c:15:c5:94:37:97:c9:f3:aa:f5:f2:
                    9e:13:2e:d0:9b:07:aa:ca:98:1c:aa:c9:a6:97:8d:
                    bb:cf:57:9a:80:81:a8:48:08:9d:37:ae:6b:29:76:
                    47:f9:c5:f1:ea:03:3d:4e:06:2a:d4:10:cb:48:4c:
                    9b:e5:c2:96:bd:6a:3b:b3:bb:4f:29:1d:6c:81:ce:
                    30:93:b4:ca:a9:5e:a2:85:c8:9c:ea:19:ad:ab:a6:
                    2e:12:b3:f5:92:36:eb:74:86:e7:50:96:40:68:f8:
                    1e:82:f5:11:d1:68:50:25:cb:7e:cf:ab:ad:66:0f:
                    3d:43:cf:2c:eb:f4:91:c1:f7:4c:af:6c:42:95:b4:
                    a5:d0:24:41:50:13:2c:a4:62:7f:da:25:87:16:cb:
                    02:61:5e:6e:45:4d:bb:20:b1:64:e7:7d:2e:2f:26:
                    1c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:46:10:E7:E3:70:6E:C0:93:99:BD:8A:07:A2:BE:AB:E9:2C:20:E4
            X509v3 Authority Key Identifier:
                keyid:81:15:99:24:94:F8:4B:60:1F:91:94:31:D1:23:61:41:49:BA:BA:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRWZJJT4S2AfkZQx0SNhQUm6uu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1a66f-ea3b-4d10-9e2d-f5d9c2c27fe3/1/UUYQ5-NwbsCTmb2KB6K-q-ksIOQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1a66f-ea3b-4d10-9e2d-f5d9c2c27fe3/1/gRWZJJT4S2AfkZQx0SNhQUm6uu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.231.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:df:33:57:b0:94:be:e9:de:0d:f4:6c:3d:cc:1c:c2:f6:f4:
         66:a5:25:bb:4a:6b:63:ee:28:d4:56:5d:17:46:d2:ee:bb:73:
         91:5f:16:f4:80:95:74:42:91:e3:38:c6:33:9f:18:24:51:18:
         d4:d8:1a:dc:8a:6d:75:61:59:51:d3:5c:5f:61:54:84:8e:a7:
         59:1c:af:8f:8a:80:ab:e2:9d:bb:ef:77:53:cd:77:6f:29:ec:
         62:fe:7a:71:2a:1e:26:4f:22:61:3b:cc:10:eb:5f:72:81:d6:
         63:d6:e5:66:57:cd:a4:ef:c5:67:20:6c:b2:f7:c0:22:f5:49:
         f7:82:61:c7:6e:64:6c:68:10:eb:88:53:43:57:f4:45:86:80:
         73:c5:7f:e5:67:6e:b1:cb:95:a4:8a:6a:9f:31:de:bb:11:35:
         8b:88:80:16:78:99:88:4f:dc:7d:99:f1:73:02:9d:15:dc:ac:
         3d:ff:3b:11:6e:27:0a:dd:8e:fa:f8:72:12:42:7c:c2:61:18:
         7d:81:1c:9d:1f:ef:d7:eb:01:61:b6:46:ff:66:45:6b:7f:82:
         30:a3:b5:df:b7:f0:56:8a:1a:7b:ff:cc:20:7a:9f:66:1d:19:
         52:46:42:74:df:3b:3a:03:6b:5b:d3:09:8a:0d:b4:df:7c:79:
         85:b1:22:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:16 2024 by rpki-client on console-ams.rpki-client.org