Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/80Oi23f6QLpvEpTROxAt2O2YgIk.roa
File:                     80Oi23f6QLpvEpTROxAt2O2YgIk.roa (raw, json)
Hash identifier:          1I0kzRhs/xXNoN7J2oQPqsZeHbG/m62lp3KAUcgRRFs=
Subject key identifier:   F3:43:A2:DB:77:FA:40:BA:6F:12:94:D1:3B:10:2D:D8:ED:98:80:89
Certificate issuer:       /CN=68395fb8f4524b8a6f945bbfa938b8f61694052f
Certificate serial:       0720F137
Authority key identifier: 68:39:5F:B8:F4:52:4B:8A:6F:94:5B:BF:A9:38:B8:F6:16:94:05:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDlfuPRSS4pvlFu_qTi49haUBS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/80Oi23f6QLpvEpTROxAt2O2YgIk.roa
Signing time:             Fri 22 Apr 2022 12:12:50 +0000
ROA not before:           Fri 22 Apr 2022 12:12:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208485
IP address blocks:        91.217.72.0/24 maxlen: 24
                          91.217.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119599415 (0x720f137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68395fb8f4524b8a6f945bbfa938b8f61694052f
        Validity
            Not Before: Apr 22 12:12:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f343a2db77fa40ba6f1294d13b102dd8ed988089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:19:bf:0b:43:1d:7d:4a:6b:e7:04:df:fe:4b:
                    03:bd:41:68:64:55:2d:5c:94:1c:87:a4:c4:eb:da:
                    7f:48:b9:a2:e6:f7:04:b8:b6:67:59:b1:7a:3a:be:
                    ce:12:f2:1c:44:52:b0:95:00:35:37:67:5f:e1:0a:
                    ac:ac:4e:1e:61:6d:77:cc:fe:4f:21:58:58:54:51:
                    f1:8a:5b:dc:53:0e:28:a5:07:d6:88:5d:ae:3a:0c:
                    f3:39:7b:42:88:62:f0:f3:f4:82:86:02:a7:fe:aa:
                    93:4a:6e:cc:74:a9:71:14:7d:ea:85:7b:e4:b3:fc:
                    36:61:35:7d:59:57:3a:0b:77:5b:53:9a:55:1c:24:
                    32:1d:63:bf:90:b3:79:75:bb:78:ca:c6:1e:39:02:
                    38:e8:31:8e:87:cc:9c:a4:7e:d3:35:14:3c:84:07:
                    6e:06:9b:e1:fa:b6:0b:20:d7:5e:2f:8c:65:0d:e3:
                    b8:0a:cd:34:a2:06:ee:28:51:b0:40:e4:67:58:ab:
                    6b:8f:3d:11:2f:29:1c:9c:1a:ce:31:eb:1a:37:31:
                    76:ab:b8:5d:78:58:0b:4a:ee:c7:18:49:6f:e5:01:
                    80:05:e6:b9:ff:92:06:ab:6b:f2:4a:4f:c3:2c:51:
                    3b:cb:01:20:a6:64:d0:41:aa:fd:df:a8:62:92:28:
                    6c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:43:A2:DB:77:FA:40:BA:6F:12:94:D1:3B:10:2D:D8:ED:98:80:89
            X509v3 Authority Key Identifier:
                keyid:68:39:5F:B8:F4:52:4B:8A:6F:94:5B:BF:A9:38:B8:F6:16:94:05:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDlfuPRSS4pvlFu_qTi49haUBS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/80Oi23f6QLpvEpTROxAt2O2YgIk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/aDlfuPRSS4pvlFu_qTi49haUBS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.6.0/24
                  91.217.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:a5:43:13:88:05:e8:81:94:2a:ad:15:5f:08:cd:61:4f:60:
         78:99:0b:7e:e1:e3:3b:f1:ac:01:3b:a5:6a:d8:fb:d5:b4:3e:
         86:f8:ac:a7:a9:ec:d6:a2:50:51:cd:e3:00:df:1a:69:12:7a:
         c1:ee:b1:1e:e4:97:6a:a9:d8:1b:e2:02:60:d2:e5:64:12:21:
         08:cd:7f:34:48:44:97:e3:c7:7f:a5:9f:d3:28:24:be:b7:17:
         86:12:af:ea:08:0c:5c:07:bb:79:58:b0:f4:e8:35:03:31:45:
         3a:2a:14:34:6f:90:70:aa:d5:78:a8:4b:14:e4:1b:21:47:89:
         ed:50:74:de:12:2e:09:46:59:74:12:e4:c2:80:3b:09:d2:95:
         08:93:a1:f8:08:9f:66:18:da:88:f2:46:e1:17:07:dd:4d:77:
         37:ad:12:af:71:b9:f6:09:4b:d0:79:78:cd:56:44:5d:ef:f0:
         0a:68:5c:52:2d:34:52:7a:f1:91:97:98:90:22:2b:6c:d3:e2:
         4e:f9:fe:e1:f2:9a:d7:90:79:ef:82:24:ad:01:25:53:07:67:
         b5:86:02:72:1b:1b:93:eb:36:30:87:fd:ae:4b:7e:25:30:e3:
         43:a1:23:fa:2e:a7:ef:77:2c:69:90:1e:b6:a5:9e:7d:64:82:
         b7:07:81:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net