Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/FP35N4cxSGbLdy8im64VSGB2KiU.roa
File:                     FP35N4cxSGbLdy8im64VSGB2KiU.roa (raw, json)
Hash identifier:          PgdK6NYsH0BDCPmHT5Fqz4F/ZrQNl8MxJpNednKzHmM=
Subject key identifier:   14:FD:F9:37:87:31:48:66:CB:77:2F:22:9B:AE:15:48:60:76:2A:25
Certificate issuer:       /CN=399eb53226a660b7c93816c616b66d8c76550603
Certificate serial:       019174565CF9CF1DEF5BF9FA7037129F04C5
Authority key identifier: 39:9E:B5:32:26:A6:60:B7:C9:38:16:C6:16:B6:6D:8C:76:55:06:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/FP35N4cxSGbLdy8im64VSGB2KiU.roa
Signing time:             Wed 21 Aug 2024 09:48:22 +0000
ROA not before:           Wed 21 Aug 2024 09:48:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     59783
IP address blocks:        217.144.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:74:56:5c:f9:cf:1d:ef:5b:f9:fa:70:37:12:9f:04:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=399eb53226a660b7c93816c616b66d8c76550603
        Validity
            Not Before: Aug 21 09:48:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=14fdf93787314866cb772f229bae154860762a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:07:8f:08:a5:1b:d9:d9:b6:e6:2a:e8:b5:2a:
                    a9:0d:f1:72:3c:c8:1c:8c:4b:3b:96:0b:0d:df:29:
                    19:0b:94:ab:4f:da:88:f8:7e:55:73:eb:8a:0e:20:
                    e6:f9:54:28:5b:d2:0a:1c:91:d7:a7:e4:65:7a:78:
                    aa:b2:b2:8d:d1:c1:c7:1c:41:59:07:34:8b:ec:60:
                    3c:bc:d8:b9:0a:5d:54:7f:6f:f5:cd:7c:7a:f5:10:
                    d8:c9:40:3c:e5:52:f4:e4:08:ce:01:0f:51:8b:67:
                    7f:38:14:13:62:09:9a:b0:cb:d5:5f:41:a9:55:e4:
                    9d:ca:32:27:78:82:dc:b2:f8:41:fa:36:e7:b4:0f:
                    24:c5:d0:9b:0c:be:ac:99:2d:d9:3f:48:2c:c8:eb:
                    3e:9a:67:a8:3a:60:40:53:65:47:06:87:67:e8:a6:
                    52:86:52:40:37:2f:ff:44:19:0b:b1:89:8f:2c:b4:
                    d4:86:1d:49:d6:8e:f1:33:48:4f:1b:f1:b9:6d:0f:
                    6a:cb:5b:28:7f:bd:d6:49:2d:f5:0f:ab:f3:99:50:
                    cd:67:ea:92:cb:a2:a9:d8:80:04:c6:f9:19:45:df:
                    56:a6:d3:1d:3c:68:7f:39:b6:94:9c:45:09:7c:00:
                    d9:e5:85:b3:80:fa:cc:0d:22:1d:68:7f:5b:e3:a8:
                    18:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FD:F9:37:87:31:48:66:CB:77:2F:22:9B:AE:15:48:60:76:2A:25
            X509v3 Authority Key Identifier:
                keyid:39:9E:B5:32:26:A6:60:B7:C9:38:16:C6:16:B6:6D:8C:76:55:06:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/FP35N4cxSGbLdy8im64VSGB2KiU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.144.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:d3:ba:0d:95:bc:f4:6f:f0:7d:ed:21:1f:20:f9:4e:b8:bb:
         e6:60:b5:cd:3a:e4:6f:21:4f:aa:90:58:1a:bf:9c:5f:62:c8:
         f0:9e:1a:d3:54:89:ea:7b:09:b5:51:f9:82:69:da:13:4e:b4:
         59:39:b6:f3:09:17:b9:7c:9e:85:97:3e:15:15:0c:31:ac:a0:
         0e:03:6e:33:df:56:04:f3:11:72:5d:d9:ff:86:e6:43:49:d8:
         67:44:f1:a7:fb:2d:59:be:c5:9a:4c:ec:38:6b:04:a4:26:96:
         ff:2b:0e:20:32:2c:37:8e:2c:96:ba:6e:b4:f2:20:4d:2a:73:
         65:9d:35:e5:f7:8c:64:0f:68:b5:09:63:5d:75:28:5d:fa:e4:
         a6:25:f3:11:45:68:e0:eb:85:7c:ec:c7:e8:e5:27:2b:c9:8d:
         24:14:fc:6b:2e:98:ee:ba:b9:bf:a1:db:55:16:97:1e:0e:d4:
         4d:5e:ab:fc:ba:d0:9a:10:eb:33:e2:91:a6:a8:b1:ee:53:ab:
         d0:ab:21:c3:99:6b:e9:96:bc:59:81:2a:97:9f:0b:be:6e:ba:
         00:62:aa:19:5b:e8:6e:cf:95:a7:44:ef:0c:75:a6:93:1e:40:
         2b:0c:44:ca:48:f4:f3:e2:c0:f2:84:60:26:20:45:1e:06:a1:
         55:00:29:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:03 2024 by rpki-client on console.sobornost.net