Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/exSbcBBIkj5KzhavCqQzsC4pX7s.roa
File:                     exSbcBBIkj5KzhavCqQzsC4pX7s.roa (raw, json)
Hash identifier:          9NjIuyMkuWRSTnrgVQ7pkDNNaliRtV6rVNc0UX0jyvg=
Subject key identifier:   7B:14:9B:70:10:48:92:3E:4A:CE:16:AF:0A:A4:33:B0:2E:29:5F:BB
Certificate issuer:       /CN=b06c430b61be7a380191cd5dfd105c3af21482fc
Certificate serial:       0154FCCB
Authority key identifier: B0:6C:43:0B:61:BE:7A:38:01:91:CD:5D:FD:10:5C:3A:F2:14:82:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sGxDC2G-ejgBkc1d_RBcOvIUgvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/exSbcBBIkj5KzhavCqQzsC4pX7s.roa
Signing time:             Tue 17 May 2022 10:50:30 +0000
ROA not before:           Tue 17 May 2022 10:50:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        91.228.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22346955 (0x154fccb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b06c430b61be7a380191cd5dfd105c3af21482fc
        Validity
            Not Before: May 17 10:50:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7b149b701048923e4ace16af0aa433b02e295fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e3:5b:49:b0:de:75:52:87:24:fc:37:88:25:
                    cc:d4:37:e1:75:1e:36:08:ea:e5:30:18:32:63:02:
                    9d:36:8d:99:d2:e0:63:7c:91:cb:e8:b0:10:74:23:
                    fa:63:53:b2:e6:25:b1:8a:e9:23:0a:69:c3:cd:60:
                    ec:5a:9f:8a:6b:24:5e:0f:80:10:15:7f:8f:04:31:
                    9f:b9:a4:54:20:52:0c:a6:32:32:c8:cf:0d:95:78:
                    19:e1:76:f0:f8:29:c5:e4:4e:73:03:11:66:f7:5e:
                    23:c3:82:78:f5:38:89:c7:14:c5:57:b6:69:78:50:
                    d4:33:8f:78:75:8a:07:42:55:50:b2:16:95:64:50:
                    7f:da:e4:b8:34:a4:5c:fc:08:88:ec:79:f5:a7:ac:
                    b2:43:5e:6e:dc:0b:f9:e5:1f:aa:e0:d5:ae:34:c3:
                    57:84:7a:77:51:9c:42:c5:f0:e7:7a:55:d1:ab:fa:
                    be:24:17:a4:c7:10:dd:d0:18:69:0f:cc:7a:7b:33:
                    13:8a:00:d4:89:1b:62:97:9c:b6:69:99:59:76:ce:
                    aa:19:bb:37:59:18:6b:54:9f:4f:ac:15:03:2a:8a:
                    c8:92:93:6a:fc:4d:6d:7c:20:3b:a5:59:a2:27:8f:
                    4a:b5:2d:9a:20:b8:b8:62:fe:28:e1:a5:c8:b9:97:
                    d8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:14:9B:70:10:48:92:3E:4A:CE:16:AF:0A:A4:33:B0:2E:29:5F:BB
            X509v3 Authority Key Identifier:
                keyid:B0:6C:43:0B:61:BE:7A:38:01:91:CD:5D:FD:10:5C:3A:F2:14:82:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGxDC2G-ejgBkc1d_RBcOvIUgvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/exSbcBBIkj5KzhavCqQzsC4pX7s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/sGxDC2G-ejgBkc1d_RBcOvIUgvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.228.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:0a:7e:32:9a:c6:b8:7a:97:e9:b8:67:e8:21:b3:b4:b1:b8:
         09:0b:4c:52:97:cc:63:2a:f6:12:9a:86:9f:b4:61:c6:e3:57:
         38:d9:5b:4c:2b:b1:be:ba:ae:8e:23:e6:13:fe:35:43:38:05:
         56:7e:9a:f9:45:5d:a2:0d:f9:a2:4f:85:05:d6:a6:26:8b:89:
         57:7e:0c:fd:eb:d0:93:3c:b0:ed:fd:78:9b:5b:c0:ed:6c:37:
         46:5e:84:b4:4d:8a:d7:07:48:02:a3:e7:c4:31:6f:5e:00:f0:
         35:eb:3d:f7:8b:95:50:96:4b:eb:8a:64:3a:99:f0:12:61:76:
         71:17:25:fd:c1:4a:58:c0:01:de:c8:89:cc:b9:35:e7:c2:5d:
         30:8b:f8:e3:12:51:39:ba:5a:a6:c8:9f:51:35:5d:66:aa:59:
         a1:81:c5:fa:b5:9e:37:69:f3:8e:7e:82:6e:d0:09:63:6a:cb:
         33:5f:da:fc:eb:ee:68:89:73:c1:9b:03:00:45:cb:d9:db:35:
         de:85:57:9c:30:e3:ca:e9:04:a2:d4:e8:92:a8:e2:98:9f:f7:
         31:ea:41:78:df:2d:bf:d2:d5:a2:38:98:d4:70:af:7f:43:d2:
         07:14:6b:82:a0:49:e8:da:48:cb:8b:36:51:f6:60:f9:64:32:
         40:90:af:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:52 2023 by rpki-client on console.sobornost.net