Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/_mJi50suRxgaGzulwd9iUQoRQxk.roa
File:                     _mJi50suRxgaGzulwd9iUQoRQxk.roa (raw, json)
Hash identifier:          76ii7mYxOY/EMfbAiGJq16IFykUp27KhWRPhsb98vFQ=
Subject key identifier:   FE:62:62:E7:4B:2E:47:18:1A:1B:3B:A5:C1:DF:62:51:0A:11:43:19
Certificate issuer:       /CN=296016ad64c22600acf3049f8758f53ebb1e57c4
Certificate serial:       01912473214A96410D6F4F1C10D17ABADAD7
Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/_mJi50suRxgaGzulwd9iUQoRQxk.roa
Signing time:             Mon 05 Aug 2024 21:30:10 +0000
ROA not before:           Mon 05 Aug 2024 21:30:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     211448
IP address blocks:        216.87.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:24:73:21:4a:96:41:0d:6f:4f:1c:10:d1:7a:ba:da:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4
        Validity
            Not Before: Aug  5 21:30:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fe6262e74b2e47181a1b3ba5c1df62510a114319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cc:b8:9e:b9:9e:63:cc:83:7f:df:b0:8a:83:
                    86:a9:de:19:9c:7a:21:ff:62:54:1d:73:62:8b:c0:
                    ac:ba:5d:03:23:3d:dc:b7:66:96:7b:fd:69:2d:a8:
                    8f:53:23:86:b4:9a:73:11:17:7a:4b:b4:1d:c4:3e:
                    22:b3:ca:92:c7:1f:d3:83:06:98:e0:d1:fd:7c:1e:
                    93:58:f4:98:a4:ac:de:2b:72:48:a6:75:3c:80:a3:
                    9c:e5:c6:b6:13:54:13:9b:db:4e:97:97:8d:c9:60:
                    66:14:b0:24:0e:fb:af:a8:df:1a:5d:2f:34:37:1e:
                    c9:be:7f:bd:b0:bc:bc:b8:3c:06:39:3d:4f:07:c5:
                    65:61:e3:34:76:45:d0:22:f6:84:5a:d0:15:8f:27:
                    f5:a3:9d:06:c5:c2:29:cb:e0:52:db:b2:a7:a2:64:
                    5d:53:31:ba:f7:27:b5:b8:bb:8e:a1:62:df:f4:b6:
                    68:53:da:a0:8d:75:fc:b7:b6:29:e7:e4:78:76:50:
                    6b:8f:d1:42:f0:c1:38:26:7b:d3:ba:3c:b8:aa:70:
                    3c:30:5e:e5:f3:34:1f:8c:ac:7f:e6:00:b9:d4:a5:
                    0c:ae:60:1e:5a:8a:be:75:72:68:c2:c3:f7:d5:78:
                    0d:d0:dc:e4:b7:4a:3f:1e:fa:31:05:b5:e3:a0:74:
                    75:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:62:62:E7:4B:2E:47:18:1A:1B:3B:A5:C1:DF:62:51:0A:11:43:19
            X509v3 Authority Key Identifier:
                keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/_mJi50suRxgaGzulwd9iUQoRQxk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:06:3b:79:d6:ba:6b:ba:3f:df:df:18:11:45:0e:6f:3e:36:
         10:e1:f4:09:0f:35:d6:05:40:50:b6:28:4c:56:ee:99:d8:63:
         63:c2:45:37:a4:ad:db:d3:55:82:45:66:cb:19:f4:7b:09:a0:
         f5:bf:de:03:70:fa:1a:79:6a:74:ee:21:f0:8a:bb:2a:cd:51:
         9e:8a:21:2a:4f:27:cb:51:33:99:97:1e:3f:39:b2:8c:fb:7e:
         25:9d:ee:7c:d7:f0:95:ea:a0:14:6d:86:bd:60:fb:d7:17:dc:
         b2:f0:70:84:c6:90:68:f4:77:05:3f:73:68:f6:a9:f5:67:e4:
         d9:f7:9b:5d:2c:ce:60:92:b9:2b:d6:7d:c4:00:25:8d:2f:73:
         43:a0:16:d6:e6:b7:f8:fb:05:36:85:b7:aa:a0:6e:dc:ae:4d:
         c4:e8:d5:5d:42:e8:cd:48:ef:cb:09:c6:68:08:24:a6:ff:e4:
         1d:fa:6b:92:41:46:03:e6:cf:3c:cf:b8:be:77:16:56:8c:56:
         b6:51:46:b1:c2:d8:6d:83:88:9b:a1:d8:51:82:d9:7b:a9:c2:
         95:8d:91:d3:bf:6c:69:66:7d:f7:72:ee:80:c0:0b:e4:72:13:
         98:78:f4:56:75:a6:35:31:64:56:b1:69:f0:74:e9:00:9b:1e:
         9a:e9:3e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 07:51:21 2024 by rpki-client on console.sobornost.net