Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a1c55b-ac96-4963-89ad-7ca11b7a0a6e/1/EOy17CqDm34SWJ-JY2xGr6QTtUw.roa
File:                     EOy17CqDm34SWJ-JY2xGr6QTtUw.roa (raw, json)
Hash identifier:          6A9q0e1nNsWbNqjSgqLW28NCh8sURL6Iyjc7eO6SNf0=
Subject key identifier:   10:EC:B5:EC:2A:83:9B:7E:12:58:9F:89:63:6C:46:AF:A4:13:B5:4C
Certificate issuer:       /CN=6af2af2fe2a3efe54a14fa09262030acd0711d78
Certificate serial:       0342D2B1
Authority key identifier: 6A:F2:AF:2F:E2:A3:EF:E5:4A:14:FA:09:26:20:30:AC:D0:71:1D:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/avKvL-Kj7-VKFPoJJiAwrNBxHXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/a1c55b-ac96-4963-89ad-7ca11b7a0a6e/1/EOy17CqDm34SWJ-JY2xGr6QTtUw.roa
Signing time:             Sat 01 Jan 2022 05:53:20 +0000
ROA not before:           Sat 01 Jan 2022 05:53:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        80.243.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54710961 (0x342d2b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6af2af2fe2a3efe54a14fa09262030acd0711d78
        Validity
            Not Before: Jan  1 05:53:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=10ecb5ec2a839b7e12589f89636c46afa413b54c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c0:fc:3e:3c:a3:59:20:e7:ff:88:7a:43:f8:
                    f7:ba:78:38:f4:a0:b3:4b:b4:2f:db:6d:52:2c:78:
                    a6:0b:fc:15:19:8e:18:49:fd:55:b4:ce:1e:50:41:
                    56:73:84:53:9a:ea:62:8f:93:7f:79:83:42:d5:99:
                    49:cb:a3:99:7a:cb:59:3b:6b:14:1c:3f:c0:40:9e:
                    ca:5e:b7:c6:e2:bd:82:84:b8:59:20:d1:92:57:44:
                    db:a0:53:95:1f:3b:80:de:b8:19:19:80:e8:f0:78:
                    9d:a7:02:ca:70:63:d7:d1:25:64:f2:45:8c:77:e4:
                    96:43:50:fa:3a:e2:a0:d8:98:9b:2b:f5:8b:fa:fb:
                    fe:9e:b6:8c:e2:5a:9a:5a:32:d3:a3:31:43:92:e5:
                    9f:6e:09:86:87:60:52:4f:ab:40:3d:b9:47:d4:a5:
                    cc:8a:7f:89:2b:8b:39:1d:11:9e:8e:4a:c2:a7:62:
                    23:0c:41:53:0c:52:d1:16:ca:c8:67:13:7c:bd:71:
                    fd:5c:05:d2:fc:20:9f:b8:15:75:25:3a:8e:7c:05:
                    75:ca:ff:69:27:4e:83:4e:9c:bb:ec:b1:1c:74:3e:
                    52:b3:ec:46:88:7d:50:ff:95:5d:f4:27:95:a9:74:
                    8d:fd:5e:4d:3a:ab:96:df:82:7a:de:04:53:a0:26:
                    8b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EC:B5:EC:2A:83:9B:7E:12:58:9F:89:63:6C:46:AF:A4:13:B5:4C
            X509v3 Authority Key Identifier:
                keyid:6A:F2:AF:2F:E2:A3:EF:E5:4A:14:FA:09:26:20:30:AC:D0:71:1D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avKvL-Kj7-VKFPoJJiAwrNBxHXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a1c55b-ac96-4963-89ad-7ca11b7a0a6e/1/EOy17CqDm34SWJ-JY2xGr6QTtUw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a1c55b-ac96-4963-89ad-7ca11b7a0a6e/1/avKvL-Kj7-VKFPoJJiAwrNBxHXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.243.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:fd:13:59:0b:60:80:90:9d:c9:2c:62:d5:3b:c1:b9:da:95:
         6b:50:b5:cd:0c:26:ea:2d:27:dd:1c:6f:8a:94:76:a6:35:f8:
         10:62:88:f3:ef:7d:88:a6:bd:25:71:c7:19:5a:a3:50:b1:58:
         15:ca:c1:64:95:16:39:ee:f6:d2:73:56:8a:df:36:96:82:6e:
         1d:ca:e3:d4:81:60:a7:e2:ae:88:b5:ec:d3:1c:a9:71:87:6d:
         5e:0f:a0:f1:9a:9d:1d:f5:2d:14:bb:dd:73:e7:16:72:fd:1d:
         8e:5f:6b:8e:6e:cb:c8:3c:99:14:9b:83:7a:3b:22:0d:6d:08:
         e1:20:85:c0:57:58:e5:32:82:6b:ef:38:58:10:38:4d:62:70:
         19:2a:0e:f8:65:76:14:ca:7d:21:b4:82:e0:24:17:25:dc:73:
         48:ab:f2:86:88:6c:06:b6:6b:a7:c9:84:b6:68:b7:7c:73:5b:
         09:89:84:aa:01:22:7e:ee:b1:bb:e9:bf:78:05:55:27:6b:db:
         95:cc:f4:78:1c:c7:6c:7b:9d:2a:8b:36:86:95:61:cb:89:2f:
         0c:a3:44:7c:5f:c9:cc:47:59:45:19:f2:7a:ce:0c:7c:64:59:
         7a:1a:a9:f9:1e:79:d7:9f:54:dc:d0:97:5c:21:ec:f2:8d:eb:
         0c:04:0b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:30 2023 by rpki-client on console.sobornost.net