Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/AM5C0dg1vobe09sY8nW_Htu7UJM.roa
File:                     AM5C0dg1vobe09sY8nW_Htu7UJM.roa (raw, json)
Hash identifier:          fDQj5KkJYDJSjM5cBLnQx2mC7SQ2BbF/JhQTUZuYNjo=
Subject key identifier:   00:CE:42:D1:D8:35:BE:86:DE:D3:DB:18:F2:75:BF:1E:DB:BB:50:93
Certificate issuer:       /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial:       0193CB5F063128DA966B11B669CAA2B51820
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/AM5C0dg1vobe09sY8nW_Htu7UJM.roa
Signing time:             Sun 15 Dec 2024 17:30:22 +0000
ROA not before:           Sun 15 Dec 2024 17:30:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206271
IP address blocks:        195.93.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:cb:5f:06:31:28:da:96:6b:11:b6:69:ca:a2:b5:18:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
        Validity
            Not Before: Dec 15 17:30:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=00ce42d1d835be86ded3db18f275bf1edbbb5093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:21:88:6d:2b:a3:fe:52:40:d0:f3:b6:56:74:
                    9b:f2:3d:c2:89:8a:f6:ba:80:5c:fc:0e:b8:d8:c1:
                    c7:fd:5c:5a:45:a9:81:b7:83:82:70:eb:3c:95:60:
                    2f:2d:4f:18:34:e8:9f:22:64:31:20:48:12:fc:2c:
                    13:86:91:b3:0e:da:c5:25:35:d4:54:2f:2a:52:3a:
                    9b:9e:84:86:81:fd:36:8d:75:89:c8:da:ee:72:4f:
                    39:c5:52:23:75:ee:64:47:34:fb:2e:11:6f:41:aa:
                    01:d0:7a:75:b2:ec:30:06:35:be:12:11:8b:48:8d:
                    6f:27:41:e3:3d:aa:89:34:e2:3e:59:c2:01:a0:dc:
                    96:6a:7f:73:15:8c:4b:f5:66:4c:2a:4f:1e:16:b7:
                    98:11:a0:7e:00:ab:7e:e0:90:9c:e2:6d:23:25:ae:
                    99:15:5d:1f:21:ee:e0:ff:1d:41:e0:03:d9:13:5d:
                    ab:fa:26:03:7e:5e:63:eb:b7:2e:a3:87:49:62:b2:
                    3d:e7:3e:dc:f9:93:45:10:0e:70:43:9b:21:a7:d8:
                    3f:1e:44:ad:da:cb:26:fc:0a:bf:7b:0d:e9:ea:a5:
                    71:9c:56:fa:ff:39:49:52:a4:ab:aa:6b:ec:5c:c3:
                    57:e8:90:68:d8:79:bb:79:9a:a7:e2:1f:13:58:ee:
                    91:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CE:42:D1:D8:35:BE:86:DE:D3:DB:18:F2:75:BF:1E:DB:BB:50:93
            X509v3 Authority Key Identifier:
                keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/AM5C0dg1vobe09sY8nW_Htu7UJM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.93.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:6c:8a:bb:c7:97:f7:2e:19:27:15:12:56:6e:63:6d:0f:c2:
         38:ac:c6:44:8f:d8:72:96:dd:71:e2:14:c5:b7:0a:55:b2:c4:
         ac:ff:05:4a:6a:01:56:3b:77:d1:6b:91:55:56:36:f1:24:aa:
         e3:cc:15:da:19:8f:a9:19:8c:fd:9c:f9:6d:78:4a:53:54:c3:
         e4:62:0e:22:02:fc:67:0a:99:71:3a:77:1e:c4:4c:d9:62:8e:
         e2:0c:2f:db:6c:9a:6b:db:55:1f:80:22:c4:a3:0d:22:8f:63:
         34:f8:31:63:a7:3f:3d:50:80:eb:bb:60:2d:1e:19:8c:99:52:
         aa:85:5a:69:db:71:76:6f:53:2b:99:91:56:8f:dd:b1:91:39:
         9b:fa:48:a8:af:43:56:f9:c1:bd:50:32:c9:1b:1a:dc:59:35:
         91:a5:a2:fc:6e:ec:b4:f1:a3:1f:a5:b0:5d:92:54:a5:d9:e8:
         89:a7:b1:ec:45:fe:9a:c2:e7:36:bc:95:a1:63:71:25:b2:61:
         22:d3:fc:b2:ff:ba:21:2f:30:ec:34:2c:30:5e:22:e6:5b:8d:
         c5:df:05:bb:0f:39:43:cd:3d:b1:2a:7e:d4:39:62:99:dc:4f:
         14:a4:b4:8f:aa:e5:38:f8:5c:40:f1:0e:47:b6:5e:d1:8a:b4:
         5c:6b:3a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:54 2024 by rpki-client on console.sobornost.net