Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/4qRFssRMduJJxMVqp9KBGM6Jy9A.roa
File:                     4qRFssRMduJJxMVqp9KBGM6Jy9A.roa (raw, json)
Hash identifier:          f8hL9WTiS/pboTkmLiPU81+izUsSpAZdD2BGF9JXo78=
Subject key identifier:   E2:A4:45:B2:C4:4C:76:E2:49:C4:C5:6A:A7:D2:81:18:CE:89:CB:D0
Certificate issuer:       /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial:       01938E834DE05D1692677116D9984558C9B9
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/4qRFssRMduJJxMVqp9KBGM6Jy9A.roa
Signing time:             Tue 03 Dec 2024 21:53:10 +0000
ROA not before:           Tue 03 Dec 2024 21:53:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     213776
IP address blocks:        92.119.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8e:83:4d:e0:5d:16:92:67:71:16:d9:98:45:58:c9:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
        Validity
            Not Before: Dec  3 21:53:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e2a445b2c44c76e249c4c56aa7d28118ce89cbd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c2:6d:1c:d0:a0:40:0a:da:77:4f:46:bc:f0:
                    97:ca:64:98:db:a3:1f:5d:34:e7:61:93:b2:c6:c1:
                    e3:07:2a:57:8a:13:72:05:e1:7a:22:ef:f6:7a:0b:
                    96:65:e0:22:17:cc:53:72:86:14:d7:d4:7f:a2:66:
                    56:e2:e7:af:2d:28:57:b4:95:16:b5:cb:d9:be:03:
                    4a:20:8a:f1:9d:90:c3:00:46:04:14:b8:e0:6f:dd:
                    10:c5:1e:c4:66:80:6c:7f:f8:63:7c:a7:e3:29:5b:
                    63:71:e8:09:ce:74:28:76:af:f7:31:50:26:5e:09:
                    dc:ad:73:f9:a5:8e:20:7a:0e:5b:6e:30:ff:54:7a:
                    6a:c8:29:60:eb:a6:64:a2:b8:fb:0e:5a:b9:b3:a0:
                    7e:a8:ba:e7:6a:ec:9d:72:bb:ac:b4:1e:b1:cc:48:
                    d4:f3:b6:d2:0a:e3:98:22:b5:d5:c4:69:f3:b6:6c:
                    4c:91:97:24:51:ce:e4:27:1e:c5:43:09:19:d9:7b:
                    75:71:0a:53:2a:bc:c4:ff:78:5a:dc:17:03:0a:2c:
                    2c:d1:fd:c2:ab:3c:de:c0:d4:cd:13:02:98:e9:3b:
                    c3:d6:b1:08:cb:5d:c9:79:36:77:39:78:05:93:27:
                    19:40:0b:b0:89:c8:bc:9a:ed:c5:ee:98:ee:cb:f6:
                    8f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A4:45:B2:C4:4C:76:E2:49:C4:C5:6A:A7:D2:81:18:CE:89:CB:D0
            X509v3 Authority Key Identifier:
                keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/4qRFssRMduJJxMVqp9KBGM6Jy9A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:01:f9:74:1d:19:11:eb:42:bc:26:07:81:49:e2:1f:20:a6:
         52:05:50:2d:a7:03:22:41:e7:13:3c:91:79:0b:81:47:eb:ce:
         b8:dd:58:63:55:b8:ee:94:56:04:86:50:8f:68:12:dd:0a:a0:
         b1:73:4d:60:fd:25:00:4c:fa:f4:9e:be:f7:70:4c:f3:5f:89:
         5e:87:b5:84:08:1d:1c:a4:0e:7c:4a:91:1a:a7:d3:17:da:17:
         9d:96:ff:d8:02:71:21:c4:89:50:dc:1d:d9:a2:f8:53:9a:55:
         c4:2a:b6:53:ed:c4:1c:5e:2b:32:6a:4c:ed:6d:51:ed:d1:6a:
         b6:fa:06:36:35:7c:5d:1c:37:1c:1c:07:44:da:b1:31:c8:ec:
         b5:e5:46:d7:c0:b0:c0:1b:83:c5:e0:64:15:08:44:fc:f5:3f:
         44:39:00:6c:3e:51:51:b1:ba:03:7e:8d:c7:3c:6e:a7:fa:18:
         5c:14:74:38:8b:82:17:05:33:64:30:c8:73:80:a0:59:24:9f:
         38:9c:6c:8f:be:4b:7d:6a:ee:f9:30:86:3c:58:bf:75:f2:2f:
         8d:1e:28:87:af:17:d5:33:b8:b5:c5:8a:f3:e3:78:c1:65:23:
         61:04:71:74:1c:fb:1b:f4:c7:8c:bf:70:f1:ba:d8:fe:73:31:
         4e:83:02:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:55 2024 by rpki-client on console.sobornost.net