Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/5b2HRnYN2HJaK6530aaMgpR7DfQ.roa
File:                     5b2HRnYN2HJaK6530aaMgpR7DfQ.roa (raw, json)
Hash identifier:          845FhcfneGbvfTgUdAznuDYeDxIkvDfFZG4XZdDEbd4=
Subject key identifier:   E5:BD:87:46:76:0D:D8:72:5A:2B:AE:77:D1:A6:8C:82:94:7B:0D:F4
Certificate issuer:       /CN=5fc20dec714bb5463b164e15a5f8a1398a25505d
Certificate serial:       0192905EE83CCDB71901ACCD704EDDC1A80C
Authority key identifier: 5F:C2:0D:EC:71:4B:B5:46:3B:16:4E:15:A5:F8:A1:39:8A:25:50:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/5b2HRnYN2HJaK6530aaMgpR7DfQ.roa
Signing time:             Tue 15 Oct 2024 13:29:51 +0000
ROA not before:           Tue 15 Oct 2024 13:29:51 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212216
IP address blocks:        93.95.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:90:5e:e8:3c:cd:b7:19:01:ac:cd:70:4e:dd:c1:a8:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fc20dec714bb5463b164e15a5f8a1398a25505d
        Validity
            Not Before: Oct 15 13:29:51 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e5bd8746760dd8725a2bae77d1a68c82947b0df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e3:76:d1:9a:a3:40:90:4d:f7:9b:cd:3e:3b:
                    a5:99:d0:c7:e0:94:fd:bd:e2:65:83:dd:d0:4e:77:
                    d8:77:45:15:2e:0f:43:0b:3e:16:0a:a1:25:d1:58:
                    a4:20:23:24:97:07:c0:94:10:c6:e9:2f:9b:8b:92:
                    88:36:b5:0b:04:ed:16:fe:7d:80:30:db:2b:7f:3c:
                    1c:0a:01:bd:fb:70:cf:d2:a3:c1:0d:3a:c4:85:05:
                    f0:f9:d0:7e:6a:66:c5:bb:4e:54:b3:50:12:b4:b8:
                    c3:15:2e:33:d3:ff:a0:cb:35:d6:7e:28:d3:f9:58:
                    9f:ce:b1:14:5f:91:86:e1:21:e4:a1:a2:f4:0f:4f:
                    78:fb:19:99:d6:28:33:ea:2d:b7:e9:92:78:48:c2:
                    e3:0f:78:6c:12:51:97:de:87:1e:fb:43:b9:f1:29:
                    23:20:be:d9:ea:cc:62:cb:f5:3e:64:fc:8f:4d:02:
                    99:5f:27:c2:75:95:c8:03:9e:52:ca:f0:72:10:ab:
                    a9:d2:f5:01:05:c3:a8:45:7d:d9:96:a0:dd:dd:fa:
                    a4:d0:5d:ee:f5:c0:77:27:f3:8e:d6:9a:b1:da:b2:
                    69:3f:34:e9:3c:1c:86:2e:9e:86:9e:dd:67:9f:2a:
                    7f:b3:94:12:53:42:5e:21:ca:f7:be:f0:60:28:be:
                    25:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BD:87:46:76:0D:D8:72:5A:2B:AE:77:D1:A6:8C:82:94:7B:0D:F4
            X509v3 Authority Key Identifier:
                keyid:5F:C2:0D:EC:71:4B:B5:46:3B:16:4E:15:A5:F8:A1:39:8A:25:50:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/5b2HRnYN2HJaK6530aaMgpR7DfQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.95.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:5e:ad:f2:84:1c:de:4c:c3:d4:37:7b:5a:ae:6d:ad:99:12:
         02:c5:ea:84:c0:1e:37:b7:ee:88:8d:8b:09:82:57:23:67:3c:
         1a:b1:b1:c4:d2:f8:14:c9:0a:97:97:6a:d6:d9:f6:e0:26:7e:
         b8:2a:22:f3:9a:b9:e9:37:15:12:09:d7:fa:55:bf:f9:b2:7e:
         1d:22:3a:79:35:6d:62:06:d7:e0:cf:3f:96:31:58:c5:f4:fc:
         da:2f:af:72:c2:7e:34:40:ba:9c:e4:69:94:51:01:d3:8b:b4:
         ee:32:bf:b3:a7:ed:f6:1c:01:e0:59:b3:40:17:e0:e2:65:8c:
         ed:7a:a7:70:3c:f9:e0:81:d5:55:e6:07:ac:b9:80:9b:48:23:
         17:c3:ba:cb:36:6a:d4:38:c9:f3:4a:97:df:70:4b:b9:41:59:
         8c:e4:dd:87:c0:dc:85:d4:c6:b5:99:99:73:dc:e7:24:c7:1c:
         ff:28:04:8a:62:7c:5a:d9:55:1a:03:a3:36:ab:dd:3e:97:2b:
         21:7f:0a:f6:ab:9e:ee:5f:ca:99:14:04:e7:c5:34:0e:2d:19:
         54:3e:97:16:c3:e8:ce:09:3e:33:ef:89:2f:a3:14:f3:05:2e:
         c4:cc:7d:c1:d3:d6:f5:74:65:a2:c8:36:d3:42:1e:53:80:42:
         34:0a:b1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:27 2024 by rpki-client on console.sobornost.net