Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0b8057-77a1-4592-93ca-dddd6fa55d49/1/oodqRzTJ5_VCdBZ2HwvnNgXPP4E.roa
File:                     oodqRzTJ5_VCdBZ2HwvnNgXPP4E.roa (raw, json)
Hash identifier:          g1fn4/nVPzCsEz93MfNG9u2aiCjC/BqEmzKaLsrLfy0=
Subject key identifier:   A2:87:6A:47:34:C9:E7:F5:42:74:16:76:1F:0B:E7:36:05:CF:3F:81
Certificate issuer:       /CN=696780c7a6111b9fa1c9b11e83b6096815b957a4
Certificate serial:       04AAD31B
Authority key identifier: 69:67:80:C7:A6:11:1B:9F:A1:C9:B1:1E:83:B6:09:68:15:B9:57:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWeAx6YRG5-hybEeg7YJaBW5V6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/0b8057-77a1-4592-93ca-dddd6fa55d49/1/oodqRzTJ5_VCdBZ2HwvnNgXPP4E.roa
Signing time:             Sat 01 Jan 2022 04:00:49 +0000
ROA not before:           Sat 01 Jan 2022 04:00:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202423
IP address blocks:        193.0.178.0/24 maxlen: 24
                          193.0.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78304027 (0x4aad31b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696780c7a6111b9fa1c9b11e83b6096815b957a4
        Validity
            Not Before: Jan  1 04:00:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a2876a4734c9e7f5427416761f0be73605cf3f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:00:4a:f2:c0:d4:65:a7:4e:04:73:73:eb:1f:
                    52:4f:8c:15:0f:b4:dc:7b:d1:17:35:32:0c:91:df:
                    32:69:bd:1b:42:bd:04:9a:c1:5a:08:53:28:7c:ca:
                    69:f3:b0:58:af:1d:31:e6:0f:28:a5:f0:b8:15:17:
                    51:20:d1:a1:ac:ab:9b:eb:f5:86:e2:80:8a:f0:fe:
                    8d:55:e5:df:b0:81:76:57:81:b0:89:10:b0:32:92:
                    56:aa:05:a3:66:89:bc:ef:9a:7a:c3:fb:c2:39:d9:
                    d2:59:b4:b8:fc:08:20:66:c3:c0:06:a5:e9:43:eb:
                    0a:4a:e3:e3:b9:02:e2:a4:ff:82:df:a0:1d:aa:17:
                    8b:44:2a:37:43:db:a6:a1:c4:f9:4c:f0:c1:e7:8e:
                    b0:f3:c8:36:3b:d7:bf:27:3c:4e:e1:bd:c9:9a:19:
                    fd:54:37:ed:34:33:d7:dc:05:c6:90:d7:b5:51:36:
                    e3:d1:4a:9e:09:86:a9:5b:8a:68:35:fe:8e:8a:61:
                    30:a6:22:4b:8c:e3:6b:30:43:08:dc:02:ff:46:cd:
                    8d:5d:35:d9:05:3d:72:74:5a:99:90:99:c5:ef:8a:
                    60:ad:96:76:eb:11:ae:ac:e0:c2:6d:1c:2f:7a:ba:
                    36:13:eb:b9:3d:a2:0d:65:bb:83:5b:0e:0f:16:c9:
                    b8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:87:6A:47:34:C9:E7:F5:42:74:16:76:1F:0B:E7:36:05:CF:3F:81
            X509v3 Authority Key Identifier:
                keyid:69:67:80:C7:A6:11:1B:9F:A1:C9:B1:1E:83:B6:09:68:15:B9:57:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWeAx6YRG5-hybEeg7YJaBW5V6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0b8057-77a1-4592-93ca-dddd6fa55d49/1/oodqRzTJ5_VCdBZ2HwvnNgXPP4E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0b8057-77a1-4592-93ca-dddd6fa55d49/1/aWeAx6YRG5-hybEeg7YJaBW5V6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:78:2a:71:95:0a:a9:50:2f:53:53:53:89:ed:0b:7d:8f:7d:
         3e:f8:a8:d9:60:6b:e4:61:e4:39:42:3f:cd:b1:52:52:b7:1d:
         2a:0f:64:a1:59:ba:79:6f:c8:e9:74:89:aa:e4:64:78:bc:e6:
         0d:58:5b:e5:4e:6e:da:94:82:a4:01:ed:de:bf:8e:13:c5:01:
         37:ef:00:18:8f:97:70:cb:b7:88:0a:a0:a6:2a:1d:46:24:de:
         5d:ae:2e:7d:22:77:71:e2:47:46:11:fe:c4:99:62:f0:99:b4:
         5a:35:ec:c9:ca:d9:4d:9e:8d:d6:7c:72:db:04:2e:e3:4c:2a:
         8a:75:bf:cc:88:a9:09:e6:85:04:37:a3:6b:15:b0:bd:8f:db:
         1d:39:e6:10:9b:c9:de:46:45:b7:4b:ca:4f:75:6c:75:ae:20:
         da:3f:71:b4:25:a1:4f:c3:1a:e6:95:f6:5a:d3:74:83:ba:e0:
         be:97:58:fb:61:2c:42:86:e4:4e:24:fd:8b:56:82:54:ef:c2:
         24:1d:41:ab:34:a3:67:db:10:75:49:5c:84:81:1d:8f:d7:8d:
         06:f5:bd:88:70:f6:42:70:94:c2:8d:a5:11:de:38:66:cf:d4:
         a3:ab:b8:25:83:c3:a8:af:cc:84:27:f2:a7:ad:63:f0:ea:5b:
         a8:48:42:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:53 2023 by rpki-client on console.sobornost.net