Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/EOAIFkm_4Blp5gOR28qlsaC4uNw.roa
File:                     EOAIFkm_4Blp5gOR28qlsaC4uNw.roa (raw, json)
Hash identifier:          4rJA6gD3t6fY7q31eY3TBkz/QpNlNiYKeqqoNpJcXl0=
Subject key identifier:   10:E0:08:16:49:BF:E0:19:69:E6:03:91:DB:CA:A5:B1:A0:B8:B8:DC
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       018F76A574A6435B0268224DD420C6A6F73E
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/EOAIFkm_4Blp5gOR28qlsaC4uNw.roa
Signing time:             Tue 14 May 2024 10:28:25 +0000
ROA not before:           Tue 14 May 2024 10:28:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215157
IP address blocks:        5.134.84.0/23 maxlen: 24
                          217.113.26.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:76:a5:74:a6:43:5b:02:68:22:4d:d4:20:c6:a6:f7:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: May 14 10:28:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=10e0081649bfe01969e60391dbcaa5b1a0b8b8dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:33:ec:c5:9f:13:53:d4:1e:78:d2:5c:63:87:
                    d9:29:e2:a1:45:b1:2a:84:94:7d:69:ef:d1:20:4d:
                    1d:76:63:ff:dd:35:32:8f:e2:6e:f3:73:65:b9:18:
                    c5:8b:bc:36:d9:36:62:1e:c3:26:8d:56:02:53:e7:
                    ef:5c:74:eb:d9:12:f1:82:9a:86:21:88:94:b3:2b:
                    8b:13:25:17:af:b3:26:76:a4:42:65:d5:48:a8:0b:
                    7a:22:8d:9d:58:2b:aa:a7:5b:c1:93:de:c5:55:6a:
                    e9:bb:d2:99:89:68:c7:64:2e:6f:cd:62:5f:fe:2a:
                    0a:8d:25:a7:ab:84:c8:60:7c:82:30:8a:43:88:2a:
                    79:02:ce:52:07:86:85:88:47:96:89:16:73:1e:9a:
                    ae:09:5d:b5:6a:08:36:98:32:8f:85:5b:98:62:51:
                    89:28:a6:18:06:45:2b:8f:8d:18:1f:b3:c3:2f:61:
                    81:08:ad:93:52:e4:bf:e1:30:54:ee:5f:b9:1f:14:
                    7d:55:47:df:90:69:96:6a:fb:c9:93:f3:7d:78:28:
                    34:f9:c4:49:52:f6:54:d1:fb:02:df:ed:9d:58:4d:
                    bb:e0:3d:ab:ab:34:d7:79:73:0c:38:ef:49:f8:d2:
                    07:60:b9:00:f0:63:db:d2:80:0d:4f:39:12:c6:7b:
                    ad:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E0:08:16:49:BF:E0:19:69:E6:03:91:DB:CA:A5:B1:A0:B8:B8:DC
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/EOAIFkm_4Blp5gOR28qlsaC4uNw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.134.84.0/23
                  217.113.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:ed:56:07:6d:95:30:ef:7c:fa:8d:19:76:bd:74:0d:50:d5:
         3d:41:cd:57:4c:9d:df:95:94:c7:3e:be:ff:c9:58:2e:ea:b9:
         27:23:fe:d1:5b:a6:f5:6f:bd:fd:41:cb:7a:03:41:c1:a4:14:
         7e:fd:f8:6f:22:eb:32:eb:d1:77:1f:9c:c7:c3:89:1c:2e:2c:
         d3:f3:df:6d:0b:06:00:03:df:e7:81:ae:12:ed:7f:33:52:44:
         aa:48:e3:41:29:8b:ed:9e:34:fd:f8:7f:16:41:6f:69:43:6f:
         21:53:f4:eb:af:d7:8d:2e:2e:af:71:b5:bd:a8:22:02:74:b6:
         d1:6c:98:16:75:99:ee:b4:46:36:37:5a:73:ed:85:f1:c2:41:
         6a:ef:23:57:2f:09:ab:08:2a:cf:60:18:3e:39:c6:be:06:e0:
         d2:80:2a:90:0c:a2:08:e5:45:81:6f:29:83:43:8f:74:01:17:
         8c:10:fc:7c:91:99:f9:50:13:ab:39:54:b8:68:64:b5:43:b0:
         e2:1b:79:9e:62:3f:91:c6:7e:20:19:31:76:f1:55:fa:39:f6:
         f4:88:f5:23:c3:9c:e2:4e:c0:cd:2b:27:32:77:90:45:49:b9:
         98:b8:ce:73:39:41:66:19:ff:01:da:c8:27:fb:0d:1c:12:a0:
         cb:28:a2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 05:44:44 2024 by rpki-client on console.sobornost.net