Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/_DwHGkp7HEMBdQEDC5gJ0DTP2YM.roa
File:                     _DwHGkp7HEMBdQEDC5gJ0DTP2YM.roa (raw, json)
Hash identifier:          eMOk305Cgj5HXb9SBQxc7ghsdG/sLnpJbX8Xu+bIl9U=
Subject key identifier:   FC:3C:07:1A:4A:7B:1C:43:01:75:01:03:0B:98:09:D0:34:CF:D9:83
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       01920A690904D4E88F2441702D2833B41295
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/_DwHGkp7HEMBdQEDC5gJ0DTP2YM.roa
Signing time:             Thu 19 Sep 2024 13:11:48 +0000
ROA not before:           Thu 19 Sep 2024 13:11:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215157
IP address blocks:        5.134.84.0/23 maxlen: 24
                          217.113.26.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:0a:69:09:04:d4:e8:8f:24:41:70:2d:28:33:b4:12:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Sep 19 13:11:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fc3c071a4a7b1c43017501030b9809d034cfd983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:55:71:a7:84:cc:e0:8c:be:93:85:4f:c8:92:
                    15:96:57:5b:d1:b8:29:85:35:53:de:a6:2c:4c:9b:
                    87:70:8a:db:7f:d8:df:12:a3:05:11:c6:6f:01:72:
                    75:ae:8d:3a:ff:4f:a2:29:f1:24:c4:62:25:31:d2:
                    af:e4:65:af:8b:e7:3c:f4:dc:39:e4:02:53:64:ae:
                    dc:d9:e2:ea:d5:49:d5:77:f1:9b:c9:a0:71:dd:e3:
                    c5:53:5c:f3:b3:9f:ae:7a:b7:09:44:49:f8:59:1e:
                    d9:58:f5:ef:bd:83:35:e8:a4:a2:99:4a:ec:4e:7b:
                    f9:ea:9c:31:be:f4:ec:1e:6b:c5:e7:c8:d8:0a:b2:
                    6d:0f:1f:9e:f5:db:11:3a:56:04:bd:ba:e6:57:f9:
                    46:89:14:5c:b6:0c:64:3b:c4:12:af:36:8c:c4:2d:
                    a3:77:36:4f:2d:7c:32:48:be:5f:2b:e6:b4:63:6d:
                    49:9e:de:63:74:38:75:72:4a:8c:ba:4f:42:0f:89:
                    ad:ec:95:38:7c:27:35:b9:93:d1:c8:42:df:53:7a:
                    c1:a6:36:a0:05:c1:3c:18:73:e1:ef:66:4c:14:61:
                    a8:65:41:6a:21:8a:4c:9b:72:f0:99:56:b8:69:56:
                    9c:c0:57:d0:e1:d8:62:05:8d:a3:37:9b:4c:b2:1f:
                    9c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3C:07:1A:4A:7B:1C:43:01:75:01:03:0B:98:09:D0:34:CF:D9:83
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/_DwHGkp7HEMBdQEDC5gJ0DTP2YM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.134.84.0/23
                  217.113.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:89:b9:f4:4c:3e:c7:98:55:2d:59:5f:ae:da:4e:0e:5d:10:
         4e:1a:dd:46:9c:31:15:c3:dd:8d:4c:13:b7:ae:19:59:73:34:
         e3:fc:73:70:71:03:ea:59:26:76:5f:b3:cf:03:ee:00:53:4d:
         6f:4a:6a:28:d6:28:06:e4:dc:fd:1a:63:73:7a:3f:fc:22:28:
         5a:ea:fd:a2:88:2d:b5:10:ba:d9:cb:65:7f:29:61:d8:bf:46:
         63:26:8f:aa:63:af:9a:b9:ee:31:3f:e6:b0:3a:87:4b:45:4e:
         a3:df:50:f8:16:fa:9b:4e:55:4e:c1:c5:63:7d:2d:da:16:51:
         7a:a8:78:88:2b:8c:e1:9e:ab:35:01:4b:b4:cd:68:fd:aa:2f:
         e8:7b:69:f1:c9:94:21:0d:8a:0e:6a:17:24:ed:83:83:fa:15:
         1e:08:f3:ac:f3:0f:93:45:a7:51:c2:82:d6:11:1e:e3:6c:77:
         b4:43:73:f3:58:37:23:d7:75:36:b9:61:b2:5c:d6:20:58:dd:
         90:20:e0:e3:d2:de:6c:5c:01:8e:e7:98:1e:3e:df:12:53:84:
         77:7e:1f:f8:52:5f:6c:2c:c5:0a:96:f0:fe:ba:85:dd:31:c7:
         98:5a:cb:c8:f6:1a:3e:27:c6:84:ec:d2:3a:7a:bf:cf:4f:1e:
         3e:f8:89:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:18:21 2024 by rpki-client on console.sobornost.net