Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/gEzfBpFtCOz1-nN1BZyGDLUSypU.roa
File:                     gEzfBpFtCOz1-nN1BZyGDLUSypU.roa (raw, json)
Hash identifier:          T9J5sWAqiLOvJSC2Wu2Qm/kMu6342b3eB42kQxQzu5c=
Subject key identifier:   80:4C:DF:06:91:6D:08:EC:F5:FA:73:75:05:9C:86:0C:B5:12:CA:95
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       01910C49BCF24305A66435E27FEC67686592
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/gEzfBpFtCOz1-nN1BZyGDLUSypU.roa
Signing time:             Thu 01 Aug 2024 04:54:04 +0000
ROA not before:           Thu 01 Aug 2024 04:54:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206783
IP address blocks:        217.113.26.0/23 maxlen: 24
                          217.113.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:0c:49:bc:f2:43:05:a6:64:35:e2:7f:ec:67:68:65:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Aug  1 04:54:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=804cdf06916d08ecf5fa7375059c860cb512ca95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:14:cb:7e:dc:7a:90:8e:06:ab:eb:4f:8f:b1:
                    bc:1f:6f:ec:e5:cc:eb:21:89:d4:de:0a:d2:2c:d2:
                    6c:79:0a:93:03:e4:92:7f:24:23:d1:85:ce:51:41:
                    fe:2d:94:df:23:5a:5d:f1:f4:dd:cf:cb:cc:8b:70:
                    dd:7a:37:52:a9:7d:05:ce:cd:df:8c:2e:31:e3:d9:
                    e2:a1:8e:90:8b:88:df:98:5c:e9:63:be:35:2c:8e:
                    43:02:a9:74:a0:11:96:55:3c:dc:cb:53:8b:d8:ae:
                    b7:ea:e1:13:e0:0e:a3:8d:fe:99:ce:d6:4b:cf:70:
                    f7:4f:c6:36:96:19:eb:58:c5:4a:b6:d6:94:6d:6d:
                    c3:45:37:69:7a:48:f2:da:a8:e3:ee:2b:a1:9f:8a:
                    26:00:35:7e:4b:23:1e:87:ab:d9:7d:87:f6:eb:7b:
                    e8:d7:9b:b2:c7:84:e7:c2:4e:05:9c:ea:b8:45:a8:
                    04:44:8d:fe:46:39:0a:bf:6e:9c:5b:fe:1a:b0:df:
                    23:97:17:f6:d5:56:30:14:a7:e9:34:9b:0e:a4:31:
                    bd:1c:87:51:b4:c7:7a:a1:db:ad:f1:e2:70:b1:0e:
                    fc:a8:bf:05:44:a4:c4:fb:bc:31:f9:09:f9:11:24:
                    be:4b:2b:af:de:c3:78:0b:bf:49:2b:72:12:ae:64:
                    fc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4C:DF:06:91:6D:08:EC:F5:FA:73:75:05:9C:86:0C:B5:12:CA:95
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/gEzfBpFtCOz1-nN1BZyGDLUSypU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.113.26.0/23
                  217.113.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:e4:0b:8a:d5:84:7d:6d:7f:3a:77:66:f4:46:bc:01:c0:a1:
         17:f1:58:0f:e7:ce:d5:55:34:a4:e4:36:c3:ce:ac:69:b0:02:
         ac:95:1b:3c:a7:08:6d:eb:36:ac:81:84:30:ea:84:95:bf:3c:
         08:59:a3:0a:63:01:40:26:d0:46:e5:d1:20:83:75:b1:e9:aa:
         67:9b:3f:c2:8d:af:0b:9a:08:4b:14:4c:98:3c:27:42:28:3e:
         04:ff:86:32:2c:1c:09:a2:7c:3c:c4:ac:5a:69:76:76:9b:f2:
         b1:02:ce:c5:a8:c0:32:b4:24:73:45:5f:80:31:f7:43:bd:50:
         94:2e:83:93:4c:e7:96:12:f2:1c:8e:a9:53:c9:6d:b8:08:c5:
         4d:7b:86:76:29:1a:83:01:05:3c:a6:d4:5f:bb:84:2e:a9:d5:
         5c:96:6a:c2:5d:a1:f6:bb:f5:d9:55:d1:a9:48:89:13:14:b3:
         f2:8e:68:8f:c7:21:76:c8:db:4a:d2:99:fc:1f:cd:b2:a1:5b:
         db:81:b0:02:f1:a8:0c:ee:6b:2f:11:bc:5d:f7:0c:14:21:d4:
         13:72:f3:d1:8f:87:c6:63:05:e4:5f:61:f8:4a:b3:bc:96:dc:
         6b:45:7d:86:68:d1:90:f1:ff:da:9e:0a:3a:44:9c:1b:3a:07:
         d2:78:e8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 05:44:44 2024 by rpki-client on console.sobornost.net