Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/uyXcEvZR-i9gK-amp5SHRnS7Ifw.roa
File:                     uyXcEvZR-i9gK-amp5SHRnS7Ifw.roa (raw, json)
Hash identifier:          nI5BLbawy2s4TMcvrh2YQXbLVJMutEWylq1cxdwLlCs=
Subject key identifier:   BB:25:DC:12:F6:51:FA:2F:60:2B:E6:A6:A7:94:87:46:74:BB:21:FC
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       01932AB5AE91358D5A20AC962B319B0C1632
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/uyXcEvZR-i9gK-amp5SHRnS7Ifw.roa
Signing time:             Thu 14 Nov 2024 12:46:09 +0000
ROA not before:           Thu 14 Nov 2024 12:46:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     42991
IP address blocks:        217.113.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:2a:b5:ae:91:35:8d:5a:20:ac:96:2b:31:9b:0c:16:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Nov 14 12:46:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bb25dc12f651fa2f602be6a6a794874674bb21fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e4:b1:49:ca:d1:e2:18:cd:79:51:71:a1:d8:
                    3e:87:7f:80:9f:c1:51:78:75:7d:bf:41:3c:65:0f:
                    1a:7b:28:55:41:16:fc:c3:f9:fe:ff:a8:d4:45:e4:
                    5a:68:60:60:89:8d:df:60:1c:d9:21:6c:43:3a:0e:
                    00:e3:ba:57:63:b1:74:e7:18:e1:11:0f:40:57:de:
                    da:7c:d5:24:be:53:9c:91:b8:e6:04:7b:85:e6:b4:
                    a6:2a:ec:4c:ed:e0:19:7c:29:c9:39:4c:94:27:8d:
                    ac:0d:3e:9b:8f:36:07:0c:1e:6d:c4:19:8c:8a:b7:
                    5c:9b:bf:95:29:e8:1a:86:a8:25:62:ec:2b:0d:f1:
                    97:38:91:fb:e8:15:6d:92:9d:1d:26:0d:97:3b:fe:
                    d0:c3:59:7e:39:e3:3a:33:02:71:97:cc:3d:9b:ec:
                    d7:7a:1d:d3:82:dc:81:63:b1:c1:06:87:75:b7:e6:
                    9e:00:60:94:18:1e:37:b3:f8:93:0f:40:b6:b5:ba:
                    56:60:f7:a1:5d:aa:6a:08:61:60:02:44:eb:7b:3d:
                    0c:5f:73:79:60:61:99:fc:8f:9c:04:a6:71:9e:83:
                    42:14:61:2d:b6:2f:29:50:b0:10:e0:f9:ff:4a:89:
                    a0:2b:11:57:64:00:9f:d8:3a:9e:1f:84:20:29:95:
                    c8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:25:DC:12:F6:51:FA:2F:60:2B:E6:A6:A7:94:87:46:74:BB:21:FC
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/uyXcEvZR-i9gK-amp5SHRnS7Ifw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.113.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:f0:55:74:ac:51:d7:a4:7a:16:96:54:12:16:a0:2c:c0:43:
         c2:67:7c:34:ee:8f:ed:60:49:16:14:56:05:cc:bd:6a:82:44:
         e2:2d:b9:54:3c:d3:90:8e:e4:68:82:2b:0d:7e:cd:9c:74:9f:
         1d:da:c4:e3:62:41:35:45:84:f8:75:6b:e6:23:a9:f6:cc:78:
         b6:a8:cd:50:ec:ab:ab:4f:f9:b1:92:2b:34:79:f1:ac:5f:69:
         51:d7:3c:2b:51:2e:77:0f:a7:a2:93:23:12:a2:d5:d8:b0:57:
         ec:24:f4:96:3d:6d:44:6e:84:0f:35:0b:28:05:1b:22:13:a5:
         d4:9e:c8:0e:4f:3a:92:da:0d:88:76:a7:4a:86:1b:f0:df:c7:
         be:48:79:56:d1:b3:39:68:fb:43:c7:da:aa:82:c9:78:47:e0:
         95:a0:c0:10:20:f9:53:5f:37:e7:27:78:f7:cb:a2:e1:d3:fb:
         8e:82:db:59:be:c1:40:a0:0a:9e:dd:3a:11:00:11:ca:f1:4c:
         4e:a7:b3:d6:0d:85:4a:09:ff:de:7c:c2:57:17:87:4c:84:3f:
         b3:89:82:02:0a:ee:03:69:51:e0:b7:18:40:8f:05:85:0b:7d:
         31:8b:ee:62:c5:04:ac:8c:de:f6:15:5d:b7:bf:23:95:a3:0f:
         90:8e:ac:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:14:10 2024 by rpki-client on console.sobornost.net