Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/epQEZE75apLwDNkedQO6WO8Om1c.roa
File:                     epQEZE75apLwDNkedQO6WO8Om1c.roa (raw, json)
Hash identifier:          LSlOj8MC3R3LtTPUaMNnXPBQzP+j1nq/vJF9T0d8Bv4=
Subject key identifier:   7A:94:04:64:4E:F9:6A:92:F0:0C:D9:1E:75:03:BA:58:EF:0E:9B:57
Certificate issuer:       /CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Certificate serial:       018CC3B6943D89F77B353C90333DEEA065F7
Authority key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/epQEZE75apLwDNkedQO6WO8Om1c.roa
Signing time:             Mon 01 Jan 2024 06:29:31 +0000
ROA not before:           Mon 01 Jan 2024 06:29:31 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     49491
IP address blocks:        193.169.80.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b6:94:3d:89:f7:7b:35:3c:90:33:3d:ee:a0:65:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
        Validity
            Not Before: Jan  1 06:29:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7a9404644ef96a92f00cd91e7503ba58ef0e9b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:34:10:fd:75:89:ca:fb:71:7a:95:97:8b:e1:
                    97:83:c1:11:7f:3c:d8:5f:ca:2f:46:89:40:31:bc:
                    44:44:87:62:aa:24:07:10:f1:6a:bf:df:8e:30:ca:
                    2b:86:ca:b3:56:a3:9e:86:7a:aa:08:8d:22:9b:3b:
                    05:8a:33:62:5f:af:0c:57:3b:4c:4f:fc:b0:f6:09:
                    90:07:01:ae:3f:0a:4e:0c:26:39:eb:8f:87:b1:ba:
                    6e:6b:7b:f5:dd:4e:d5:97:0e:0a:bb:b3:47:69:6d:
                    49:c7:31:f1:42:1d:1c:94:69:6c:fc:79:9f:f2:52:
                    28:0e:be:16:2b:b9:e6:7c:f1:20:86:b2:76:7c:c4:
                    32:b9:16:45:b3:a9:84:86:da:8f:d7:57:10:90:58:
                    89:f8:0f:a7:dc:24:d6:53:ca:15:59:79:56:c4:44:
                    c6:21:7b:6c:7a:61:b6:c1:ab:2f:0f:08:11:76:6a:
                    bb:6c:34:20:ba:a3:6c:ba:d5:7a:26:56:f8:a7:c3:
                    88:e3:20:43:2a:57:a9:4b:14:f3:bb:64:d0:c7:ba:
                    a7:32:17:26:22:0a:e7:6d:1f:ff:7a:87:ba:de:a8:
                    76:f0:f9:49:4d:2a:ea:f8:3b:e8:ea:09:e4:6a:d5:
                    01:d0:4f:02:a7:50:1d:27:a7:8a:0f:19:0d:d1:7f:
                    2a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:94:04:64:4E:F9:6A:92:F0:0C:D9:1E:75:03:BA:58:EF:0E:9B:57
            X509v3 Authority Key Identifier:
                keyid:DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/epQEZE75apLwDNkedQO6WO8Om1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.169.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:f7:91:0b:b6:44:02:9e:86:06:69:e0:06:c5:c3:1f:b1:be:
         0d:89:9c:6e:24:b3:e2:3d:22:4b:c0:76:70:df:c5:25:e9:41:
         69:76:4e:8a:02:bf:a4:72:f8:e6:03:6b:8f:2b:6a:c0:de:56:
         9d:8a:38:2e:4c:19:bb:63:0a:cf:57:18:57:7a:b7:10:2d:6b:
         7e:a0:25:8d:95:01:0c:0a:31:2b:e5:e5:f1:f5:76:e5:c6:76:
         95:17:93:e5:db:d1:bc:5c:7a:ca:0e:5a:af:f9:57:bf:9d:48:
         cd:07:df:26:02:39:83:fc:ef:d4:05:8a:50:1c:db:cb:29:29:
         05:42:72:86:3c:a1:29:c6:01:45:60:ca:30:0d:8d:e5:bb:dd:
         b1:f5:1d:aa:ac:9b:ce:b7:4b:76:b4:d3:e3:c7:73:04:cc:2d:
         5c:3e:44:88:c2:69:60:a4:92:0f:6a:aa:08:2d:03:c3:18:5c:
         f3:d9:df:79:8d:ab:b4:d6:3e:44:55:a1:9e:c9:3e:dc:41:05:
         de:c9:67:c0:47:a8:99:74:4f:3b:e6:c0:f9:59:f6:28:57:22:
         72:f1:39:85:28:e3:84:4b:4c:9f:c6:43:9f:0a:55:2a:ce:e4:
         f6:e6:41:fa:09:17:e5:ad:2f:0c:ed:d8:1b:99:00:69:69:6b:
         2c:3f:da:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:48 2024 by rpki-client on console.sobornost.net