Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/vdMtPAwefwbohHgFe8WWEh1gfmA.roa
File:                     vdMtPAwefwbohHgFe8WWEh1gfmA.roa (raw, json)
Hash identifier:          291Fp7ijptaXPQNPc5sOySZK/eHhhJtK41Z+JrxWoKk=
Subject key identifier:   BD:D3:2D:3C:0C:1E:7F:06:E8:84:78:05:7B:C5:96:12:1D:60:7E:60
Certificate issuer:       /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial:       0191C74E992351302B04A7A7B47ADE414C7A
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/vdMtPAwefwbohHgFe8WWEh1gfmA.roa
Signing time:             Fri 06 Sep 2024 12:28:22 +0000
ROA not before:           Fri 06 Sep 2024 12:28:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        82.206.2.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:c7:4e:99:23:51:30:2b:04:a7:a7:b4:7a:de:41:4c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
        Validity
            Not Before: Sep  6 12:28:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bdd32d3c0c1e7f06e88478057bc596121d607e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d6:08:c9:44:3f:df:fe:13:7f:2f:d0:65:44:
                    c6:ac:b8:16:65:b4:d1:39:01:a6:bc:7d:08:25:56:
                    c0:51:0f:6b:af:6d:17:81:31:1f:e1:44:ce:dd:c3:
                    6e:b2:e6:28:75:02:4c:7d:d7:dd:3b:35:46:ef:9a:
                    17:e1:ba:bf:59:fd:da:aa:c3:73:cd:ba:91:77:9d:
                    00:34:96:11:af:bb:03:cb:fd:38:c7:e8:f3:6d:39:
                    9e:be:d2:94:06:91:21:46:f2:cb:40:40:68:ac:6b:
                    60:59:cd:cd:3c:f8:6c:21:57:43:e3:b6:ce:ad:7d:
                    42:bf:61:09:ea:e6:9d:94:e5:39:52:60:78:7f:79:
                    49:82:d3:a5:44:26:b5:e1:7c:ed:52:82:ba:2e:74:
                    59:44:4b:65:02:6e:f8:cc:18:79:f8:76:c4:fa:44:
                    98:ab:8b:f7:a1:f7:63:cd:e7:f2:bb:ad:45:1f:dd:
                    89:e6:d6:58:57:14:30:a9:37:4c:ba:d9:da:32:93:
                    0e:c2:3b:e6:4b:8f:36:64:6a:43:d1:de:79:f6:58:
                    ef:5a:e8:d6:16:1d:54:6d:d7:af:da:8c:44:f8:f6:
                    b4:17:7b:32:74:a7:f5:14:e5:49:c6:89:b4:ec:7b:
                    96:7c:44:bc:cc:74:d2:62:bf:8d:52:62:e0:15:e0:
                    99:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D3:2D:3C:0C:1E:7F:06:E8:84:78:05:7B:C5:96:12:1D:60:7E:60
            X509v3 Authority Key Identifier:
                keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/vdMtPAwefwbohHgFe8WWEh1gfmA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.206.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:f0:4c:3f:31:2a:c5:68:4c:a3:82:7d:0f:33:e5:e1:f2:d4:
         b3:93:7f:e0:a5:44:ae:64:0a:ae:1c:6b:38:86:1d:50:f1:d1:
         81:2a:f8:74:1f:22:b0:81:3e:ad:1b:87:40:13:cd:2d:ca:29:
         1e:98:e3:0d:c3:0e:d3:b2:22:94:b1:b3:d0:b4:b8:e4:57:87:
         3d:a0:10:77:2a:0c:c5:52:e6:50:d8:e2:c0:e7:71:42:78:f1:
         a6:4c:91:9c:56:9c:35:c2:9a:10:1b:03:69:d4:8b:26:e4:f9:
         ea:f9:2a:0f:b4:45:32:26:92:1e:fd:dd:a2:6f:83:e4:94:5a:
         97:46:9b:a9:50:3b:59:f8:20:43:28:85:46:17:33:2d:d7:bc:
         af:04:92:bf:72:2f:77:9b:f1:d4:8f:0c:6c:3b:1f:4d:34:26:
         7a:5e:61:04:49:cb:0e:ae:19:3a:9b:1b:e3:4a:9a:5a:b5:b4:
         55:ef:29:e5:59:93:0d:12:15:e1:da:fd:63:4a:4d:45:82:a9:
         88:81:50:c6:39:d0:45:8f:e4:6f:b6:8c:1e:b7:c1:7b:34:56:
         3f:16:67:69:ed:31:3e:95:88:e9:79:eb:6c:de:f8:54:71:3b:
         a9:1f:6f:b3:6e:47:ee:7a:6a:b3:16:98:80:bc:e5:a6:10:f3:
         e1:5f:58:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:59 2024 by rpki-client on console.sobornost.net