Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/uGQakd142JUQMUfeM4D2vTfPAkA.roa
File:                     uGQakd142JUQMUfeM4D2vTfPAkA.roa (raw, json)
Hash identifier:          uRLtZQlwJmmCQmzaR4bj94T1xRrIkfxKp9hdx881Y6M=
Subject key identifier:   B8:64:1A:91:DD:78:D8:95:10:31:47:DE:33:80:F6:BD:37:CF:02:40
Certificate issuer:       /CN=1ad5d174cbb46aaf86555b80e1773331b870b568
Certificate serial:       018F2E9A1DC8C1548DA229AED5D55C71277D
Authority key identifier: 1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/uGQakd142JUQMUfeM4D2vTfPAkA.roa
Signing time:             Tue 30 Apr 2024 10:43:22 +0000
ROA not before:           Tue 30 Apr 2024 10:43:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     47303
IP address blocks:        193.203.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2e:9a:1d:c8:c1:54:8d:a2:29:ae:d5:d5:5c:71:27:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ad5d174cbb46aaf86555b80e1773331b870b568
        Validity
            Not Before: Apr 30 10:43:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b8641a91dd78d895103147de3380f6bd37cf0240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:c6:92:86:5f:85:9a:30:79:7b:07:d3:2f:
                    e6:46:e3:56:57:06:7d:9a:b8:01:df:ea:c0:1f:00:
                    13:5d:e5:95:56:4c:07:11:73:4c:1d:fa:c7:57:b6:
                    af:4a:83:20:1f:4b:ce:15:6d:f3:99:0c:54:0d:b2:
                    b5:6a:38:72:0a:20:4e:47:9a:59:58:69:e7:55:eb:
                    22:80:28:ae:8e:99:56:1a:68:c5:93:81:f1:0e:c5:
                    0f:57:84:64:73:93:ae:90:97:fc:b3:09:d3:75:99:
                    80:77:4f:d7:54:08:b6:fb:8c:33:48:14:27:d2:f1:
                    44:54:85:55:4e:4c:f2:c6:00:88:df:f8:95:84:28:
                    7a:ed:5c:3c:3e:32:0b:89:18:47:ef:6b:3f:fe:f8:
                    13:a1:c8:b9:d5:e4:c1:78:bd:44:6c:b5:ef:c2:0f:
                    64:54:b2:d0:a7:dc:08:d3:2f:57:65:3e:79:89:ab:
                    23:d7:ef:b7:4f:a7:ee:57:e7:51:b8:e8:1c:e4:81:
                    3c:1b:f6:c1:04:d8:55:e7:02:06:d0:d2:bb:b6:89:
                    a0:02:2c:6c:9b:c9:7f:25:4b:11:35:23:8d:c1:c2:
                    29:7a:0e:48:85:90:bd:ca:9a:d4:4f:5f:c4:c9:34:
                    39:13:a6:b8:bf:5b:48:9e:c7:46:05:a6:15:d0:29:
                    7f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:64:1A:91:DD:78:D8:95:10:31:47:DE:33:80:F6:BD:37:CF:02:40
            X509v3 Authority Key Identifier:
                keyid:1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/uGQakd142JUQMUfeM4D2vTfPAkA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.203.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:8c:a2:66:a6:a0:ab:c2:05:ab:4f:8f:9a:bd:ab:87:4a:7e:
         9a:9b:6b:bd:00:19:8f:c5:ec:16:34:e6:bc:2c:2e:46:64:b4:
         22:50:91:85:90:60:b7:01:cd:35:a7:13:9d:fb:11:1d:74:e1:
         fd:70:42:d2:3f:bc:c8:d9:01:d8:c6:ff:d5:8f:08:f1:84:47:
         30:37:bc:97:b0:bf:ac:39:3b:b9:a8:6d:fe:51:7f:50:f8:e4:
         87:d8:d4:b9:34:b6:3a:9f:a0:d5:b7:b5:dc:f0:4d:47:5c:27:
         65:ae:d0:3b:9c:9e:43:73:fa:97:4a:b3:f9:c7:29:32:84:26:
         c7:b9:c3:84:c6:f3:b9:e4:5c:02:24:54:00:13:b8:19:56:ed:
         a6:1b:bd:dc:f3:45:c7:b6:c7:3e:7f:da:74:35:12:a2:e6:48:
         35:d1:78:a5:fd:77:8b:be:a3:b7:bd:c7:c2:ec:77:1d:6d:64:
         67:08:c0:20:e9:74:14:5e:d6:1e:47:98:5e:28:79:1b:5d:17:
         97:fc:75:4c:6d:63:4a:d5:8d:64:1a:79:63:80:9f:87:eb:37:
         da:89:35:0f:b7:43:f8:0a:30:86:da:6d:94:4b:f6:1c:3c:52:
         68:05:6a:25:b6:b7:de:3e:79:2f:be:51:f8:7e:95:34:ee:22:
         63:a0:56:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:00 2024 by rpki-client on console.sobornost.net