Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6ee225-1d3e-4448-9e08-c9d03fad025a/1/jvWtawqLilchenlEudzZREkNRUo.roa
File:                     jvWtawqLilchenlEudzZREkNRUo.roa (raw, json)
Hash identifier:          yvfJoj3mB525XZH+qnOvg4rJKOyTQcB5vyrtQDFOxBs=
Subject key identifier:   8E:F5:AD:6B:0A:8B:8A:57:21:7A:79:44:B9:DC:D9:44:49:0D:45:4A
Certificate issuer:       /CN=5ff4616f5cca34634b42311a0ea3d11864dada22
Certificate serial:       018793AF241C0DCE6586207945D15494CE32
Authority key identifier: 5F:F4:61:6F:5C:CA:34:63:4B:42:31:1A:0E:A3:D1:18:64:DA:DA:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X_Rhb1zKNGNLQjEaDqPRGGTa2iI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/6ee225-1d3e-4448-9e08-c9d03fad025a/1/jvWtawqLilchenlEudzZREkNRUo.roa
Signing time:             Tue 18 Apr 2023 09:25:41 +0000
ROA not before:           Tue 18 Apr 2023 09:25:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209638
IP address blocks:        194.56.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:93:af:24:1c:0d:ce:65:86:20:79:45:d1:54:94:ce:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ff4616f5cca34634b42311a0ea3d11864dada22
        Validity
            Not Before: Apr 18 09:25:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8ef5ad6b0a8b8a57217a7944b9dcd944490d454a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e2:d4:a1:e0:ff:35:2c:84:4e:9e:61:04:41:
                    5c:1d:cf:f8:11:d7:48:3d:d8:10:d2:a5:fa:45:8b:
                    17:d3:d5:72:bb:d6:b0:3a:05:c2:5c:31:3d:d4:8c:
                    2d:28:71:ee:6e:2c:e0:ef:c0:94:1e:91:9f:33:94:
                    c1:66:7f:a4:e2:9e:9a:5e:c7:ad:8c:24:be:d1:8b:
                    e5:4f:cb:ab:a7:fa:c0:74:1b:6c:5a:d2:93:b3:e4:
                    55:cd:92:99:0b:14:ca:7d:83:36:d1:32:bf:10:7e:
                    6a:f2:8c:04:04:a3:5d:88:a4:26:08:0a:f3:94:ac:
                    a2:5b:17:1d:8b:fa:a4:0e:7e:df:46:49:f0:97:07:
                    99:41:6b:87:bd:22:6e:5c:8a:9e:8c:d2:48:3d:61:
                    c9:f1:52:ab:f7:cd:aa:5d:fe:c3:a0:a1:da:03:f3:
                    39:45:62:13:0d:54:36:47:9b:30:fa:61:f7:06:a0:
                    4b:79:94:c2:f3:c9:ec:1f:86:72:03:7e:2c:71:da:
                    1b:bb:04:85:9f:da:a2:bc:46:b1:4a:7a:03:fa:15:
                    38:19:6d:b3:d0:91:94:9a:ac:2d:69:53:55:b3:41:
                    19:1d:8b:1d:dd:bd:2d:cb:3d:f6:55:20:82:11:94:
                    03:79:d9:6f:c6:11:3b:65:6a:e2:c9:92:ca:28:ef:
                    f7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F5:AD:6B:0A:8B:8A:57:21:7A:79:44:B9:DC:D9:44:49:0D:45:4A
            X509v3 Authority Key Identifier:
                keyid:5F:F4:61:6F:5C:CA:34:63:4B:42:31:1A:0E:A3:D1:18:64:DA:DA:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_Rhb1zKNGNLQjEaDqPRGGTa2iI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6ee225-1d3e-4448-9e08-c9d03fad025a/1/jvWtawqLilchenlEudzZREkNRUo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6ee225-1d3e-4448-9e08-c9d03fad025a/1/X_Rhb1zKNGNLQjEaDqPRGGTa2iI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.56.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:5e:fa:d1:93:92:dc:f5:8a:c4:db:55:cc:57:ea:7d:1a:0d:
         43:a4:5d:7e:61:0f:cf:c0:eb:42:dd:61:f4:6c:28:5d:71:0b:
         0f:23:2b:e3:01:58:8e:ef:86:c4:d0:34:41:f0:6f:b0:a6:98:
         e9:37:5a:f1:fe:be:e7:bb:ed:9b:41:c8:6c:42:24:a7:0b:2a:
         ba:1d:8a:94:61:dd:7f:e4:2e:3e:c2:69:18:95:8d:d5:55:f6:
         f6:5f:01:4d:60:51:10:2b:04:79:a8:b8:84:e9:ba:15:48:6a:
         24:1f:7f:48:c9:da:0d:71:5c:38:fc:19:d8:db:d1:51:fc:09:
         76:3a:e4:da:b9:c4:b2:a3:79:3c:b8:3b:af:a5:91:90:21:94:
         71:67:4e:6a:a1:b5:cc:41:23:d8:f6:fc:14:a8:05:12:6f:74:
         34:6c:b9:be:bc:2b:f3:6b:ee:21:9d:6c:f7:e8:79:dc:66:36:
         ee:09:3e:ef:b6:a2:54:b2:13:3a:fe:4e:66:4f:75:d6:44:69:
         60:57:55:c2:a9:90:05:44:74:47:14:2c:9e:43:0c:a3:2c:42:
         40:e0:49:55:b8:31:86:74:83:c7:e0:82:48:ea:52:76:be:d1:
         28:67:82:70:ec:c6:68:12:5e:f1:52:a0:f0:3e:57:3f:11:71:
         e9:db:8c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:19 2023 by rpki-client on console.sobornost.net