Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/sScHhdVmFh704nO0cxZt9AKXQ1w.roa
File:                     sScHhdVmFh704nO0cxZt9AKXQ1w.roa (raw, json)
Hash identifier:          umE11ibeM4aWfBGEyGwKeAszVfGZ2syaiaC256C8CSA=
Subject key identifier:   B1:27:07:85:D5:66:16:1E:F4:E2:73:B4:73:16:6D:F4:02:97:43:5C
Certificate issuer:       /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial:       0193CEBAB462CE7838370ABA22DDCA4F5C24
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/sScHhdVmFh704nO0cxZt9AKXQ1w.roa
Signing time:             Mon 16 Dec 2024 09:09:22 +0000
ROA not before:           Mon 16 Dec 2024 09:09:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16276
IP address blocks:        194.59.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:ce:ba:b4:62:ce:78:38:37:0a:ba:22:dd:ca:4f:5c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
        Validity
            Not Before: Dec 16 09:09:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b1270785d566161ef4e273b473166df40297435c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:74:66:1c:a6:41:ee:4b:75:38:5f:fa:36:11:
                    1c:2b:62:fc:ab:b8:75:c4:fc:69:f0:d7:16:da:db:
                    09:5b:c7:75:2d:33:d3:b1:75:bd:7d:8f:59:a1:4d:
                    b3:37:e9:66:01:ad:fd:7f:8a:69:00:d2:57:e0:6a:
                    28:27:68:ed:ce:de:9f:4a:5d:53:0e:0a:e9:a6:6c:
                    ca:0a:6e:33:d7:fa:25:ba:81:d6:d2:66:13:11:a6:
                    4f:c4:f0:06:95:6f:70:24:7a:44:fd:52:01:be:79:
                    10:8d:f1:4b:5d:b9:6d:80:42:20:54:0b:cd:1a:3a:
                    13:7a:ca:4c:0c:e2:ff:36:5b:d1:44:b2:25:3c:45:
                    02:55:a2:67:5c:a8:4f:b2:b2:3b:ec:50:96:05:2a:
                    c9:bf:4e:b1:ef:5d:59:30:18:d3:84:fb:64:7b:d7:
                    e1:0c:ae:80:2d:da:b1:f2:62:f7:aa:7f:b4:46:b7:
                    20:82:b8:64:0f:76:22:00:91:47:08:de:9f:8c:d4:
                    c1:5c:b8:e7:17:0b:68:ad:42:f9:66:19:31:a8:c0:
                    41:b4:ff:22:b6:37:2e:90:04:00:96:0a:50:18:d6:
                    d1:a8:48:e7:3e:61:c6:28:b6:c4:a0:dd:4d:86:25:
                    0d:98:33:b7:b2:fe:c0:e8:11:12:b3:5c:07:32:0a:
                    22:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:27:07:85:D5:66:16:1E:F4:E2:73:B4:73:16:6D:F4:02:97:43:5C
            X509v3 Authority Key Identifier:
                keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/sScHhdVmFh704nO0cxZt9AKXQ1w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.59.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:ba:cf:3c:e2:9a:f4:29:57:7a:05:7d:fe:64:8c:75:20:bd:
         c3:00:ca:e6:4b:fc:e3:2c:f7:d0:ce:08:53:b2:fa:0f:1c:9c:
         2b:2b:6b:76:8e:b1:c8:f8:f2:c5:5c:ed:6f:d2:3d:54:8a:5b:
         34:a6:4a:da:7f:50:e6:eb:0d:68:49:b7:d1:88:bb:cf:e2:4b:
         dc:10:f8:54:a8:4e:c5:0e:ff:1a:9e:89:b8:b4:f4:b5:fb:7c:
         ad:b2:86:0c:3c:5d:cf:9b:30:70:37:b0:ed:90:cc:28:1c:75:
         95:a1:01:85:d4:fb:f3:12:70:31:2a:3c:9b:63:5c:cc:10:55:
         03:30:63:a8:23:71:23:b4:42:ec:c7:53:f9:b6:8b:24:bf:55:
         d0:cd:67:ce:0f:5a:35:72:78:f5:a6:e1:98:e1:e2:72:66:ee:
         c6:86:00:bb:ab:59:e2:07:21:14:d2:7d:52:02:b5:cf:88:a2:
         3b:ab:f1:5b:90:b1:c1:2d:71:a5:7b:5e:51:4e:2a:a0:14:31:
         75:c4:4a:ae:66:01:8c:8d:9f:77:a3:a2:5f:0f:fb:ca:5b:b6:
         d8:62:42:12:63:42:5e:36:2e:ad:76:60:0a:62:be:f5:79:9d:
         8d:7d:ca:d6:2e:88:d7:7f:b2:86:8d:aa:91:f8:5a:55:b8:fc:
         ba:27:d7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:15 2024 by rpki-client on console.sobornost.net