Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/wViVnHNGkilHXbqVMRGC76Fz33I.roa
File:                     wViVnHNGkilHXbqVMRGC76Fz33I.roa (raw, json)
Hash identifier:          dPVPiV68TAdYHYJ5wLPpd8rshbobQu3ep0Lm4wJ8rPk=
Subject key identifier:   C1:58:95:9C:73:46:92:29:47:5D:BA:95:31:11:82:EF:A1:73:DF:72
Certificate issuer:       /CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
Certificate serial:       018CC3493BD2C36BD8E17F9EDA3D2D117998
Authority key identifier: D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/wViVnHNGkilHXbqVMRGC76Fz33I.roa
Signing time:             Mon 01 Jan 2024 04:30:05 +0000
ROA not before:           Mon 01 Jan 2024 04:30:05 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48173
IP address blocks:        193.101.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:49:3b:d2:c3:6b:d8:e1:7f:9e:da:3d:2d:11:79:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93e302c21a9dda67509fc8f13daf4c62acff0ee
        Validity
            Not Before: Jan  1 04:30:05 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c158959c73469229475dba95311182efa173df72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:43:16:40:f3:aa:05:d8:eb:7c:d0:8b:e8:d4:
                    f1:44:15:9f:96:1a:28:c5:38:d4:08:13:3f:3e:17:
                    de:65:f3:52:b5:02:40:63:67:e2:be:e3:3f:bf:52:
                    df:03:d1:3c:1f:4b:3d:03:f1:a5:e0:9b:8c:96:2b:
                    32:5a:f0:96:1a:01:b2:c7:a2:4a:6e:f8:0f:d4:9e:
                    b8:0c:cc:39:0d:40:bb:71:e0:01:5f:8f:cc:1b:85:
                    2a:81:c8:7a:57:34:28:22:ba:f9:6a:38:eb:e3:00:
                    44:31:e3:b6:d8:68:79:1f:1d:a5:a1:ac:a8:c5:ed:
                    d1:a5:d8:4c:04:c8:5b:cb:40:90:ac:d1:5c:4b:e3:
                    be:98:3d:73:8b:55:da:09:01:a2:56:37:03:fb:61:
                    12:62:22:8b:ea:16:6c:9e:f5:38:0c:c8:13:70:ec:
                    9c:6a:04:77:b2:b5:70:f9:41:c6:ca:6c:4b:7a:a6:
                    09:0d:32:c0:84:7c:81:b9:f3:f4:3e:71:da:e0:05:
                    2a:4a:18:18:37:6e:f9:c1:21:cb:b3:4e:51:f6:ea:
                    0f:95:34:cd:83:5c:42:bd:e7:d3:bc:53:59:3f:d4:
                    97:cb:50:bf:ba:79:22:95:b4:20:a5:33:fe:82:3a:
                    e0:db:65:ec:ed:4f:07:eb:93:5d:96:bd:00:05:39:
                    12:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:58:95:9C:73:46:92:29:47:5D:BA:95:31:11:82:EF:A1:73:DF:72
            X509v3 Authority Key Identifier:
                keyid:D9:3E:30:2C:21:A9:DD:A6:75:09:FC:8F:13:DA:F4:C6:2A:CF:F0:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T4wLCGp3aZ1CfyPE9r0xirP8O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/wViVnHNGkilHXbqVMRGC76Fz33I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/2T4wLCGp3aZ1CfyPE9r0xirP8O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.101.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:83:db:6c:d3:54:29:74:76:9f:28:25:8b:fc:60:60:38:93:
         ba:e0:5d:d6:c4:5e:e4:91:fe:5f:4c:74:98:f8:95:83:7f:48:
         45:f1:94:4c:65:41:a0:05:91:9d:fe:cf:1a:07:a5:0a:1c:47:
         8d:0a:ce:b8:fb:f3:75:84:43:67:1e:49:a9:c1:40:48:ed:83:
         ff:1a:bd:94:75:c5:49:9c:40:37:52:61:32:44:34:57:27:55:
         1b:0a:bf:ba:14:30:31:a4:f2:1e:a6:cb:05:6a:f2:92:9f:87:
         87:8f:b3:3e:b3:91:1a:cb:bf:80:85:6b:4a:46:31:5d:bc:f7:
         cf:8e:e3:ed:56:86:8b:bd:7a:dc:f3:b2:d5:5c:43:26:00:b6:
         b4:06:b2:3c:60:f3:42:03:3b:4c:11:f0:f6:1e:34:11:e0:34:
         5b:4e:5d:52:de:20:09:ab:79:1f:d3:a9:f1:8c:9a:eb:87:6b:
         2e:cd:db:3a:67:6a:9f:5f:b7:7a:38:22:d6:01:ff:37:92:76:
         c2:38:35:2b:6e:6d:b3:85:b4:87:e3:82:7d:0d:47:a0:ce:d2:
         f6:1b:65:2a:63:84:2e:92:42:98:50:8b:06:e2:0e:16:55:57:
         18:9c:72:91:30:d8:0f:69:cc:ee:e0:61:8b:af:bc:8c:b3:60:
         de:35:5b:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSTvSw2vY4X+e2j0tEXmYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2UzMDJjMjFhOWRkYTY3NTA5ZmM4ZjEzZGFmNGM2MmFj
ZmYwZWUwHhcNMjQwMTAxMDQzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTU4OTU5YzczNDY5MjI5NDc1ZGJhOTUzMTExODJlZmExNzNkZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkMWQPOqBdjrfNCL6NTxRBWflhoo
xTjUCBM/PhfeZfNStQJAY2fivuM/v1LfA9E8H0s9A/Gl4JuMlisyWvCWGgGyx6JK
bvgP1J64DMw5DUC7ceABX4/MG4Uqgch6VzQoIrr5ajjr4wBEMeO22Gh5Hx2loayo
xe3RpdhMBMhby0CQrNFcS+O+mD1zi1XaCQGiVjcD+2ESYiKL6hZsnvU4DMgTcOyc
agR3srVw+UHGymxLeqYJDTLAhHyBufP0PnHa4AUqShgYN275wSHLs05R9uoPlTTN
g1xCvefTvFNZP9SXy1C/unkilbQgpTP+gjrg22Xs7U8H65Ndlr0ABTkSowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMFYlZxzRpIpR126lTERgu+hc99yMB8GA1UdIwQY
MBaAFNk+MCwhqd2mdQn8jxPa9MYqz/DuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQ0d0xDR3AzYVoxQ2Z5UEU5cjB4aXJQOE80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wZjNhODctNWVhMS00NjcxLTkwYjct
YWUxNzU5OTE2ZGYwLzEvd1ZpVm5ITkdraWxIWGJxVk1SR0M3NkZ6MzNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8wZjNhODctNWVhMS00NjcxLTkwYjctYWUxNzU5OTE2ZGYw
LzEvMlQ0d0xDR3AzYVoxQ2Z5UEU5cjB4aXJQOE80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWWzMA0G
CSqGSIb3DQEBCwUAA4IBAQBFg9ts01QpdHafKCWL/GBgOJO64F3WxF7kkf5fTHSY
+JWDf0hF8ZRMZUGgBZGd/s8aB6UKHEeNCs64+/N1hENnHkmpwUBI7YP/Gr2UdcVJ
nEA3UmEyRDRXJ1UbCr+6FDAxpPIepssFavKSn4eHj7M+s5Eay7+AhWtKRjFdvPfP
juPtVoaLvXrc87LVXEMmALa0BrI8YPNCAztMEfD2HjQR4DRbTl1S3iAJq3kf06nx
jJrrh2suzds6Z2qfX7d6OCLWAf83knbCODUrbm2zhbSH44J9DUegztL2G2UqY4Qu
kkKYUIsG4g4WVVcYnHKRMNgPaczu4GGLr7yMs2DeNVuW
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:18 2024 by rpki-client on console.sobornost.net