Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IjGtC6W67EbFbGl3l3qZTXA6pWc.roa
File:                     IjGtC6W67EbFbGl3l3qZTXA6pWc.roa (raw, json)
Hash identifier:          8Oo0Nd8s4RktL6Ew+mVOQlijuUzC7x/ZvhhcdSHi5BQ=
Subject key identifier:   22:31:AD:0B:A5:BA:EC:46:C5:6C:69:77:97:7A:99:4D:70:3A:A5:67
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       0193DE3FCF65DBCEC8D481DF0AE6AA40B299
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IjGtC6W67EbFbGl3l3qZTXA6pWc.roa
Signing time:             Thu 19 Dec 2024 09:29:03 +0000
ROA not before:           Thu 19 Dec 2024 09:29:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     6453
IP address blocks:        31.58.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:de:3f:cf:65:db:ce:c8:d4:81:df:0a:e6:aa:40:b2:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Dec 19 09:29:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2231ad0ba5baec46c56c6977977a994d703aa567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7c:22:08:60:c8:92:d7:bf:e2:dc:1f:db:7e:
                    c1:ea:d8:17:3e:75:6f:b9:9e:17:02:fa:9d:e7:41:
                    9b:9c:57:a2:32:eb:6d:a9:3c:35:e3:5c:cb:cf:8a:
                    93:86:27:be:b2:9d:f6:2f:96:73:de:cd:06:7a:14:
                    11:d6:ba:7d:a0:3c:bd:27:31:c1:b1:47:8c:19:0e:
                    f2:df:3d:f5:13:61:05:66:07:88:04:dd:a8:21:ae:
                    69:07:4c:c5:f3:d8:7f:ea:75:c0:20:3c:78:6f:13:
                    bf:24:dd:41:bf:f6:ed:c2:f7:1b:96:15:80:2a:06:
                    00:15:2e:23:5b:be:30:24:dc:fe:02:62:c7:a1:66:
                    8f:89:05:91:0a:a6:69:35:e6:a4:14:82:ff:e6:db:
                    c5:21:99:29:7a:29:65:86:03:8a:c2:8c:7e:e8:e3:
                    db:f4:b7:6b:42:ff:a3:fb:8b:8d:e7:4b:31:e4:d0:
                    73:03:a4:31:f9:4b:e3:85:e5:b6:f6:da:67:19:d2:
                    83:b4:e4:9c:70:09:d2:7f:64:14:d2:54:72:11:73:
                    94:c8:27:f8:f9:8e:1e:c1:fc:5b:f8:e2:78:93:b1:
                    0b:cd:d9:12:3b:65:10:6d:df:f5:b2:a5:d6:1e:c7:
                    f3:d0:d8:79:cb:04:0a:16:19:48:c1:99:c3:7a:df:
                    a8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:31:AD:0B:A5:BA:EC:46:C5:6C:69:77:97:7A:99:4D:70:3A:A5:67
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IjGtC6W67EbFbGl3l3qZTXA6pWc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.58.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:41:68:14:6d:00:f4:72:69:80:25:0d:4f:e1:a2:91:7a:14:
         39:9c:5b:d0:e2:f3:ed:47:eb:bf:b4:d4:53:6e:fe:a7:a2:e6:
         ea:dc:72:77:4d:bb:b5:b1:4c:d9:06:d6:ec:2a:4c:fb:ca:78:
         3e:6f:53:c5:22:0c:ae:40:64:fe:5e:8a:f2:e2:1d:4e:b2:89:
         bb:17:05:96:84:95:66:16:86:53:f3:c0:c8:1e:1c:fe:5f:ee:
         20:2d:9b:a6:17:09:33:57:3d:69:11:d7:f1:3c:24:39:67:35:
         1e:14:7d:19:c7:29:e6:ca:05:52:3c:a4:ae:15:50:93:63:68:
         81:ec:15:3c:ae:57:8f:5b:4e:15:aa:00:57:15:0d:d1:bf:c0:
         bb:fd:13:00:fb:2b:41:07:d1:f6:77:7d:56:3c:54:fc:3c:bc:
         64:d5:5d:62:e9:76:16:6a:ed:29:19:4f:d7:96:1c:e0:5e:d2:
         0d:28:c0:f7:b5:39:fb:d0:f1:a6:5d:3d:3a:b1:3a:4f:05:a1:
         00:f2:7f:fd:a0:96:b8:cf:38:de:f9:9d:b7:d2:bc:86:ae:95:
         47:35:44:0c:0b:65:30:3c:6d:c5:00:74:8b:ad:8b:7a:cb:47:
         72:c0:fc:63:27:9c:c2:32:f3:7f:99:8c:0a:e5:c3:3c:d1:4f:
         7c:ca:a1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:28 2024 by rpki-client on console.sobornost.net