Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/a93c2d-6d12-4cb2-9fc5-22deb3bf5991/1/Kkpmy0C4p_0BDNXiN3DBIsK0UN4.roa
File:                     Kkpmy0C4p_0BDNXiN3DBIsK0UN4.roa (raw, json)
Hash identifier:          SS3hUU/g1LqrjmYduzvjAKLpjxvn9wcIEoigKw7+Hds=
Subject key identifier:   2A:4A:66:CB:40:B8:A7:FD:01:0C:D5:E2:37:70:C1:22:C2:B4:50:DE
Certificate issuer:       /CN=6a4ca009bea3d1d89bea5ed9d333595323ee8bae
Certificate serial:       0181ECBF9EF7F7192421F5CFE2B8A3FA1D54
Authority key identifier: 6A:4C:A0:09:BE:A3:D1:D8:9B:EA:5E:D9:D3:33:59:53:23:EE:8B:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/akygCb6j0dib6l7Z0zNZUyPui64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/a93c2d-6d12-4cb2-9fc5-22deb3bf5991/1/Kkpmy0C4p_0BDNXiN3DBIsK0UN4.roa
Signing time:             Mon 11 Jul 2022 10:13:09 +0000
ROA not before:           Mon 11 Jul 2022 10:13:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59934
IP address blocks:        193.3.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:ec:bf:9e:f7:f7:19:24:21:f5:cf:e2:b8:a3:fa:1d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a4ca009bea3d1d89bea5ed9d333595323ee8bae
        Validity
            Not Before: Jul 11 10:13:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2a4a66cb40b8a7fd010cd5e23770c122c2b450de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fc:8f:1c:56:2e:4b:cf:91:d8:6c:2e:a3:b8:
                    19:01:f0:4f:3a:e6:0d:eb:36:3d:c0:d6:bd:fe:17:
                    dd:b1:4c:52:c5:6c:12:dd:57:69:20:d2:ad:15:d8:
                    aa:65:11:1d:9a:ae:70:6a:93:df:09:14:ef:e3:6a:
                    50:51:18:51:fe:ac:0d:b6:f5:ce:38:6b:75:d8:d6:
                    18:d5:d0:de:3a:9e:c8:5b:b7:33:c7:21:53:5c:73:
                    4e:f4:fd:07:42:e6:ff:90:f6:9f:dd:1b:3f:2f:d1:
                    3f:5d:ad:38:af:41:7e:54:b8:1e:a8:d6:44:14:eb:
                    b6:37:5a:77:48:bc:88:10:fb:83:0b:34:08:f2:d3:
                    3e:49:de:73:4e:05:ed:ac:8e:33:d5:6d:90:96:c0:
                    46:88:3d:6e:40:c3:49:e2:7a:cb:1b:76:79:cb:98:
                    f1:38:81:4e:aa:69:3d:45:72:49:52:3e:61:bf:b1:
                    61:7a:b6:69:6d:d0:e0:04:4e:93:f6:8c:aa:53:43:
                    0a:3b:33:82:21:78:eb:3f:e0:97:12:5e:f2:24:82:
                    d4:6d:db:66:eb:9c:94:e9:eb:a8:fd:13:b9:31:ac:
                    b0:b0:4d:45:00:32:e1:53:5e:ee:17:fd:b4:30:66:
                    e2:95:28:1f:1c:64:ce:68:7c:c7:70:a0:b8:3c:41:
                    0d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4A:66:CB:40:B8:A7:FD:01:0C:D5:E2:37:70:C1:22:C2:B4:50:DE
            X509v3 Authority Key Identifier:
                keyid:6A:4C:A0:09:BE:A3:D1:D8:9B:EA:5E:D9:D3:33:59:53:23:EE:8B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akygCb6j0dib6l7Z0zNZUyPui64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a93c2d-6d12-4cb2-9fc5-22deb3bf5991/1/Kkpmy0C4p_0BDNXiN3DBIsK0UN4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a93c2d-6d12-4cb2-9fc5-22deb3bf5991/1/akygCb6j0dib6l7Z0zNZUyPui64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:c6:b5:1c:3a:a8:6a:ee:0a:26:75:7b:cd:68:3e:28:ab:e1:
         ae:0a:f1:86:84:a6:0d:d1:5e:77:6d:2c:78:0b:67:b7:28:bb:
         af:9a:94:30:19:30:42:9b:c3:63:ef:b0:59:bc:77:64:3d:11:
         df:c1:d0:2c:78:ab:27:c5:d6:fa:cb:fb:7f:be:ef:6e:b8:10:
         80:ff:ff:1a:74:8e:a7:02:47:87:59:cc:65:cf:dc:9c:fe:28:
         81:64:77:b3:1b:7e:1e:88:49:00:a6:41:ea:f3:fc:41:1f:6c:
         28:cb:df:e7:6c:af:14:b6:0f:75:a5:21:3e:08:e9:4c:08:fa:
         7f:1f:ac:31:2b:25:e6:d3:de:39:87:6b:c0:f1:ce:47:92:e3:
         0a:59:9e:12:c0:a9:84:36:cb:27:b5:b5:b6:4f:a5:b8:78:98:
         81:2d:0e:3d:29:ae:cd:ec:a6:5a:ad:5c:fc:19:2e:f7:25:7e:
         1e:2a:4f:5f:2b:ac:c3:30:ce:c7:2e:65:11:21:16:31:46:3a:
         a6:0c:7b:28:0f:e0:59:94:d9:20:39:6f:b2:0d:d7:69:ff:9d:
         9d:b0:8b:60:cd:c0:cd:d5:ce:2c:2b:06:29:61:d6:55:b0:77:
         27:82:10:80:ad:3b:8b:e4:49:d7:c3:4e:5c:9b:4d:3e:d5:cd:
         d5:01:71:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:00 2023 by rpki-client on console.sobornost.net