Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f6524d-6a16-4859-9862-558252a62e3c/1/0jUXb-EyvEcVq8IIRHO9SmuVRGI.roa
File:                     0jUXb-EyvEcVq8IIRHO9SmuVRGI.roa (raw, json)
Hash identifier:          bNNbaLTss4/b/5S6hf7a6iHS8KTj8k7Rtu8Zkl9Y4ys=
Subject key identifier:   D2:35:17:6F:E1:32:BC:47:15:AB:C2:08:44:73:BD:4A:6B:95:44:62
Certificate issuer:       /CN=c04c9d31a1f3592e787b3aa59698f9d4a703ae1f
Certificate serial:       12D5D920
Authority key identifier: C0:4C:9D:31:A1:F3:59:2E:78:7B:3A:A5:96:98:F9:D4:A7:03:AE:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wEydMaHzWS54ezqllpj51KcDrh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/f6524d-6a16-4859-9862-558252a62e3c/1/0jUXb-EyvEcVq8IIRHO9SmuVRGI.roa
Signing time:             Sat 01 Jan 2022 06:57:37 +0000
ROA not before:           Sat 01 Jan 2022 06:57:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208476
IP address blocks:        185.140.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316004640 (0x12d5d920)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04c9d31a1f3592e787b3aa59698f9d4a703ae1f
        Validity
            Not Before: Jan  1 06:57:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d235176fe132bc4715abc2084473bd4a6b954462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4b:0c:cb:2b:93:46:8f:18:d2:bc:db:d8:92:
                    2a:9e:f1:6a:7a:45:7b:d7:7f:2d:ea:a6:a0:ef:f7:
                    cd:80:21:30:7a:d1:9b:b3:0b:d8:93:fa:c1:82:08:
                    5a:b7:22:c4:b4:d7:6c:54:33:1d:3c:e2:e7:c4:3f:
                    37:43:bf:1c:b0:7c:d2:8e:34:8d:42:65:d0:fb:d0:
                    b8:d7:28:38:4b:1a:83:82:00:3b:06:21:52:2d:79:
                    13:5c:2a:19:dc:03:10:c0:cb:9d:be:d1:53:28:d2:
                    88:94:6f:a5:0f:1e:37:52:0b:63:46:70:af:9e:31:
                    68:74:55:38:29:22:db:f8:3a:c0:d3:c0:3e:49:c6:
                    2b:cc:73:da:a8:84:7d:f3:06:aa:6a:1a:83:4e:4e:
                    20:df:49:f0:84:1f:61:e3:9b:80:4e:3a:ee:bc:a7:
                    1f:b8:7b:1d:14:cc:c0:ce:75:c3:8b:c0:07:74:76:
                    e6:7c:4a:fa:46:4a:e6:30:80:8b:02:c9:51:72:49:
                    63:a5:93:75:22:8c:b0:b6:29:f6:10:6b:18:00:de:
                    42:81:d8:46:b8:ef:a9:d3:7a:f8:02:09:1f:75:bb:
                    1e:15:0d:ed:7b:c4:18:a4:f5:65:fb:40:f8:02:38:
                    cd:fc:90:68:35:f1:4e:49:e1:45:00:cf:fb:81:12:
                    34:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:35:17:6F:E1:32:BC:47:15:AB:C2:08:44:73:BD:4A:6B:95:44:62
            X509v3 Authority Key Identifier:
                keyid:C0:4C:9D:31:A1:F3:59:2E:78:7B:3A:A5:96:98:F9:D4:A7:03:AE:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wEydMaHzWS54ezqllpj51KcDrh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f6524d-6a16-4859-9862-558252a62e3c/1/0jUXb-EyvEcVq8IIRHO9SmuVRGI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f6524d-6a16-4859-9862-558252a62e3c/1/wEydMaHzWS54ezqllpj51KcDrh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.140.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:16:1e:ca:02:8d:2b:e5:9d:69:b3:2d:43:7b:86:e9:5e:12:
         b2:fa:f4:95:38:65:94:ae:49:df:e8:a8:9b:50:c4:72:c0:9b:
         c4:85:93:b0:dc:6d:4a:ec:28:52:08:21:73:30:63:53:cc:9e:
         01:e8:a7:83:9e:a6:62:90:8a:77:48:75:a1:77:17:5e:26:bd:
         ae:ff:26:84:cb:b4:2b:fc:17:09:b0:d6:23:9c:67:ba:60:1a:
         e8:7f:2c:df:65:e9:02:14:45:cf:3b:5f:ae:02:bd:39:ed:f4:
         85:b0:0f:c0:09:a3:31:4a:60:80:9c:b3:5e:05:c5:3b:ff:0a:
         f3:20:81:90:bb:de:59:72:a3:5c:e7:e7:ca:94:5e:a9:6f:09:
         7e:bf:74:df:12:9f:e4:79:dc:38:ea:54:48:0c:ae:43:14:82:
         55:9f:44:94:ab:c9:9b:f5:76:e9:3e:73:6b:be:90:1e:6c:7b:
         95:f8:c0:5a:89:29:d1:12:0a:51:30:1c:37:a5:38:2c:d4:f8:
         47:ed:df:98:d0:9e:a9:06:34:48:f3:09:25:c6:8c:fa:72:28:
         4d:27:e6:86:ed:df:bd:19:c7:c9:07:e3:80:46:92:14:5e:31:
         cc:78:e1:24:91:17:93:40:f8:41:d5:9d:42:44:68:3a:f6:23:
         81:c8:64:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:46 2023 by rpki-client on console.sobornost.net