Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/MTMiXv_9IXJLwrYjZ3Sz8zdf7iE.roa
File:                     MTMiXv_9IXJLwrYjZ3Sz8zdf7iE.roa (raw, json)
Hash identifier:          zoDQIvAS2wo2w6Hc3yjAytG2ZbE9ToGlZcp1t7st/ro=
Subject key identifier:   31:33:22:5E:FF:FD:21:72:4B:C2:B6:23:67:74:B3:F3:37:5F:EE:21
Certificate issuer:       /CN=aa563f5200a4933024e7b47d778619458568adb0
Certificate serial:       016C7514
Authority key identifier: AA:56:3F:52:00:A4:93:30:24:E7:B4:7D:77:86:19:45:85:68:AD:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qlY_UgCkkzAk57R9d4YZRYVorbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/MTMiXv_9IXJLwrYjZ3Sz8zdf7iE.roa
Signing time:             Wed 13 Apr 2022 10:34:27 +0000
ROA not before:           Wed 13 Apr 2022 10:34:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        194.26.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23885076 (0x16c7514)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa563f5200a4933024e7b47d778619458568adb0
        Validity
            Not Before: Apr 13 10:34:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3133225efffd21724bc2b6236774b3f3375fee21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c0:20:02:65:14:db:33:4a:0b:a9:eb:ee:7b:
                    ba:dc:10:70:28:db:bb:92:e2:cf:83:d9:5e:e8:b9:
                    02:3c:cd:54:b8:58:1c:86:9e:34:66:a7:7c:d7:1a:
                    78:86:62:49:31:76:eb:c3:31:dd:d2:d5:77:1f:a1:
                    85:25:82:0b:a4:16:87:d0:bf:56:ab:37:45:1c:d9:
                    4b:dc:b0:45:bb:be:f7:9b:bb:c3:37:c0:41:53:00:
                    a2:dc:17:9f:5f:31:3c:1d:73:6f:d2:58:2c:52:0a:
                    eb:f7:96:50:5f:43:14:fe:b4:e5:c7:14:14:c6:a6:
                    e1:99:0b:18:88:e3:a4:41:d8:06:88:e5:9f:be:ca:
                    03:75:03:c3:63:3a:73:66:3a:39:57:6d:79:21:c8:
                    a4:34:8f:b3:17:61:ce:69:ba:d1:6a:36:ba:5d:32:
                    49:35:fd:65:84:aa:64:a3:6f:69:4a:1d:58:fd:cc:
                    c8:b8:a4:f5:c4:6a:fa:5d:89:ed:78:b9:2c:82:21:
                    d2:48:c5:3c:7b:fd:8a:1e:6b:d6:d0:68:c1:36:de:
                    6a:8c:7f:cd:3f:2a:9c:bd:9c:49:cc:93:e7:47:68:
                    75:8d:9f:f1:86:be:cb:92:04:fb:d3:f1:be:e5:ce:
                    30:fe:6a:39:37:2a:a5:09:02:e4:3b:e5:c6:f3:79:
                    9a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:33:22:5E:FF:FD:21:72:4B:C2:B6:23:67:74:B3:F3:37:5F:EE:21
            X509v3 Authority Key Identifier:
                keyid:AA:56:3F:52:00:A4:93:30:24:E7:B4:7D:77:86:19:45:85:68:AD:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlY_UgCkkzAk57R9d4YZRYVorbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/MTMiXv_9IXJLwrYjZ3Sz8zdf7iE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/qlY_UgCkkzAk57R9d4YZRYVorbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:15:69:1f:db:99:df:5f:31:03:a3:90:1f:1f:44:28:82:5d:
         97:3e:29:50:7d:75:24:ef:68:8a:55:a3:64:fc:e3:d9:50:69:
         ac:dd:ea:57:8f:d5:c0:44:e6:a9:ea:83:39:0e:c1:bc:a0:b0:
         c3:85:18:2a:22:79:eb:1e:03:e3:88:0d:32:90:cd:6f:93:a3:
         88:e2:b1:08:bc:52:99:9e:7f:f8:18:11:47:7d:14:da:a3:ac:
         16:84:2c:e7:25:be:77:73:3f:1d:ea:b1:01:1b:c6:4c:2b:de:
         a5:cd:58:f7:6c:21:38:f5:e0:a1:39:9a:12:73:2e:30:6d:24:
         b2:25:5d:f6:83:fa:39:75:7c:0d:e3:60:cc:c5:19:59:e4:42:
         9b:74:31:8c:2f:06:57:c0:3b:8c:d4:ec:09:9c:3d:0a:93:d2:
         71:f5:6e:28:c8:c5:e0:9c:2f:74:bf:18:af:62:44:c0:a2:24:
         e5:60:ae:46:99:f3:8c:34:0a:11:27:44:12:1f:86:f6:56:88:
         af:9b:c3:8b:21:d9:ed:61:f2:d6:5b:cc:a9:f1:d6:7f:14:56:
         3f:9f:f4:26:7e:71:fd:6b:fb:1d:0e:48:a9:65:3b:23:a5:cd:
         45:fd:16:4d:f6:90:4a:fb:1f:c9:af:8f:28:c2:5d:23:5e:88:
         ed:54:d5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:01 2023 by rpki-client on console.sobornost.net