Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/372143-5dba-4dc3-a04b-9fa1e69103b0/1/WESeQrB_oXEtjS4MeNFIO7T71-Y.roa
File:                     WESeQrB_oXEtjS4MeNFIO7T71-Y.roa (raw, json)
Hash identifier:          djr7ErTkWxkA5b/YzrIx/adgHQuu0MMypv2T6aAGPLw=
Subject key identifier:   58:44:9E:42:B0:7F:A1:71:2D:8D:2E:0C:78:D1:48:3B:B4:FB:D7:E6
Certificate issuer:       /CN=2f2ac25de2d9ba70c463fa95ef3aa5a412c87498
Certificate serial:       0185403F8016CE2318E9A0ADC45BCCBB5F9F
Authority key identifier: 2F:2A:C2:5D:E2:D9:BA:70:C4:63:FA:95:EF:3A:A5:A4:12:C8:74:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LyrCXeLZunDEY_qV7zqlpBLIdJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/372143-5dba-4dc3-a04b-9fa1e69103b0/1/WESeQrB_oXEtjS4MeNFIO7T71-Y.roa
Signing time:             Fri 23 Dec 2022 18:29:41 +0000
ROA not before:           Fri 23 Dec 2022 18:29:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14576
IP address blocks:        94.154.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:40:3f:80:16:ce:23:18:e9:a0:ad:c4:5b:cc:bb:5f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2ac25de2d9ba70c463fa95ef3aa5a412c87498
        Validity
            Not Before: Dec 23 18:29:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=58449e42b07fa1712d8d2e0c78d1483bb4fbd7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cd:f4:b7:8d:ba:7a:3f:92:3e:82:c1:fe:ad:
                    8b:e4:2e:4c:e9:58:af:4a:c0:dc:77:b4:f4:92:ff:
                    e2:0f:4a:7f:9e:94:15:3b:8a:0f:2f:fb:de:3d:56:
                    d3:df:aa:5a:dd:0e:b4:b3:74:7b:88:66:b3:fb:e6:
                    96:6d:23:cf:9a:b5:90:9a:39:90:7f:7a:97:79:47:
                    c2:f3:42:46:cb:0b:75:e6:71:3c:5e:66:bd:6d:44:
                    c1:f6:1f:fb:92:c4:8d:f1:0e:61:11:8a:cb:80:e6:
                    c4:b0:55:73:48:49:10:80:83:10:49:1c:00:43:d9:
                    b1:f6:85:6f:3b:0c:e3:cd:48:f7:51:b6:98:c1:59:
                    7d:4a:5f:ed:51:dc:58:f9:cf:f1:f8:4d:b9:46:f1:
                    ad:17:df:f0:55:b6:cf:80:85:a9:f1:05:5f:b7:87:
                    83:3a:14:1a:7b:5b:15:de:28:0e:65:88:85:0a:2d:
                    8c:40:29:f6:c3:da:a2:e7:d9:e7:9a:8f:32:4a:80:
                    48:cc:80:78:72:9f:ec:2f:8a:05:3d:ea:8e:7d:7f:
                    5a:d4:4a:ee:74:42:ab:14:b4:e3:52:54:39:92:f5:
                    6a:9c:26:f2:64:10:22:ec:a9:df:eb:fc:a5:23:86:
                    86:f6:9b:99:e0:2d:a1:92:ba:d4:79:f5:24:1f:fd:
                    01:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:44:9E:42:B0:7F:A1:71:2D:8D:2E:0C:78:D1:48:3B:B4:FB:D7:E6
            X509v3 Authority Key Identifier:
                keyid:2F:2A:C2:5D:E2:D9:BA:70:C4:63:FA:95:EF:3A:A5:A4:12:C8:74:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyrCXeLZunDEY_qV7zqlpBLIdJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/372143-5dba-4dc3-a04b-9fa1e69103b0/1/WESeQrB_oXEtjS4MeNFIO7T71-Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/372143-5dba-4dc3-a04b-9fa1e69103b0/1/LyrCXeLZunDEY_qV7zqlpBLIdJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.154.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:cd:c4:03:51:a9:ad:34:2c:e0:95:ab:72:86:83:39:07:09:
         64:f3:f7:09:8b:b8:61:d0:d2:56:ef:8a:1f:f6:3e:cf:49:a4:
         14:bd:f4:4c:9b:e5:73:71:e4:d5:e1:5d:48:cf:08:66:f1:51:
         9f:80:f9:98:8f:d5:03:cd:24:db:ec:56:98:e0:f3:93:a9:4a:
         29:f2:60:f8:50:bb:6a:20:64:f3:a8:21:01:d1:e1:5f:ec:28:
         c3:f8:4b:2a:5a:21:53:07:2f:b4:3b:be:df:25:0b:35:40:53:
         29:7b:56:2c:be:31:88:d4:9d:d9:c8:47:cd:cc:1f:c1:04:91:
         22:90:a5:57:a2:f7:c8:ff:f5:46:fb:9c:5d:dd:d1:b9:a6:1f:
         14:6d:e1:e2:a1:93:0e:7c:1c:87:06:6e:b3:0c:d0:e3:72:60:
         f3:dc:f4:62:4c:96:0d:88:95:1e:72:81:60:f1:7f:de:fb:06:
         61:c5:05:0e:f5:31:2a:3c:63:32:dc:1e:36:7c:3e:df:f9:77:
         4f:5b:f0:02:b8:e2:b7:7e:fb:a8:2c:45:8c:52:c2:fb:09:6f:
         e4:6f:80:25:43:a3:00:21:0e:d6:70:81:47:ee:6c:ec:c8:36:
         6e:a0:96:e4:a4:9f:1c:68:a5:6f:f0:83:2d:9d:e9:de:5b:c4:
         40:fe:1c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:16 2023 by rpki-client on console.sobornost.net