Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/ne13MXtOswZEdkzjvhyJp6bXaaM.roa
File:                     ne13MXtOswZEdkzjvhyJp6bXaaM.roa (raw, json)
Hash identifier:          /Tow0NHYZbbwXBw+/xEfmEWY8ymH8H/oOzJDxrQLQoo=
Subject key identifier:   9D:ED:77:31:7B:4E:B3:06:44:76:4C:E3:BE:1C:89:A7:A6:D7:69:A3
Certificate issuer:       /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial:       01935FC647E8DA2D4B64F51C855A8EE3147C
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/ne13MXtOswZEdkzjvhyJp6bXaaM.roa
Signing time:             Sun 24 Nov 2024 20:04:10 +0000
ROA not before:           Sun 24 Nov 2024 20:04:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     199654
IP address blocks:        80.246.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5f:c6:47:e8:da:2d:4b:64:f5:1c:85:5a:8e:e3:14:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
        Validity
            Not Before: Nov 24 20:04:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9ded77317b4eb30644764ce3be1c89a7a6d769a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:42:a8:da:1e:1a:60:c3:f8:f6:53:af:bd:8f:
                    7a:40:8c:69:03:8f:92:8a:07:0b:ee:c3:47:6f:8f:
                    70:c2:1a:6e:99:80:c2:de:ac:04:a8:ee:6f:34:8b:
                    06:8f:84:64:1a:3b:d6:6a:dc:37:42:13:f6:d8:25:
                    41:96:60:24:34:27:56:d3:63:0e:18:d9:82:6e:db:
                    5b:d9:41:b0:ee:48:92:c7:46:69:12:05:6c:d0:72:
                    bb:ad:19:e5:f3:68:40:01:9d:d9:5f:55:ba:ca:f0:
                    23:eb:01:dc:c1:4a:25:b5:1b:e1:f5:3c:dd:ba:46:
                    b3:a2:c9:7d:63:f2:af:d3:d5:6c:34:33:03:a6:12:
                    bc:36:09:a8:9a:5a:d6:d1:52:7f:01:44:c6:c0:cb:
                    27:b0:0e:c1:1b:7a:16:76:e5:83:14:f4:1a:86:9e:
                    cf:e4:45:0e:a3:04:f9:e9:ab:da:00:5d:d8:7c:f7:
                    da:03:e7:86:0e:5a:2d:32:1c:6a:bb:10:8d:c7:1f:
                    96:ee:bd:4b:e3:1f:e7:a2:1d:84:22:87:6a:27:60:
                    9f:b0:da:7e:af:5e:be:ff:e3:60:ba:ae:f1:12:12:
                    60:60:29:f7:4f:7c:3b:e8:70:9a:a2:a2:f8:b1:97:
                    c5:8f:df:56:52:36:c2:c2:7b:65:e5:ed:49:02:32:
                    9e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:ED:77:31:7B:4E:B3:06:44:76:4C:E3:BE:1C:89:A7:A6:D7:69:A3
            X509v3 Authority Key Identifier:
                keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/ne13MXtOswZEdkzjvhyJp6bXaaM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.246.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:55:aa:55:15:f2:80:45:71:69:73:2b:85:07:ea:64:2c:0c:
         32:bf:20:23:70:60:e2:8b:bc:57:ae:75:29:2a:1c:e4:b4:51:
         ff:41:4f:8f:f6:71:0b:2a:9b:71:ad:03:5f:10:9a:de:af:68:
         52:1f:ed:83:ec:d0:97:41:bb:f2:54:5e:94:4e:69:4c:c0:5e:
         ba:d0:90:18:01:02:c8:41:d0:09:86:bd:11:94:45:27:38:16:
         f9:21:ae:55:a9:3c:0f:ac:9c:0a:90:70:c6:c8:87:e4:96:40:
         6b:a2:2a:9d:73:9c:c7:cf:c6:a7:35:23:f7:da:22:6c:ca:19:
         37:49:1d:bf:97:82:50:12:a1:07:d9:a5:4f:04:38:59:06:88:
         7c:91:54:32:54:f3:b7:eb:32:81:b6:af:eb:c9:0f:07:fe:b9:
         58:f3:e8:33:dd:88:1e:d3:53:38:2d:36:39:cf:d7:a8:2b:50:
         ce:94:7e:95:42:24:e5:e3:bb:7e:f7:1d:00:84:39:e6:76:91:
         3f:fa:23:a6:46:5f:81:9a:2b:d4:7f:00:85:de:6e:e8:c8:68:
         f7:0d:cb:2a:04:57:57:62:08:a2:55:57:b4:46:63:98:db:95:
         f5:aa:6a:ac:22:75:b5:b9:23:7e:37:e3:8a:34:c7:cc:cc:fa:
         5d:e8:a4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:25 2024 by rpki-client on console.sobornost.net