Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/d59880-4dc4-4ae0-b93e-b3d345a1ff17/1/7sqZ_imLCQQsM6zLubsjVx4GJM4.roa
File:                     7sqZ_imLCQQsM6zLubsjVx4GJM4.roa (raw, json)
Hash identifier:          dFwEffAFonu57aEQsMpMICADF6v7m4HCyIIfQEQo3w8=
Subject key identifier:   EE:CA:99:FE:29:8B:09:04:2C:33:AC:CB:B9:BB:23:57:1E:06:24:CE
Certificate issuer:       /CN=9dd65e89ef38111ecc0bfbd60acf6271d3bc53e5
Certificate serial:       018317ED7DE3ECB164252BB3F064F466609B
Authority key identifier: 9D:D6:5E:89:EF:38:11:1E:CC:0B:FB:D6:0A:CF:62:71:D3:BC:53:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ndZeie84ER7MC_vWCs9icdO8U-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/d59880-4dc4-4ae0-b93e-b3d345a1ff17/1/7sqZ_imLCQQsM6zLubsjVx4GJM4.roa
Signing time:             Wed 07 Sep 2022 12:29:43 +0000
ROA not before:           Wed 07 Sep 2022 12:29:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210636
IP address blocks:        45.86.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:17:ed:7d:e3:ec:b1:64:25:2b:b3:f0:64:f4:66:60:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dd65e89ef38111ecc0bfbd60acf6271d3bc53e5
        Validity
            Not Before: Sep  7 12:29:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eeca99fe298b09042c33accbb9bb23571e0624ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:65:14:5f:b3:bf:d2:4b:8b:79:5f:7f:42:49:
                    6e:bc:85:ff:18:ab:5e:d9:12:39:71:cd:c9:f6:58:
                    a8:be:99:cb:3f:0a:1b:00:5e:c7:e3:56:62:45:ef:
                    db:c2:d9:14:2d:ba:04:00:b8:7d:74:aa:3d:bd:0f:
                    2c:97:65:a3:a6:67:b4:6e:4f:33:65:2e:34:83:21:
                    72:af:ad:65:35:04:e2:23:42:30:10:ad:17:da:78:
                    1d:d3:1c:0e:ee:fa:d4:b0:80:97:bf:b6:9b:eb:c7:
                    44:92:d5:09:75:f2:45:9d:88:2d:2c:9a:36:a0:7e:
                    dc:3b:32:f3:e5:f9:0a:da:52:aa:98:15:4c:6b:8a:
                    51:e4:ba:a7:a4:69:14:26:41:c9:1f:76:87:e4:7d:
                    95:ef:d6:1d:82:79:80:30:12:81:46:ed:2f:b4:8c:
                    59:d3:b7:b9:4e:35:75:14:22:4f:fc:37:62:42:a1:
                    64:d5:db:1a:2b:ad:cf:45:72:c1:da:39:ce:f3:45:
                    78:3c:e9:f2:ec:55:78:85:27:33:ac:02:bd:83:f9:
                    d7:76:39:71:37:2a:3c:2a:fc:42:75:80:3a:15:0b:
                    6b:d0:b0:17:78:6d:0e:f6:53:92:f6:b6:70:1a:ea:
                    f8:75:96:51:a7:b2:cf:ba:0c:9a:57:97:ad:d0:ba:
                    44:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CA:99:FE:29:8B:09:04:2C:33:AC:CB:B9:BB:23:57:1E:06:24:CE
            X509v3 Authority Key Identifier:
                keyid:9D:D6:5E:89:EF:38:11:1E:CC:0B:FB:D6:0A:CF:62:71:D3:BC:53:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndZeie84ER7MC_vWCs9icdO8U-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d59880-4dc4-4ae0-b93e-b3d345a1ff17/1/7sqZ_imLCQQsM6zLubsjVx4GJM4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d59880-4dc4-4ae0-b93e-b3d345a1ff17/1/ndZeie84ER7MC_vWCs9icdO8U-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.86.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:26:20:5d:b8:a9:03:2e:4b:b4:ea:58:e3:e9:19:3e:1f:cb:
         fc:c2:94:34:73:e2:e5:a9:fb:24:65:94:62:8c:b2:b7:57:df:
         be:74:d9:86:85:1a:71:f7:eb:c0:32:cc:9c:60:28:23:1d:cc:
         e3:b2:8b:cb:d0:5c:33:bc:97:80:51:b9:9e:ed:95:65:63:14:
         47:ce:ac:a2:87:ba:fc:c3:46:be:94:c6:c6:2a:1c:9e:5e:40:
         89:82:97:a9:fd:30:1e:ee:26:c8:d6:6c:3d:9f:9a:61:8f:30:
         0c:5c:89:a6:a6:3e:43:2c:a7:ea:9f:85:5a:6b:27:1a:bb:12:
         d1:5d:fa:a2:31:16:59:cc:2f:94:2a:ed:fe:c3:8c:fb:a5:b0:
         11:ac:84:3b:1f:8a:ec:f5:7c:e0:13:4b:d6:cc:80:41:c9:64:
         d0:b5:5d:49:4d:9c:08:7f:2d:8d:52:fe:da:a8:f6:07:e4:2e:
         f7:e1:5c:44:f2:b4:f6:ca:66:66:37:a6:72:71:20:b1:65:79:
         d0:66:6a:dc:fd:0f:98:4a:52:d1:cf:bc:b0:d5:f0:09:c4:90:
         d0:bf:73:86:03:e7:7d:ad:dd:80:01:ac:bd:e7:1c:1e:11:f2:
         8f:79:9a:94:45:e6:62:76:aa:52:88:2a:de:f0:31:1c:a5:6b:
         dd:9d:3f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:21 2023 by rpki-client on console.sobornost.net