Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/ePgITXxcGLkEtpgDsjE-ZhP-vqY.roa
File:                     ePgITXxcGLkEtpgDsjE-ZhP-vqY.roa (raw, json)
Hash identifier:          OAmnHcvSwDr3em3ijnelGpFvjlALw9JWoNkIhSUWKbw=
Subject key identifier:   78:F8:08:4D:7C:5C:18:B9:04:B6:98:03:B2:31:3E:66:13:FE:BE:A6
Certificate issuer:       /CN=83306a3a8d8bcba39f92ef1ac49a559b0bce8a58
Certificate serial:       019898CE
Authority key identifier: 83:30:6A:3A:8D:8B:CB:A3:9F:92:EF:1A:C4:9A:55:9B:0B:CE:8A:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzBqOo2Ly6Ofku8axJpVmwvOilg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/ePgITXxcGLkEtpgDsjE-ZhP-vqY.roa
Signing time:             Sat 05 Feb 2022 20:21:36 +0000
ROA not before:           Sat 05 Feb 2022 20:21:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        31.41.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26777806 (0x19898ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83306a3a8d8bcba39f92ef1ac49a559b0bce8a58
        Validity
            Not Before: Feb  5 20:21:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=78f8084d7c5c18b904b69803b2313e6613febea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:18:aa:ae:09:45:34:19:a5:2f:77:44:f4:d7:
                    66:d9:c4:a2:aa:ce:ff:d2:6a:15:76:b8:d7:6c:f3:
                    f5:b0:e8:5a:bf:eb:f1:16:bc:02:4a:31:28:25:4f:
                    74:f0:69:d1:09:f8:0f:91:0e:90:39:60:1f:ac:66:
                    43:2f:b7:80:57:79:82:49:4b:73:36:7c:3f:3c:cf:
                    e1:55:f8:4c:59:02:e1:4e:5d:8b:f5:21:74:c6:a2:
                    ba:78:a6:9e:b3:30:89:8d:88:85:06:de:f3:49:8d:
                    3c:15:cd:36:5b:a8:3b:0d:42:7a:2c:8d:2e:24:fd:
                    ab:40:8e:29:bb:c8:de:46:96:c8:83:ba:3c:2f:67:
                    8e:44:6a:06:dd:11:c5:8b:a5:1b:0d:e7:17:6b:0c:
                    68:a4:58:8b:56:9e:52:70:be:40:dd:a2:ba:06:68:
                    10:06:57:03:87:26:49:73:77:05:ea:ff:e1:15:17:
                    d0:db:53:2b:19:d5:c8:a5:7a:35:a1:8b:45:3e:f1:
                    95:67:7c:9b:5f:c7:89:d6:03:22:19:d0:75:a1:39:
                    aa:ae:47:f1:ae:46:d6:5e:2b:70:f9:75:52:e4:12:
                    21:a4:16:23:37:40:31:29:77:fe:b4:83:83:d6:19:
                    f3:35:d9:7c:36:19:be:76:23:64:aa:61:a3:23:2f:
                    35:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F8:08:4D:7C:5C:18:B9:04:B6:98:03:B2:31:3E:66:13:FE:BE:A6
            X509v3 Authority Key Identifier:
                keyid:83:30:6A:3A:8D:8B:CB:A3:9F:92:EF:1A:C4:9A:55:9B:0B:CE:8A:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzBqOo2Ly6Ofku8axJpVmwvOilg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/ePgITXxcGLkEtpgDsjE-ZhP-vqY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3c64ad-fe08-43d8-aba7-0c5573cab8c0/1/gzBqOo2Ly6Ofku8axJpVmwvOilg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.41.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:31:9a:55:2c:b8:23:99:1b:bf:bc:0e:77:20:21:97:e5:e8:
         b8:74:3d:42:8a:d1:de:60:46:df:2f:7d:5e:a3:1d:0b:c1:94:
         79:fc:8c:22:97:c8:d6:a1:e2:2b:ba:ff:a9:70:c0:8f:a0:20:
         0a:58:08:51:7d:43:ea:fd:b5:53:8a:e9:b0:de:a3:ed:02:3b:
         88:89:d0:dd:69:18:86:ef:d9:5d:c5:06:ff:98:f1:cd:06:d3:
         d1:82:69:27:7f:be:d8:eb:6e:b2:20:9a:57:b3:08:c9:76:75:
         2e:5a:96:1e:16:2c:3d:6b:9d:4c:76:3d:8c:55:73:fc:99:31:
         4f:a6:e0:ac:0c:32:27:e1:ef:a4:47:16:30:a7:13:89:ed:fa:
         11:ec:b3:53:c0:1e:3f:3b:b7:1d:19:1a:78:a0:89:4e:e4:82:
         cc:be:fa:5e:9b:d8:a6:5e:68:13:52:f2:66:a0:36:40:b7:b2:
         58:75:bc:b5:b7:48:49:31:6a:2a:6a:a5:0c:ec:8f:4b:77:9a:
         26:e4:e8:65:92:39:05:03:d7:3a:7c:e8:f2:cb:0a:75:5a:87:
         d6:85:59:12:43:e9:4d:28:c0:5f:67:b7:1f:57:b0:bf:74:42:
         2b:3d:25:a2:72:ce:46:7b:03:82:cc:0c:67:ee:26:1e:89:30:
         6d:55:74:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:29 2023 by rpki-client on console.sobornost.net