Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/62acce-e639-46df-be35-42ed5030f13c/1/EfPBE5J6-j-fTpy9XLz-Q_TAZB8.roa
File:                     EfPBE5J6-j-fTpy9XLz-Q_TAZB8.roa (raw, json)
Hash identifier:          MoaOg5lQ9MYxTH6/VyUKDqhIHfjrx2RYJrtdQAUIWjc=
Subject key identifier:   11:F3:C1:13:92:7A:FA:3F:9F:4E:9C:BD:5C:BC:FE:43:F4:C0:64:1F
Certificate issuer:       /CN=57b81833f364bc6425b4255b7ee33de0072200b3
Certificate serial:       0185720C8D91EA1DEADD8CF593445CD93865
Authority key identifier: 57:B8:18:33:F3:64:BC:64:25:B4:25:5B:7E:E3:3D:E0:07:22:00:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7gYM_NkvGQltCVbfuM94AciALM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/62acce-e639-46df-be35-42ed5030f13c/1/EfPBE5J6-j-fTpy9XLz-Q_TAZB8.roa
Signing time:             Mon 02 Jan 2023 10:35:03 +0000
ROA not before:           Mon 02 Jan 2023 10:35:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2856
IP address blocks:        194.26.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:0c:8d:91:ea:1d:ea:dd:8c:f5:93:44:5c:d9:38:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b81833f364bc6425b4255b7ee33de0072200b3
        Validity
            Not Before: Jan  2 10:35:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11f3c113927afa3f9f4e9cbd5cbcfe43f4c0641f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d3:c7:c7:da:12:1b:35:62:56:e5:95:a9:42:
                    71:af:4c:11:92:72:dd:4a:25:a0:9c:d8:d9:d3:54:
                    38:6b:03:0a:f0:58:1a:24:10:f9:68:6a:c2:18:b9:
                    8b:49:2c:64:91:ef:a5:04:90:87:4e:e6:ec:a4:f7:
                    5d:fc:7e:1a:0a:7b:69:18:21:4c:87:2b:cd:e2:e9:
                    6a:67:1d:72:41:83:ee:32:58:1d:3e:01:eb:c1:70:
                    a0:2a:57:1f:06:ca:d0:32:7a:f8:3c:db:15:13:87:
                    9a:4f:1d:62:ac:e0:0a:b2:6c:99:9c:a5:f1:c8:5a:
                    da:72:e1:d2:d1:39:a2:63:85:a6:2d:e3:c0:d1:3d:
                    1a:d7:ed:f6:d5:79:b2:35:6c:5d:d9:c5:bc:3c:88:
                    bb:60:2b:1f:23:99:3e:6e:da:10:46:02:90:62:a1:
                    86:54:bf:8c:b6:fd:75:62:d5:96:04:55:1d:82:74:
                    be:0e:73:4b:79:10:27:e0:a5:59:56:7a:4e:ac:a6:
                    4a:47:08:e4:73:fc:e3:57:79:c5:89:4a:01:27:ba:
                    79:26:ec:3a:a4:3d:fd:96:5d:08:58:ab:04:2e:8b:
                    d2:3c:f1:41:22:8d:5a:0a:9e:41:66:45:4d:2e:de:
                    6b:e8:33:6d:94:ba:85:1c:8d:b1:d2:61:37:0d:ab:
                    26:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F3:C1:13:92:7A:FA:3F:9F:4E:9C:BD:5C:BC:FE:43:F4:C0:64:1F
            X509v3 Authority Key Identifier:
                keyid:57:B8:18:33:F3:64:BC:64:25:B4:25:5B:7E:E3:3D:E0:07:22:00:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7gYM_NkvGQltCVbfuM94AciALM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/62acce-e639-46df-be35-42ed5030f13c/1/EfPBE5J6-j-fTpy9XLz-Q_TAZB8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/62acce-e639-46df-be35-42ed5030f13c/1/V7gYM_NkvGQltCVbfuM94AciALM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:72:31:ce:27:a0:10:eb:e6:80:8c:b4:0d:4f:7c:14:8b:c4:
         bf:e6:3e:94:ea:61:54:7f:59:05:6e:0e:7e:3a:f9:f5:5b:16:
         65:3e:3e:af:41:72:83:0b:42:ff:10:a1:e3:96:b0:6c:3d:41:
         9d:3c:69:fa:36:8b:21:4b:61:b0:a8:a2:59:b4:2a:57:b4:ff:
         a0:85:bf:ef:cd:8d:8e:c2:43:83:07:78:6e:49:2a:1c:88:0e:
         8b:7d:07:40:c8:f0:45:56:d9:63:0d:57:47:d7:02:54:d7:dc:
         83:2f:18:52:a0:c3:0c:e4:8a:9d:e7:c8:41:6c:7f:51:f9:ad:
         ac:91:ec:15:46:8b:ee:25:3d:72:aa:84:6c:fc:7e:f2:0a:9d:
         fe:33:56:d7:96:64:fe:8c:90:16:c9:a9:bc:ee:18:77:1b:6c:
         94:c2:d5:6e:5c:a7:74:80:cc:6b:07:de:ac:05:5b:e8:75:ab:
         94:54:f8:84:5f:da:99:52:46:d0:10:d5:f0:06:19:ed:96:6a:
         b3:dd:ca:1e:dc:14:97:d4:da:2e:3b:b3:1f:21:a5:c9:da:37:
         47:30:42:51:04:55:93:0a:4e:a2:8d:4e:29:db:fc:31:f9:30:
         a7:06:ec:80:9c:72:5c:fa:2b:c1:92:fc:91:29:91:71:44:a6:
         f0:b3:b7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:51 2023 by rpki-client on console.sobornost.net