Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b527cd-4721-4c94-bf08-7ff69c838eb6/1/RDmY1TzjkUN3R8b8CVHwlS0YiH4.roa
File:                     RDmY1TzjkUN3R8b8CVHwlS0YiH4.roa (raw, json)
Hash identifier:          ou7T9/zs+2uGHwJhGW1i2ZYdb//qepF4YvWb4f4pdwQ=
Subject key identifier:   44:39:98:D5:3C:E3:91:43:77:47:C6:FC:09:51:F0:95:2D:18:88:7E
Certificate issuer:       /CN=9a73ba8f7d987bd186dbd647eaee9620030974d7
Certificate serial:       0606CCEC
Authority key identifier: 9A:73:BA:8F:7D:98:7B:D1:86:DB:D6:47:EA:EE:96:20:03:09:74:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnO6j32Ye9GG29ZH6u6WIAMJdNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/b527cd-4721-4c94-bf08-7ff69c838eb6/1/RDmY1TzjkUN3R8b8CVHwlS0YiH4.roa
Signing time:             Wed 01 Jun 2022 09:31:20 +0000
ROA not before:           Wed 01 Jun 2022 09:31:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200845
IP address blocks:        185.138.93.0/24 maxlen: 24
                          185.138.95.0/24 maxlen: 24
                          185.138.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101108972 (0x606ccec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a73ba8f7d987bd186dbd647eaee9620030974d7
        Validity
            Not Before: Jun  1 09:31:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=443998d53ce391437747c6fc0951f0952d18887e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ab:dd:0e:c9:44:68:a4:08:d3:17:6b:d1:b6:
                    5a:ca:a8:64:61:b9:d5:b6:6f:de:bb:a0:d8:e6:c5:
                    ee:35:65:c8:3c:70:0f:19:cf:4b:65:2a:68:e8:14:
                    a9:75:94:af:06:8e:b1:d6:5f:26:67:ca:10:26:ca:
                    54:d7:53:05:58:77:22:62:4d:63:90:5c:97:c7:0b:
                    3b:26:5e:cf:f7:36:45:e2:e7:20:0a:f4:0b:40:c2:
                    46:bf:08:c2:95:a0:a7:65:20:bf:ca:e4:c3:bb:39:
                    3c:1a:66:4e:a7:9b:38:ed:2c:77:ba:12:31:72:92:
                    39:6b:a4:12:3d:42:c4:95:ce:0b:36:da:f9:44:34:
                    21:2f:85:59:65:42:a4:4d:aa:1e:f2:14:8e:80:c9:
                    fe:71:f2:73:74:03:54:85:40:cc:19:49:0c:51:4f:
                    9a:6b:49:65:cd:7f:78:e9:87:98:1a:97:ab:1e:15:
                    6e:24:3d:4a:da:20:78:a7:e7:99:c9:a0:6f:84:d3:
                    93:03:06:c0:0b:09:5a:f1:de:e5:80:47:41:85:14:
                    c9:22:2d:7f:ef:86:ff:6c:c9:a7:01:a5:a8:9f:e6:
                    d8:b3:4a:43:77:b2:89:15:ad:27:64:7e:b8:a8:2c:
                    e6:b8:80:12:1e:ca:10:c5:da:04:a4:a6:57:86:e5:
                    34:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:39:98:D5:3C:E3:91:43:77:47:C6:FC:09:51:F0:95:2D:18:88:7E
            X509v3 Authority Key Identifier:
                keyid:9A:73:BA:8F:7D:98:7B:D1:86:DB:D6:47:EA:EE:96:20:03:09:74:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnO6j32Ye9GG29ZH6u6WIAMJdNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b527cd-4721-4c94-bf08-7ff69c838eb6/1/RDmY1TzjkUN3R8b8CVHwlS0YiH4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b527cd-4721-4c94-bf08-7ff69c838eb6/1/mnO6j32Ye9GG29ZH6u6WIAMJdNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.138.93.0-185.138.95.255

    Signature Algorithm: sha256WithRSAEncryption
         5b:65:8b:59:d5:09:c9:dc:66:ec:a4:0d:1c:15:12:0c:f1:78:
         92:13:06:53:62:e7:05:f3:b6:a2:7a:f5:41:00:02:e8:88:74:
         68:90:60:83:26:d7:c9:fa:8c:30:00:7e:b9:17:1c:fb:e0:67:
         fe:3d:ef:56:ef:da:32:7f:8e:10:95:27:f2:96:93:72:a1:da:
         31:4a:99:43:2d:c3:ed:28:43:6a:45:02:69:58:e7:2b:2e:6b:
         b7:d0:26:85:43:0f:20:e6:06:19:aa:67:36:2b:37:87:5d:0c:
         4d:ab:12:8b:2a:9d:9e:10:49:83:12:e4:65:79:08:8d:d8:fb:
         bf:fb:6a:de:41:04:3c:64:68:48:ff:4e:59:7e:7e:3b:9d:fb:
         26:03:01:6e:0a:1e:d1:1b:ac:d6:57:fc:70:01:8e:52:b4:de:
         b1:35:ca:45:45:b4:1c:7f:b7:2f:09:10:ad:76:c5:d4:89:3b:
         89:15:a3:bd:a2:8c:39:f0:26:85:bd:b9:26:26:8f:e2:8b:58:
         67:ba:d0:00:64:20:a2:ab:11:da:f5:0d:6a:68:7e:00:5b:e0:
         be:50:e6:b0:4d:01:ab:bf:1c:d0:3e:f5:71:6f:9f:7a:bb:92:
         ac:27:89:40:ae:06:ed:d6:40:ca:25:f7:63:ec:c3:b1:bd:37:
         e2:bd:d5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:27 2023 by rpki-client on console.sobornost.net