Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/56be95-4047-46b5-b098-29e53b3136e6/1/SLFEmyvrnPfSKDRiQqZyermvwFo.roa
File:                     SLFEmyvrnPfSKDRiQqZyermvwFo.roa (raw, json)
Hash identifier:          YPSLaWrMNa7Uyx/nqU7T5NlJrJmErZsDUGhfwQfkS7s=
Subject key identifier:   48:B1:44:9B:2B:EB:9C:F7:D2:28:34:62:42:A6:72:7A:B9:AF:C0:5A
Certificate issuer:       /CN=8c7fd3dbdc3a9b9531e686b5b07645c328b1b51a
Certificate serial:       018CC64B61782C1134B3687D3EAB2E7102C0
Authority key identifier: 8C:7F:D3:DB:DC:3A:9B:95:31:E6:86:B5:B0:76:45:C3:28:B1:B5:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jH_T29w6m5Ux5oa1sHZFwyixtRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/56be95-4047-46b5-b098-29e53b3136e6/1/SLFEmyvrnPfSKDRiQqZyermvwFo.roa
Signing time:             Mon 01 Jan 2024 18:31:18 +0000
ROA not before:           Mon 01 Jan 2024 18:31:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        185.104.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4b:61:78:2c:11:34:b3:68:7d:3e:ab:2e:71:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7fd3dbdc3a9b9531e686b5b07645c328b1b51a
        Validity
            Not Before: Jan  1 18:31:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=48b1449b2beb9cf7d228346242a6727ab9afc05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c4:e4:44:50:1c:4f:e3:c4:72:e4:c0:88:f9:
                    01:fa:1a:ad:da:b5:d7:37:8e:d0:0f:54:bf:11:fb:
                    75:6f:85:38:9a:2d:b9:4f:63:83:c0:d6:94:fd:e6:
                    1d:04:7c:12:95:7c:48:86:55:f3:72:63:4a:73:b8:
                    0a:19:a6:53:53:5c:fe:29:b7:c0:11:0d:d0:b9:30:
                    ac:eb:4d:9e:8e:40:6d:7d:d6:66:95:bc:b9:6a:84:
                    eb:df:7a:ba:a7:e2:0f:e3:62:7e:7b:24:e7:e9:1c:
                    0e:af:3f:0e:a9:b2:d9:c2:f5:5e:38:fa:85:34:87:
                    20:3d:ec:61:1a:4b:19:46:46:b4:87:62:01:2d:a1:
                    97:fa:aa:31:78:24:a0:0d:0f:ba:de:be:30:dc:ba:
                    c4:93:50:98:b7:11:6e:10:1a:2e:d9:2a:48:da:f2:
                    f1:2a:74:85:a7:27:81:06:29:e1:83:0e:6f:45:5a:
                    07:df:f1:7a:b9:17:02:00:05:bd:b3:82:f6:17:8d:
                    7c:ec:1b:76:3a:8c:0d:9f:97:53:e4:27:d0:3d:b0:
                    12:49:eb:98:d4:29:4e:60:8f:58:d0:db:82:ae:75:
                    ad:99:2f:e0:4a:9a:38:57:00:6b:cd:ed:00:27:22:
                    c4:94:c4:d1:1f:37:bc:22:54:dd:fe:46:cc:6c:79:
                    29:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B1:44:9B:2B:EB:9C:F7:D2:28:34:62:42:A6:72:7A:B9:AF:C0:5A
            X509v3 Authority Key Identifier:
                keyid:8C:7F:D3:DB:DC:3A:9B:95:31:E6:86:B5:B0:76:45:C3:28:B1:B5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH_T29w6m5Ux5oa1sHZFwyixtRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56be95-4047-46b5-b098-29e53b3136e6/1/SLFEmyvrnPfSKDRiQqZyermvwFo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56be95-4047-46b5-b098-29e53b3136e6/1/jH_T29w6m5Ux5oa1sHZFwyixtRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.104.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:a6:4f:1e:f4:15:9f:b6:4d:2e:1f:ac:bc:e2:a0:d8:18:af:
         dd:f5:1d:24:62:75:76:c9:5e:6e:d4:ba:a2:65:36:e7:93:5e:
         05:af:e8:c4:c3:e5:07:af:2e:a3:6e:52:89:c9:81:0c:e6:00:
         6b:e5:0d:7c:64:c6:ab:39:69:36:f6:fd:3f:5d:6c:a4:4b:70:
         7c:4a:67:4a:59:dc:f4:b8:6d:d7:b2:4d:8b:ba:2d:81:04:8a:
         44:f6:06:bf:dd:ab:a8:44:e6:15:1e:c9:61:80:c1:e7:f5:57:
         11:c9:e8:11:d6:c5:5b:f4:8a:68:66:5b:00:8b:39:97:bf:e2:
         11:31:39:9e:ce:f8:83:96:75:89:73:d8:38:97:28:2d:0d:58:
         20:2c:42:11:8c:d6:42:e6:98:1e:e6:65:de:36:30:1f:93:70:
         13:0a:4c:8f:d4:08:a0:e0:b4:fe:c5:61:0d:1f:8c:56:33:07:
         e0:df:84:22:76:45:af:be:c2:81:9f:6d:2c:86:90:5d:e0:45:
         2d:6e:19:fe:45:4a:b0:4e:b6:b9:43:7d:85:8f:aa:0d:9b:80:
         be:7a:47:ce:3a:f5:25:b9:85:84:61:0a:3b:2a:55:2a:8d:77:
         00:9a:5e:35:6d:6f:5c:c5:b1:17:4e:84:9d:fa:53:cb:4d:8d:
         b9:69:2a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:22 2024 by rpki-client on console.sobornost.net