Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Ssj0RFAgr-gSPPNw20DfNS0SUXU.roa
File:                     Ssj0RFAgr-gSPPNw20DfNS0SUXU.roa (raw, json)
Hash identifier:          8eQjDl6fGi5BFJEsxm6Yer961wIUcjtAD2R32Iajcas=
Subject key identifier:   4A:C8:F4:44:50:20:AF:E8:12:3C:F3:70:DB:40:DF:35:2D:12:51:75
Certificate issuer:       /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial:       0193AD07B1B3DE5DF2AD93D79390B009E22E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Ssj0RFAgr-gSPPNw20DfNS0SUXU.roa
Signing time:             Mon 09 Dec 2024 20:06:22 +0000
ROA not before:           Mon 09 Dec 2024 20:06:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     207388
IP address blocks:        94.229.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:ad:07:b1:b3:de:5d:f2:ad:93:d7:93:90:b0:09:e2:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
        Validity
            Not Before: Dec  9 20:06:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4ac8f4445020afe8123cf370db40df352d125175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2d:c5:27:68:59:26:3e:e3:0a:04:0b:2a:2d:
                    92:a0:ce:2e:44:ac:39:68:ff:04:67:78:6f:a7:08:
                    27:36:89:5f:73:93:df:c1:3d:54:61:17:29:74:57:
                    c4:79:a2:4d:b2:57:e1:a5:6e:ef:b3:be:51:84:80:
                    98:9d:b7:80:88:a7:90:6c:98:64:d5:e2:bb:30:86:
                    fe:33:e4:f3:bf:eb:f9:65:ec:03:86:a3:9f:6f:e7:
                    58:e0:a5:d2:43:b0:6e:91:53:e4:db:86:b2:83:81:
                    3b:79:01:4f:49:43:6e:be:0e:72:6b:3c:0d:c8:84:
                    90:1e:37:4a:8d:81:8a:15:00:cf:65:81:f8:68:e6:
                    69:4b:3d:63:42:b5:21:be:83:39:35:8d:ee:c3:20:
                    41:f3:11:22:f7:a3:9d:d1:17:19:d1:a6:cc:5a:00:
                    ce:84:70:fb:39:ed:f5:81:09:e3:5f:0f:10:2d:f4:
                    51:0d:57:d7:29:d6:3d:50:48:d5:88:8e:45:05:69:
                    cb:39:a8:05:7e:98:bf:42:f3:f5:a9:7b:90:16:2a:
                    ec:7c:0d:61:22:19:ad:e1:02:89:f6:98:dc:f9:4c:
                    5a:b3:4d:af:4b:35:07:5d:a2:1a:8d:70:fd:3d:af:
                    dc:e4:98:82:28:b2:74:bf:3c:75:9e:ec:1d:3f:b4:
                    4b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C8:F4:44:50:20:AF:E8:12:3C:F3:70:DB:40:DF:35:2D:12:51:75
            X509v3 Authority Key Identifier:
                keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Ssj0RFAgr-gSPPNw20DfNS0SUXU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.229.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:d8:25:77:08:e1:47:00:96:a1:08:4b:b5:01:1d:c6:dd:17:
         99:35:a1:e8:22:3e:76:4b:92:f5:7e:cc:bd:f2:62:ff:e5:af:
         ed:1d:ba:f4:3d:59:e3:87:8f:27:d7:d7:35:94:85:2c:56:f2:
         65:7d:a5:a4:da:db:5c:82:2a:39:36:f3:74:8f:a9:ac:3d:75:
         f0:c7:71:86:1a:78:b9:41:f1:05:78:c8:e0:49:c8:b4:14:2d:
         eb:bb:f8:41:65:59:4b:7c:f4:bc:6e:1c:37:fa:d7:0a:f8:ca:
         50:dc:c8:e2:5e:56:09:b5:83:0f:fd:9f:3b:8b:15:4a:75:14:
         e3:f4:59:42:37:21:0b:25:81:1c:70:2c:1d:7f:97:38:a6:61:
         ab:8e:a8:a3:e7:cf:4c:14:0a:16:f2:eb:cc:97:a0:a6:41:7c:
         f8:58:63:c7:9c:af:f8:99:f0:ab:f9:88:fc:84:46:a0:29:b7:
         81:28:02:30:9d:90:d3:ae:59:45:7f:55:3c:84:37:d8:be:dc:
         ed:ee:5d:12:ac:0c:df:a2:25:53:0e:d6:2f:11:62:95:31:a4:
         2e:de:bf:0b:00:6b:93:50:16:d5:fe:1b:74:76:b9:96:37:a4:
         43:7c:ce:db:20:3c:eb:2a:5b:9d:18:16:51:05:07:f6:6b:3a:
         0e:81:b7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:21 2024 by rpki-client on console.sobornost.net