Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/jtICSG7I-5SLYc86hUooeuk6rCc.roa
File:                     jtICSG7I-5SLYc86hUooeuk6rCc.roa (raw, json)
Hash identifier:          vjuBKkcoWrQF7J/Hryrr367ZQoKqeTujV8Wa3l6N644=
Subject key identifier:   8E:D2:02:48:6E:C8:FB:94:8B:61:CF:3A:85:4A:28:7A:E9:3A:AC:27
Certificate issuer:       /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial:       01918375377D2846D153960FBFE3AD3F057B
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/jtICSG7I-5SLYc86hUooeuk6rCc.roa
Signing time:             Sat 24 Aug 2024 08:16:22 +0000
ROA not before:           Sat 24 Aug 2024 08:16:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     25446
IP address blocks:        93.183.104.0/24 maxlen: 24
                          93.183.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:83:75:37:7d:28:46:d1:53:96:0f:bf:e3:ad:3f:05:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
        Validity
            Not Before: Aug 24 08:16:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8ed202486ec8fb948b61cf3a854a287ae93aac27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b2:bb:8a:b8:ff:1a:3e:a2:c7:e3:37:b9:d9:
                    7d:36:ad:14:ce:62:b2:6a:c4:9f:d7:c8:bf:68:28:
                    8b:55:f6:5d:ed:de:50:36:38:c2:59:71:77:76:0f:
                    fe:0c:94:d6:b4:0a:ac:9e:33:a2:f6:05:96:85:69:
                    45:8f:85:74:69:da:9b:d3:67:18:b8:4d:12:25:7c:
                    ff:85:0a:53:0f:5a:f1:5c:3e:b3:bf:cf:11:9f:8f:
                    f6:13:c3:e3:38:6f:75:d0:03:9a:b2:23:6d:44:ea:
                    43:22:b7:9c:b3:04:41:6d:6e:5b:1a:22:b6:69:31:
                    ca:33:18:89:2e:af:68:77:75:1f:63:bb:a2:f9:e4:
                    bb:1d:72:b4:de:f8:c7:12:ce:0c:8e:f0:63:22:89:
                    e0:60:88:e7:bd:6b:09:b9:de:62:b6:b9:7a:b0:6d:
                    44:5c:d7:7f:1a:77:68:6b:1b:4a:6f:de:9c:08:20:
                    1b:b7:54:ec:7b:e3:fb:68:7c:97:07:12:c3:d8:a6:
                    4c:95:81:b8:0e:9f:22:45:1d:16:31:68:48:4a:82:
                    a2:6b:7f:c3:3b:5f:40:4b:02:01:1d:6b:4d:da:00:
                    6d:28:e8:36:1b:77:e3:cb:fd:c0:8c:fe:22:cc:5c:
                    b6:bc:cd:fc:51:af:cd:78:1b:ef:51:c9:03:d8:6c:
                    cf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D2:02:48:6E:C8:FB:94:8B:61:CF:3A:85:4A:28:7A:E9:3A:AC:27
            X509v3 Authority Key Identifier:
                keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/jtICSG7I-5SLYc86hUooeuk6rCc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.183.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:bf:4e:f6:26:00:0e:5e:63:47:77:3c:34:88:2a:28:7b:14:
         df:c5:58:fa:44:62:dd:31:71:2c:a1:fb:06:d9:44:1c:be:f3:
         8e:a2:ec:ed:e2:da:86:73:04:0c:df:4a:cf:46:08:60:bc:bb:
         95:f0:ad:ef:15:18:01:82:d6:85:9f:0b:cf:1a:03:a2:56:ff:
         00:ed:bd:e9:e9:4d:36:d6:96:3c:8e:df:b2:a3:d7:e7:86:12:
         f1:f2:aa:11:a5:7a:ed:17:4b:ef:da:4a:be:06:19:1e:39:02:
         ea:e6:ee:47:76:3a:74:aa:df:0e:04:01:cf:15:ed:37:53:02:
         9b:20:fd:d6:52:91:e4:c5:b2:26:5d:88:8c:12:4f:12:8f:27:
         f6:71:48:29:20:ab:9b:e1:04:ac:bc:85:e7:64:29:c3:4b:ff:
         14:4b:de:bd:c4:0f:05:2a:2b:03:98:3c:a0:25:d2:e3:68:45:
         2f:2c:b6:17:fa:12:fe:99:f8:54:93:95:60:10:cb:60:34:df:
         1c:3c:3e:15:25:b8:d0:2d:95:3c:99:bf:65:cd:4a:93:d0:51:
         09:5d:3e:94:ab:e6:6e:2b:98:c6:62:e5:1a:ac:50:a5:5a:b8:
         6c:62:36:ce:51:6e:17:f1:84:cd:4e:68:3b:b7:a9:7f:4b:2d:
         84:f8:0a:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGDdTd9KEbRU5YPv+OtPwV7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNjE1MzE1ZGM3NTBjMDNlNjBmYzM2YTc1MGM1ZTNmZjY2
ZWFjOTQwHhcNMjQwODI0MDgxNjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWQyMDI0ODZlYzhmYjk0OGI2MWNmM2E4NTRhMjg3YWU5M2FhYzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rK7irj/Gj6ix+M3udl9Nq0UzmKy
asSf18i/aCiLVfZd7d5QNjjCWXF3dg/+DJTWtAqsnjOi9gWWhWlFj4V0adqb02cY
uE0SJXz/hQpTD1rxXD6zv88Rn4/2E8PjOG910AOasiNtROpDIrecswRBbW5bGiK2
aTHKMxiJLq9od3UfY7ui+eS7HXK03vjHEs4MjvBjIongYIjnvWsJud5itrl6sG1E
XNd/GndoaxtKb96cCCAbt1Tse+P7aHyXBxLD2KZMlYG4Dp8iRR0WMWhISoKia3/D
O19ASwIBHWtN2gBtKOg2G3fjy/3AjP4izFy2vM38Ua/NeBvvUckD2GzPpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI7SAkhuyPuUi2HPOoVKKHrpOqwnMB8GA1UdIwQY
MBaAFIBhUxXcdQwD5g/DanUMXj/2bqyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kZTg0Y2UtZDcwNC00NzY2LWEzODgt
ZjhlNWIyZDg2ODBjLzEvanRJQ1NHN0ktNVNMWWM4NmhVb29ldWs2ckNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kZTg0Y2UtZDcwNC00NzY2LWEzODgtZjhlNWIyZDg2ODBj
LzEvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXbdoMA0G
CSqGSIb3DQEBCwUAA4IBAQCuv072JgAOXmNHdzw0iCooexTfxVj6RGLdMXEsofsG
2UQcvvOOouzt4tqGcwQM30rPRghgvLuV8K3vFRgBgtaFnwvPGgOiVv8A7b3p6U02
1pY8jt+yo9fnhhLx8qoRpXrtF0vv2kq+BhkeOQLq5u5Hdjp0qt8OBAHPFe03UwKb
IP3WUpHkxbImXYiMEk8Sjyf2cUgpIKub4QSsvIXnZCnDS/8US969xA8FKisDmDyg
JdLjaEUvLLYX+hL+mfhUk5VgEMtgNN8cPD4VJbjQLZU8mb9lzUqT0FEJXT6Uq+Zu
K5jGYuUarFClWrhsYjbOUW4X8YTNTmg7t6l/Sy2E+Ap3
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:22 2024 by rpki-client on console.sobornost.net