Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/Abgr-nppTiet25J-aWV2E-hhtek.roa
File:                     Abgr-nppTiet25J-aWV2E-hhtek.roa (raw, json)
Hash identifier:          JhcbzwJX9mDLfYW1/lRQwrzIRWYPDrKVZ1V84WLIPTI=
Subject key identifier:   01:B8:2B:FA:7A:69:4E:27:AD:DB:92:7E:69:65:76:13:E8:61:B5:E9
Certificate issuer:       /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial:       01856D11D9F443531EC4CFA9B19BAFDC1DB0
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/Abgr-nppTiet25J-aWV2E-hhtek.roa
Signing time:             Sun 01 Jan 2023 11:22:44 +0000
ROA not before:           Sun 01 Jan 2023 11:22:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200923
IP address blocks:        95.140.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:11:d9:f4:43:53:1e:c4:cf:a9:b1:9b:af:dc:1d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
        Validity
            Not Before: Jan  1 11:22:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=01b82bfa7a694e27addb927e69657613e861b5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fd:c4:71:7e:0d:dc:c2:c3:05:db:ad:78:70:
                    76:92:3e:4f:ab:be:dd:10:e8:2b:b7:ae:93:53:19:
                    50:d4:36:74:c9:fc:66:e2:5c:c5:f4:e8:66:44:fa:
                    68:2f:66:5f:60:c4:42:a8:a3:65:ab:a2:b0:fa:cf:
                    44:86:8f:b8:a1:47:ce:45:08:ee:9e:3c:bb:ab:55:
                    81:0f:d7:b6:45:4b:7e:2c:fe:3e:55:7b:ab:b6:88:
                    87:ee:75:6a:dd:0a:90:94:c2:20:fb:9f:e4:f0:9e:
                    88:c6:47:68:df:5f:76:9e:dc:93:27:2d:4c:63:d1:
                    38:90:88:4a:38:a7:f8:7c:08:a0:25:d4:8d:a1:6a:
                    d8:b5:1f:05:dc:f3:f4:76:63:c4:ce:d4:65:28:1a:
                    cc:43:b0:63:08:04:69:e9:a6:05:fc:88:ab:e3:f3:
                    a9:4e:05:02:b1:30:15:a6:dc:af:ca:6a:d6:ee:9a:
                    88:61:ee:e1:6f:3e:1d:81:86:d0:b4:e9:e7:1d:81:
                    97:b0:01:fa:a0:65:fc:d5:64:f3:51:60:c1:37:b6:
                    61:f8:aa:3b:40:21:c6:32:17:bb:91:40:10:a9:6f:
                    5b:39:b8:18:e5:16:5a:ab:11:29:be:46:85:af:52:
                    4c:af:1b:2c:af:85:90:19:7c:7b:3b:e0:3c:e1:fb:
                    f8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B8:2B:FA:7A:69:4E:27:AD:DB:92:7E:69:65:76:13:E8:61:B5:E9
            X509v3 Authority Key Identifier:
                keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/Abgr-nppTiet25J-aWV2E-hhtek.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.140.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:e9:dc:c3:6d:d2:d8:13:86:d1:d8:df:22:ec:1e:59:1f:0a:
         e2:01:66:fb:39:f4:30:d5:6e:16:77:9d:54:10:53:7e:70:bc:
         9a:e9:02:9d:29:c0:5b:7c:15:06:0b:a7:4e:1c:7b:67:11:80:
         e9:6e:76:50:72:f4:9a:fe:d1:3e:45:92:81:9b:c5:10:9e:20:
         73:2e:25:4f:26:31:50:2f:ce:09:ab:7a:3f:54:71:5e:b2:b8:
         55:97:26:da:40:c6:2e:c1:48:5a:a8:ab:3b:b3:45:ef:82:bc:
         60:f8:07:d1:0c:a3:dc:e3:d8:03:80:ed:0c:ea:ca:1c:0e:33:
         77:c4:e2:e6:2d:62:c9:8d:d4:14:ff:28:62:0e:fd:31:c9:e7:
         f5:93:be:fe:16:29:8b:cf:34:bb:2a:85:b2:0c:39:fe:19:e6:
         36:13:41:29:3a:35:0c:44:14:02:02:b4:c9:8c:8e:e2:16:c0:
         27:b8:2a:61:05:b9:5a:53:1a:23:1c:73:85:ab:ec:54:ca:19:
         a5:e5:57:90:f0:5a:0f:ef:27:67:1e:b1:85:f0:de:60:7e:db:
         9d:5b:a1:9b:46:95:18:59:cd:84:f0:55:fa:21:51:4c:1e:df:
         f6:d0:14:f8:10:1c:00:21:72:4c:a2:73:24:32:89:90:ca:23:
         64:a1:05:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net