Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/L7BjynfbruVKJyMO_iDoVYt3Of0.roa
File:                     L7BjynfbruVKJyMO_iDoVYt3Of0.roa (raw, json)
Hash identifier:          JixTeq5z2GOQkGQwJMMmHf5GsTCgdcuSHHGHiBvMXAM=
Subject key identifier:   2F:B0:63:CA:77:DB:AE:E5:4A:27:23:0E:FE:20:E8:55:8B:77:39:FD
Certificate issuer:       /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial:       07802598
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/L7BjynfbruVKJyMO_iDoVYt3Of0.roa
Signing time:             Sat 01 Jan 2022 00:59:04 +0000
ROA not before:           Sat 01 Jan 2022 00:59:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     198961
IP address blocks:        178.254.171.0/24 maxlen: 24
                          178.254.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125838744 (0x7802598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
        Validity
            Not Before: Jan  1 00:59:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2fb063ca77dbaee54a27230efe20e8558b7739fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cf:4d:a1:56:aa:2e:48:4e:15:71:be:9a:68:
                    33:58:d3:5a:4e:f4:65:48:18:57:de:c1:3c:31:44:
                    50:4a:03:34:7b:f0:e9:ed:9a:ec:21:a3:bf:0e:9d:
                    a6:4c:da:1d:32:34:5d:e5:98:02:ec:53:ea:0a:c9:
                    fb:da:23:6c:08:ef:0f:ba:47:83:7b:cc:d9:5a:2a:
                    63:d2:1d:51:79:0e:c2:3c:1f:22:e6:66:2c:f0:b4:
                    49:c4:e2:7a:27:97:ec:92:1e:6d:0c:e7:00:ca:5c:
                    b4:42:80:57:c7:7d:f3:ec:d3:c4:d3:4f:44:18:75:
                    00:aa:89:76:79:7c:29:3c:65:6c:40:9c:a7:e5:ea:
                    e1:5e:52:3d:75:65:62:4f:30:82:6f:5e:0d:4a:70:
                    10:9d:6c:b3:03:b6:dc:9e:43:c7:ad:f4:49:c9:67:
                    9c:bf:d5:41:10:97:c9:4f:95:8d:64:a4:9f:1b:f3:
                    c0:ab:c5:92:84:3b:0a:34:d1:9a:c8:9f:1b:13:78:
                    d6:f1:9e:d5:7e:90:e5:e7:b0:20:45:05:f3:21:76:
                    ce:8e:b9:42:f8:79:89:5a:3f:2e:b3:7a:fd:64:c0:
                    40:0d:37:8a:d9:2f:f1:7e:06:ca:9a:33:52:af:32:
                    85:ae:df:f6:36:5c:c9:4c:ad:62:33:25:92:35:87:
                    59:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B0:63:CA:77:DB:AE:E5:4A:27:23:0E:FE:20:E8:55:8B:77:39:FD
            X509v3 Authority Key Identifier:
                keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/L7BjynfbruVKJyMO_iDoVYt3Of0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.254.171.0/24
                  178.254.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:ca:03:1d:fe:2a:63:5a:10:46:0d:e7:c2:bf:6e:78:42:a0:
         ec:b8:10:13:54:a7:4d:94:86:4a:b9:86:d0:a8:62:09:9a:83:
         68:9a:16:19:f3:4f:12:9f:fe:40:c1:03:eb:34:b9:c7:49:2d:
         58:8c:66:56:d7:ad:78:7a:14:cf:76:e0:6d:15:14:4f:71:7e:
         ea:bc:e7:12:09:52:52:39:86:d0:5b:f5:10:3e:63:87:1e:76:
         3f:11:bd:d9:93:03:61:a3:a2:4a:50:29:8f:33:81:7c:07:b8:
         e8:92:a4:1d:6d:67:5b:23:d0:2f:ff:80:d3:ac:f3:93:2a:4b:
         af:7b:25:75:b2:9f:68:6c:2c:09:65:c8:b2:f1:5b:37:e9:86:
         a5:99:45:37:52:d4:da:7a:20:bb:d4:58:93:d8:3d:20:57:8e:
         6a:e8:c3:78:fc:e8:16:4b:b5:73:e5:44:18:44:6d:76:8a:b4:
         29:0a:5f:54:99:a5:87:4b:45:95:ee:15:c5:8b:97:e8:94:29:
         ac:89:65:2b:7c:a0:1c:c8:8f:fe:ac:8e:a8:31:95:44:e5:83:
         d8:36:fd:68:d3:4d:34:0b:6d:54:f2:2c:4e:33:22:5f:7d:bd:
         53:b4:83:30:08:de:ff:01:c2:47:52:0a:01:a9:bb:98:7f:dc:
         ed:9b:99:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net