Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/aXQvFbAehNB6x_aBVJyguvgp8d4.roa
File:                     aXQvFbAehNB6x_aBVJyguvgp8d4.roa (raw, json)
Hash identifier:          y3PN/ymSNaWrR77UeLocJFcY7ymdi8KhGuv8VUM/6VQ=
Subject key identifier:   69:74:2F:15:B0:1E:84:D0:7A:C7:F6:81:54:9C:A0:BA:F8:29:F1:DE
Certificate issuer:       /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial:       077EDFD3
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/aXQvFbAehNB6x_aBVJyguvgp8d4.roa
Signing time:             Sat 01 Jan 2022 00:59:04 +0000
ROA not before:           Sat 01 Jan 2022 00:59:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57207
IP address blocks:        95.140.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125755347 (0x77edfd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
        Validity
            Not Before: Jan  1 00:59:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=69742f15b01e84d07ac7f681549ca0baf829f1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e4:ad:6b:0b:78:40:38:41:2b:b1:4d:4a:49:
                    10:a0:9f:46:cc:70:39:c6:50:ae:dd:2e:b0:4a:7e:
                    09:66:83:da:3e:66:90:95:a0:2b:81:39:dc:be:5d:
                    c0:c5:99:e8:3a:f0:e8:88:2e:2c:62:a3:9e:0b:3b:
                    1d:06:8c:e6:d8:2b:ad:36:6f:c2:b5:41:da:85:d2:
                    de:8d:83:05:24:08:c6:22:d9:0f:50:ad:63:d4:8e:
                    df:16:c5:73:00:42:b1:31:33:65:09:3c:fa:ad:8b:
                    98:8c:08:fa:68:ce:d2:41:03:ec:39:75:2c:5a:b4:
                    21:9f:74:95:28:88:e6:1f:bd:02:ec:c8:b7:0b:50:
                    fc:66:79:2c:a7:33:67:89:43:1c:44:d6:11:a7:e4:
                    a5:ac:9e:f4:d5:b6:26:ac:18:1a:b4:fa:d3:45:71:
                    7e:73:a6:79:4d:86:62:7a:04:5f:cf:05:fb:c1:f9:
                    e9:46:5b:62:e2:6b:49:77:c4:3e:78:ed:aa:00:7c:
                    3b:3e:11:58:16:ff:dc:16:f8:a1:f0:10:af:46:d6:
                    23:6e:11:c0:c8:3e:a4:db:ec:95:41:3e:2e:1a:c3:
                    90:81:8f:1c:bd:ba:c2:46:31:65:93:b4:53:f4:be:
                    86:d5:fa:41:c9:df:0b:00:20:39:d9:36:99:ce:6b:
                    f1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:74:2F:15:B0:1E:84:D0:7A:C7:F6:81:54:9C:A0:BA:F8:29:F1:DE
            X509v3 Authority Key Identifier:
                keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/aXQvFbAehNB6x_aBVJyguvgp8d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.140.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:06:70:80:78:c9:d7:08:2f:07:eb:a7:19:e4:6f:dc:f5:3d:
         bf:cd:02:2e:36:6e:8a:b8:b6:6e:3d:04:18:dc:20:2d:ca:cc:
         90:9f:04:a0:83:73:bd:25:9e:98:24:c5:e4:f1:78:99:a1:4f:
         22:a7:af:bf:aa:c0:95:e3:f7:7f:63:4b:30:24:0d:7e:b2:c3:
         8c:66:a7:3d:11:c2:66:69:87:7c:47:20:2c:bf:22:82:e1:5c:
         52:76:b7:be:10:ac:94:5f:e2:3a:72:0c:c1:8d:69:2c:20:8b:
         54:ee:ce:7e:f5:bf:c4:54:4f:16:61:cd:ad:66:d1:5c:b7:62:
         b2:76:89:0b:54:dd:5b:fb:4b:9f:f2:cf:58:2a:56:68:6b:ac:
         bb:54:4b:fe:6e:68:dd:a9:36:2d:eb:c6:67:1e:45:3d:db:17:
         64:cd:69:fb:cf:9e:8b:dd:12:0d:7f:b5:3e:f7:d8:b5:5f:40:
         dc:ef:af:b6:e3:8b:13:2f:7f:7f:76:3f:df:02:24:13:ff:02:
         5e:56:e9:f9:a2:2c:45:40:e4:1d:04:ad:0a:59:62:98:8b:ac:
         69:45:de:9b:7a:7a:1d:91:af:c5:4a:be:f4:fd:27:e5:2e:08:
         d0:bc:2e:7c:f9:aa:80:aa:43:58:29:eb:00:fc:3f:dc:2d:56:
         7a:8c:ad:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net