Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/eqVs1jH7A7Le0MotJ1ITIKyOhPA.roa
File:                     eqVs1jH7A7Le0MotJ1ITIKyOhPA.roa (raw, json)
Hash identifier:          wq94VPTWpIUqWKYDVrNiLv3UUg5KGovOM84C07PTenA=
Subject key identifier:   7A:A5:6C:D6:31:FB:03:B2:DE:D0:CA:2D:27:52:13:20:AC:8E:84:F0
Certificate issuer:       /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial:       08BEFCAB
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/eqVs1jH7A7Le0MotJ1ITIKyOhPA.roa
Signing time:             Fri 20 May 2022 08:27:29 +0000
ROA not before:           Fri 20 May 2022 08:27:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     28964
IP address blocks:        178.254.164.0/24 maxlen: 24
                          178.254.166.0/24 maxlen: 24
                          178.254.160.0/22 maxlen: 22
                          178.254.167.0/24 maxlen: 24
                          178.254.178.0/24 maxlen: 24
                          178.254.174.0/24 maxlen: 24
                          178.254.173.0/24 maxlen: 24
                          178.254.185.0/24 maxlen: 24
                          178.254.182.0/24 maxlen: 24
                          109.111.255.0/24 maxlen: 24
                          89.23.94.0/23 maxlen: 23
                          109.111.242.0/24 maxlen: 24
                          109.111.241.0/24 maxlen: 24
                          109.111.249.0/24 maxlen: 24
                          109.111.251.0/24 maxlen: 24
                          109.111.247.0/24 maxlen: 24
                          89.23.64.0/24 maxlen: 24
                          89.23.66.0/23 maxlen: 23
                          185.157.45.0/24 maxlen: 24
                          185.157.46.0/24 maxlen: 24
                          185.157.47.0/24 maxlen: 24
                          89.23.72.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146734251 (0x8befcab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
        Validity
            Not Before: May 20 08:27:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7aa56cd631fb03b2ded0ca2d27521320ac8e84f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5c:aa:f3:c5:3b:3e:45:3d:a1:bf:ad:0c:99:
                    b1:2a:29:2e:d4:ee:0b:99:c8:0b:e8:e2:1f:6e:f9:
                    a7:46:a9:5e:3a:cc:64:54:a9:07:8c:0f:ee:ad:41:
                    e4:db:52:18:07:0a:9b:86:48:97:0d:bb:56:5c:83:
                    74:c0:4d:8e:d8:13:31:47:fb:c5:30:c1:37:7a:ff:
                    73:96:f8:2e:b4:53:56:ba:5e:98:73:f9:58:31:9b:
                    c8:2d:5d:0d:a3:14:9a:47:26:96:2f:11:33:5e:a0:
                    b7:58:26:54:99:d3:bb:7c:b5:bb:01:c4:a5:eb:81:
                    cc:84:1b:a5:97:0b:8a:6d:d0:31:64:03:83:15:f3:
                    7a:2a:f5:e7:21:ac:af:14:ac:f3:0b:22:68:9e:33:
                    f1:b7:41:05:da:b7:75:f6:e1:db:98:f3:88:a8:80:
                    ec:b1:ec:7c:66:fd:88:05:41:bf:fd:4f:7f:fd:24:
                    81:6d:44:c6:eb:37:d9:fe:9c:15:31:2c:e8:02:42:
                    34:79:76:b7:e2:ec:3d:9a:1f:ae:f0:bb:df:3b:6a:
                    35:f4:8c:93:4c:51:f6:05:5b:93:dd:1a:a1:53:be:
                    03:6e:85:21:e9:34:9b:17:5e:88:37:ee:5c:73:78:
                    3c:f8:0c:16:ec:c7:0f:2a:ac:58:09:de:6e:64:89:
                    cf:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A5:6C:D6:31:FB:03:B2:DE:D0:CA:2D:27:52:13:20:AC:8E:84:F0
            X509v3 Authority Key Identifier:
                keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/eqVs1jH7A7Le0MotJ1ITIKyOhPA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.23.64.0/24
                  89.23.66.0/23
                  89.23.72.0/23
                  89.23.94.0/23
                  109.111.241.0-109.111.242.255
                  109.111.247.0/24
                  109.111.249.0/24
                  109.111.251.0/24
                  109.111.255.0/24
                  178.254.160.0-178.254.164.255
                  178.254.166.0/23
                  178.254.173.0-178.254.174.255
                  178.254.178.0/24
                  178.254.182.0/24
                  178.254.185.0/24
                  185.157.45.0-185.157.47.255

    Signature Algorithm: sha256WithRSAEncryption
         15:5f:80:d2:e7:87:73:d0:b4:ce:24:01:18:a0:0f:a9:68:38:
         7e:fa:ed:e8:c2:33:ac:18:5e:06:21:1f:1d:ec:1a:c1:81:84:
         ac:95:c4:24:77:25:f5:db:84:3e:5e:ee:b0:b4:bf:d1:41:04:
         86:33:d1:c6:f0:8d:64:63:f4:02:6e:10:7c:97:82:fd:b0:2d:
         63:0f:5c:27:2e:02:fd:b8:f0:44:51:8c:16:2d:5e:0a:05:7e:
         46:c4:9a:02:ab:7c:0d:c6:3d:61:a8:59:2e:d6:b6:87:a9:6a:
         1f:7b:17:f7:7d:78:9b:0a:55:5b:bd:82:82:16:74:6b:8b:1c:
         ef:64:48:d6:1b:ec:ce:df:10:6b:f5:41:68:fc:2d:0f:a7:35:
         0b:09:fe:f3:b8:2e:64:b5:06:ab:7f:38:43:4e:17:6e:db:6f:
         4f:40:0e:72:d6:f0:5f:cc:0e:96:dd:06:be:d8:1e:08:12:66:
         ec:2a:0a:fa:59:cd:86:e0:73:36:21:4b:61:bb:12:c8:eb:53:
         bf:e2:87:9a:85:01:9f:7b:66:0a:3c:51:b6:47:9c:db:4b:49:
         c5:11:de:ab:a5:d1:b3:df:fe:a0:22:76:1e:23:32:64:98:42:
         96:09:4e:94:8d:74:09:00:d9:c5:3d:cf:f2:f0:c3:17:bb:8e:
         c2:4d:db:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net