Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/wbrv0klD60YY77Ncc9hgPKd8pr4.roa
File:                     wbrv0klD60YY77Ncc9hgPKd8pr4.roa (raw, json)
Hash identifier:          RWyLjERbhA1iQXWnP8y0s9b8o4LpnFs/e8gUbRUrhMM=
Subject key identifier:   C1:BA:EF:D2:49:43:EB:46:18:EF:B3:5C:73:D8:60:3C:A7:7C:A6:BE
Certificate issuer:       /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial:       01856D11D79134AEAAD3BFFCA89C51EB43F1
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/wbrv0klD60YY77Ncc9hgPKd8pr4.roa
Signing time:             Sun 01 Jan 2023 11:22:43 +0000
ROA not before:           Sun 01 Jan 2023 11:22:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57207
IP address blocks:        95.140.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:11:d7:91:34:ae:aa:d3:bf:fc:a8:9c:51:eb:43:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
        Validity
            Not Before: Jan  1 11:22:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c1baefd24943eb4618efb35c73d8603ca77ca6be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f7:99:ee:17:df:42:d6:71:5e:60:6f:58:69:
                    8c:25:61:bc:62:7a:aa:0e:42:3c:4d:eb:4d:a4:ec:
                    30:b0:3c:22:2f:27:d0:98:de:e7:b1:f2:97:24:7b:
                    a8:19:fa:fc:f6:65:7c:f4:47:d0:10:c8:f8:29:0a:
                    e2:ec:d8:21:91:7d:9e:5a:01:93:22:22:eb:14:01:
                    db:ea:ae:e5:21:d5:d3:3f:5f:30:64:c7:ad:6d:4e:
                    c4:04:11:94:2c:82:cd:c1:67:f9:26:cd:91:1f:89:
                    70:fb:2c:15:6d:26:e3:49:b1:24:9d:4e:9f:88:6d:
                    53:e5:5c:ea:e5:cc:7a:00:85:d5:b3:e8:6c:93:1f:
                    c3:46:9b:4b:d3:c0:ba:bf:d1:ef:9b:2c:8b:11:5e:
                    07:c4:20:cf:f9:03:5f:14:f4:5f:2e:68:f4:a0:98:
                    f4:9a:f0:20:88:ed:c8:f9:8b:bc:de:f4:3e:27:8d:
                    18:69:0c:fa:2b:c0:bb:e8:b8:84:e4:6f:d2:a3:6e:
                    df:2c:24:38:9a:aa:1d:e1:59:56:9e:8f:b5:33:b3:
                    4f:b8:64:e1:78:c2:69:f1:00:8a:c0:ae:8b:6e:ce:
                    5b:e2:24:ed:55:a7:d6:0b:ef:c4:92:11:ea:6f:fb:
                    46:10:57:b7:2c:38:11:d9:9e:55:73:ff:cb:0c:17:
                    2b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BA:EF:D2:49:43:EB:46:18:EF:B3:5C:73:D8:60:3C:A7:7C:A6:BE
            X509v3 Authority Key Identifier:
                keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/wbrv0klD60YY77Ncc9hgPKd8pr4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.140.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:26:77:e9:4d:08:8f:f3:9d:3e:c4:0e:e3:48:e9:b6:96:98:
         3a:a4:e1:e7:18:23:ee:fd:85:d8:eb:ba:5e:a2:cd:ae:3e:45:
         b8:6a:b6:05:36:2d:c7:e3:af:6d:ad:55:e4:ce:48:a0:08:e0:
         13:c8:39:a9:83:03:b7:bd:7a:08:d5:8c:d8:b1:91:e1:3a:b8:
         61:80:c4:d2:87:13:f9:2f:cf:60:a3:b8:79:19:36:0f:47:b4:
         c4:10:04:ed:15:cf:21:f4:93:e5:97:c7:6c:25:15:b1:4c:a6:
         3b:35:6c:b6:3a:89:72:bf:2e:23:44:7b:8c:d7:97:ae:b8:be:
         b5:59:1f:82:bf:23:1d:0c:d5:bc:1f:0e:ff:89:b4:b3:a9:df:
         ad:82:7e:95:a2:fa:97:8f:cc:d7:9c:21:5a:5f:48:13:72:a8:
         c8:a7:3e:2e:b0:6c:72:90:8a:b4:6a:f7:fb:82:af:2f:ad:63:
         cb:9d:58:3e:37:84:a1:b7:14:23:bf:1c:8b:b7:9f:5e:2f:97:
         e2:59:ef:5f:08:37:19:9c:56:cd:75:eb:89:77:6c:3f:5d:9f:
         f7:6f:92:e4:5d:83:e4:5a:8b:01:d1:15:aa:dc:01:2e:7e:86:
         39:2e:98:cb:f8:25:54:2b:64:86:d0:d5:3b:b5:4d:cf:15:2a:
         c3:02:04:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net