Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/adddb0-12ff-4ab7-ae61-e2ff4654b933/1/nR9Tf5dh2VPyMOMhrS8B45ySYE8.roa
File:                     nR9Tf5dh2VPyMOMhrS8B45ySYE8.roa (raw, json)
Hash identifier:          AEGjgdL219jJ6Csj573wQpxC45SQdIYUjLDGovdmXIs=
Subject key identifier:   9D:1F:53:7F:97:61:D9:53:F2:30:E3:21:AD:2F:01:E3:9C:92:60:4F
Certificate issuer:       /CN=464266360095674d95b70730b313264232c02ba0
Certificate serial:       01856BC1152884C79EB2D3BA4998112A1FD6
Authority key identifier: 46:42:66:36:00:95:67:4D:95:B7:07:30:B3:13:26:42:32:C0:2B:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RkJmNgCVZ02VtwcwsxMmQjLAK6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/adddb0-12ff-4ab7-ae61-e2ff4654b933/1/nR9Tf5dh2VPyMOMhrS8B45ySYE8.roa
Signing time:             Sun 01 Jan 2023 05:14:53 +0000
ROA not before:           Sun 01 Jan 2023 05:14:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34665
IP address blocks:        93.157.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:c1:15:28:84:c7:9e:b2:d3:ba:49:98:11:2a:1f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464266360095674d95b70730b313264232c02ba0
        Validity
            Not Before: Jan  1 05:14:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9d1f537f9761d953f230e321ad2f01e39c92604f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bf:50:96:ea:e0:51:dd:42:e5:9b:c1:0e:33:
                    7a:63:60:94:1e:b8:0d:c2:48:4c:00:c0:6a:e3:62:
                    56:77:2d:10:5b:b6:29:54:96:79:4d:a7:10:cd:ed:
                    ce:fa:66:4e:0e:05:54:c2:23:b4:16:62:e5:d0:dc:
                    e9:09:12:a9:90:34:98:96:51:c1:a8:31:0e:b0:b7:
                    9b:05:bf:7c:86:0a:13:3e:5e:64:cb:ca:d4:3c:9e:
                    b2:a0:8b:da:c8:a0:44:e3:21:3e:e0:02:47:9f:8e:
                    6e:6f:54:9c:08:9d:94:dd:4a:76:01:4a:33:33:99:
                    f7:bc:49:c8:ed:8d:90:7b:9e:96:d1:c0:1c:93:b1:
                    78:74:a3:9f:d8:57:43:22:6b:42:0b:db:ed:61:f1:
                    b4:51:a4:2c:3f:30:90:3c:9f:bf:70:90:1c:b3:83:
                    90:95:78:b1:56:ed:61:0b:20:40:af:cb:6c:79:8d:
                    df:5e:58:e0:12:db:e5:22:27:a6:f2:51:0b:b1:6e:
                    5b:38:38:90:0c:d5:61:f4:5c:85:4a:0e:57:f0:84:
                    2f:d5:1f:35:72:5d:4b:d3:f0:9e:f6:2b:78:e3:0b:
                    44:af:4a:53:5a:b8:35:0b:7a:1f:7d:0f:e6:0e:28:
                    d7:b7:f4:d2:9d:4a:f9:21:e4:f2:d4:fb:4e:a6:ae:
                    d5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1F:53:7F:97:61:D9:53:F2:30:E3:21:AD:2F:01:E3:9C:92:60:4F
            X509v3 Authority Key Identifier:
                keyid:46:42:66:36:00:95:67:4D:95:B7:07:30:B3:13:26:42:32:C0:2B:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkJmNgCVZ02VtwcwsxMmQjLAK6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/adddb0-12ff-4ab7-ae61-e2ff4654b933/1/nR9Tf5dh2VPyMOMhrS8B45ySYE8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/adddb0-12ff-4ab7-ae61-e2ff4654b933/1/RkJmNgCVZ02VtwcwsxMmQjLAK6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.157.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e1:18:37:8a:22:13:9e:5c:90:0d:05:6d:45:a9:33:3f:0a:23:
         1e:ea:0d:a9:a7:e5:c1:ab:07:55:82:c7:5e:c1:35:5f:fc:dd:
         3b:a7:9f:95:fd:c7:8f:66:e7:e2:a5:d8:e8:1e:62:96:c9:2f:
         aa:65:60:8a:a9:8b:ef:81:a2:d4:a7:e6:8f:ea:f9:3b:87:e1:
         03:40:92:e2:5b:13:54:4f:d9:63:06:3a:bb:fd:e6:f1:0d:ba:
         8a:f4:d1:59:ab:f4:cd:52:e8:e8:a3:fc:aa:39:b5:47:71:49:
         c5:21:fa:55:f8:3a:73:5c:94:ae:de:91:80:19:4c:17:d2:4c:
         ad:bf:21:8a:e2:e6:1d:d9:6d:2a:9c:77:12:78:fd:45:46:12:
         3d:a4:1c:d9:8c:74:c5:8e:a0:2b:79:d1:9e:1f:06:32:e8:92:
         7a:3c:be:d5:41:21:ef:3f:ad:74:ab:8c:f9:f8:5d:56:85:ff:
         86:57:d1:74:c1:38:f3:35:30:58:bf:07:8a:4c:7e:05:c3:eb:
         90:38:10:ab:6b:a4:6f:41:47:44:00:f4:38:13:fe:92:be:3b:
         c6:35:93:c0:04:8d:7a:00:df:a2:b6:f2:3c:c4:c1:21:bb:5e:
         9a:2f:04:70:11:a4:0c:11:8e:dc:a5:b6:e6:67:7f:23:7f:fe:
         8d:70:3a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:43 2023 by rpki-client on console.sobornost.net