Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1-UZRwyKjrtClVS5AWEBiU13deYM.roa
File:                     1-UZRwyKjrtClVS5AWEBiU13deYM.roa (raw, json)
Hash identifier:          U0iDH4xPjkGSVMmhLKmoJHC48L3m+v+Vt6zQO/R7+rM=
Subject key identifier:   F9:46:51:C3:22:A3:AE:D0:A5:55:2E:40:58:40:62:53:5D:DD:79:83
Certificate issuer:       /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial:       019368AEDD3AFA109D81CA06967B0C6122A1
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1-UZRwyKjrtClVS5AWEBiU13deYM.roa
Signing time:             Tue 26 Nov 2024 13:35:10 +0000
ROA not before:           Tue 26 Nov 2024 13:35:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     10515
IP address blocks:        81.19.195.30/32 maxlen: 32
                          81.19.195.31/32 maxlen: 32
                          185.100.0.53/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:ae:dd:3a:fa:10:9d:81:ca:06:96:7b:0c:61:22:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
        Validity
            Not Before: Nov 26 13:35:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f94651c322a3aed0a5552e40584062535ddd7983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e8:28:f3:7f:a1:10:c5:51:ed:c5:ca:16:b0:
                    6e:47:29:1f:67:51:71:6b:b0:7f:20:44:6c:d2:40:
                    9f:9a:94:58:c3:17:05:87:b5:3a:60:74:09:18:70:
                    c2:b1:36:a7:3c:f9:5c:46:d4:0d:33:34:cb:b2:a2:
                    94:cc:0e:63:e7:dd:95:52:d1:e3:76:6e:ae:0e:ce:
                    f8:f9:5a:a1:fa:fc:79:10:42:d3:4d:46:d8:8f:ca:
                    19:b1:82:9d:6a:c3:f3:8c:fe:31:88:50:62:46:87:
                    07:2f:e4:ac:9a:1f:ce:e6:0a:f8:7f:51:9a:b2:9e:
                    12:8d:92:fb:f3:81:f1:99:71:69:2c:9e:e0:31:81:
                    e0:da:b0:30:18:8f:7a:7b:fb:93:02:31:32:9f:58:
                    69:e9:57:c3:e0:b2:97:e5:6c:08:b0:75:c2:78:1f:
                    a0:10:95:a1:65:91:34:05:a7:c9:44:e5:2c:07:7d:
                    9e:bd:95:76:a9:f3:ee:be:10:19:c1:4c:30:8a:f2:
                    b5:c1:a3:5b:04:22:50:68:fa:a3:2b:7a:b9:49:d3:
                    19:0b:a0:ce:fd:86:e6:09:8d:6a:ab:fb:95:d4:a4:
                    8d:74:b0:59:96:a7:68:41:de:fe:e3:d1:70:0e:22:
                    d4:1c:96:d9:22:97:7e:00:d2:3d:31:53:03:0c:6e:
                    9a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:46:51:C3:22:A3:AE:D0:A5:55:2E:40:58:40:62:53:5D:DD:79:83
            X509v3 Authority Key Identifier:
                keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1-UZRwyKjrtClVS5AWEBiU13deYM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.19.195.30/31
                  185.100.0.53/32

    Signature Algorithm: sha256WithRSAEncryption
         97:00:31:59:45:18:96:4a:6e:75:73:8d:70:db:f0:2d:5e:8c:
         3b:46:e9:d8:e4:a5:d3:b6:c1:cc:c4:7c:c9:b2:38:72:01:54:
         0b:d8:28:db:95:d0:66:82:53:6f:ac:25:6e:e6:1f:c9:33:93:
         f1:8e:69:a1:6a:d9:0f:78:3c:00:a4:7e:1c:0f:53:02:9c:7a:
         38:9c:65:4c:86:9e:cc:e8:78:b0:ce:76:e7:58:e1:66:d6:7d:
         90:8c:11:0b:2b:32:fc:68:ae:14:3a:c1:67:93:52:b5:0d:e4:
         ad:14:6e:f4:20:44:47:b3:ca:db:b7:bf:d4:4f:04:e1:e3:6e:
         c7:ef:2c:c0:6b:cb:f5:ed:91:32:e5:e7:a9:00:ef:95:45:7b:
         9a:2e:7b:68:ca:d1:15:44:27:bb:dd:a1:f2:91:f7:16:12:44:
         37:96:31:55:ad:47:ef:2b:d8:6f:87:bd:ad:93:81:1c:c4:be:
         4e:8b:63:56:af:fe:8f:45:c7:9a:5d:c6:7e:21:85:2c:f3:32:
         05:d9:8c:6a:4d:a6:5b:56:45:e7:e0:d6:85:39:30:eb:12:9e:
         dc:e0:11:15:01:44:38:17:0a:bc:30:09:18:5f:0b:42:e6:bc:
         64:67:18:15:87:df:5a:5e:9d:51:ad:1b:0e:0d:23:b5:65:bf:
         6c:aa:fe:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:35 2024 by rpki-client on console.sobornost.net