Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4b2c80-2d76-4b0b-826e-48d4bf8efbc5/1/UKrApgLPHC1YzvIYgQ5SlArLc2A.roa
File:                     UKrApgLPHC1YzvIYgQ5SlArLc2A.roa (raw, json)
Hash identifier:          0vtV/hGBW571pTJ/o1KoMdgatCehL1Go1wjHisyMYJQ=
Subject key identifier:   50:AA:C0:A6:02:CF:1C:2D:58:CE:F2:18:81:0E:52:94:0A:CB:73:60
Certificate issuer:       /CN=218f7b73b8de5828370d089dea6868e28c3e0f4d
Certificate serial:       D1E7D4
Authority key identifier: 21:8F:7B:73:B8:DE:58:28:37:0D:08:9D:EA:68:68:E2:8C:3E:0F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IY97c7jeWCg3DQid6mho4ow-D00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/4b2c80-2d76-4b0b-826e-48d4bf8efbc5/1/UKrApgLPHC1YzvIYgQ5SlArLc2A.roa
Signing time:             Sat 01 Jan 2022 12:05:25 +0000
ROA not before:           Sat 01 Jan 2022 12:05:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        194.26.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13756372 (0xd1e7d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218f7b73b8de5828370d089dea6868e28c3e0f4d
        Validity
            Not Before: Jan  1 12:05:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=50aac0a602cf1c2d58cef218810e52940acb7360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ee:2b:b2:18:0e:9e:e0:f5:a9:e0:4c:03:58:
                    c1:02:32:23:72:c7:7a:58:89:f1:9c:e3:de:5b:42:
                    fc:0c:65:2a:1c:01:b8:6a:4b:7a:93:7f:28:ad:7e:
                    e1:95:93:98:0f:ca:b2:db:78:15:1f:2f:44:35:3d:
                    b6:ad:01:34:dd:c1:af:83:65:a1:0a:b3:1d:b2:98:
                    e6:58:bb:5b:ea:b5:22:a9:98:2a:a5:b4:43:e7:00:
                    4a:29:b0:e0:8e:54:cb:89:38:5d:7b:9f:41:4c:13:
                    fd:9a:40:2b:84:2e:ed:37:76:49:ca:7c:09:0c:40:
                    7b:12:c1:ff:0d:32:23:4a:25:36:ef:95:24:a6:9b:
                    d4:a0:22:da:a4:b7:30:7d:e8:6f:b2:be:42:6f:07:
                    df:03:da:d6:fe:7f:c4:20:48:57:f0:dd:7a:39:0b:
                    d0:1d:71:da:e7:f5:d8:77:18:01:e7:4c:ae:24:01:
                    a4:ad:9e:59:c5:02:0c:b8:21:0c:f9:d8:21:5a:57:
                    bd:9e:77:35:b7:c4:7a:08:49:91:1c:91:ea:97:46:
                    13:3f:0b:37:6e:f3:27:48:ac:f7:20:87:59:6a:ca:
                    97:6c:fe:81:7c:40:83:8a:70:59:ae:a5:5c:55:c9:
                    de:51:75:2e:4b:a7:81:18:1e:86:f3:55:31:19:06:
                    f0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AA:C0:A6:02:CF:1C:2D:58:CE:F2:18:81:0E:52:94:0A:CB:73:60
            X509v3 Authority Key Identifier:
                keyid:21:8F:7B:73:B8:DE:58:28:37:0D:08:9D:EA:68:68:E2:8C:3E:0F:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY97c7jeWCg3DQid6mho4ow-D00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4b2c80-2d76-4b0b-826e-48d4bf8efbc5/1/UKrApgLPHC1YzvIYgQ5SlArLc2A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4b2c80-2d76-4b0b-826e-48d4bf8efbc5/1/IY97c7jeWCg3DQid6mho4ow-D00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:42:c4:00:68:f4:88:75:22:47:56:bb:db:e6:ab:ee:c1:12:
         54:de:22:31:b9:8e:75:1d:32:32:c6:2c:08:2e:7d:4f:1d:74:
         79:58:26:45:0c:60:b6:b9:6f:61:c2:b3:51:2c:89:24:1b:49:
         e3:3e:bf:df:e1:99:45:c0:9e:69:a0:31:0f:8d:63:06:fb:77:
         55:87:f2:47:05:5f:76:a7:4a:ab:81:3f:60:cd:1c:5e:2b:96:
         01:8a:45:6d:aa:4f:8b:15:c6:87:e5:7d:f3:08:89:81:a2:63:
         40:18:b2:db:c8:61:d5:52:26:3d:43:3c:e1:5d:a1:e0:ae:e2:
         04:a8:b1:41:bd:16:88:b9:32:b1:ec:fb:5a:3f:1f:de:38:51:
         0f:9f:f4:94:59:cb:79:56:0b:8e:b0:25:fc:7f:dd:6f:f8:b3:
         2c:e6:f3:d2:69:55:c6:3b:5a:ec:f3:ff:58:0d:5c:5b:31:63:
         24:f8:e5:6f:95:7b:52:62:d4:3a:b1:41:a2:b6:a8:c2:83:a5:
         c0:15:86:da:e3:a6:6c:35:39:21:19:d8:6c:95:b6:01:9f:cf:
         f7:92:b1:fc:c3:d3:42:31:8d:2a:ba:c8:06:6f:7c:ae:4a:24:
         42:e5:70:b5:b1:7f:c9:77:b0:0d:d2:e0:22:ea:67:b9:ec:9e:
         73:a7:04:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:00 2024 by rpki-client on console-fra.rpki-client.org