Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LAKkoAndva90SPNLZD7phJpzuqA.roa
File:                     LAKkoAndva90SPNLZD7phJpzuqA.roa (raw, json)
Hash identifier:          OPV3y3ajSvAOqXe2gXH83vJ/FKUxnXcCmYMqv/uyJZU=
Subject key identifier:   2C:02:A4:A0:09:DD:BD:AF:74:48:F3:4B:64:3E:E9:84:9A:73:BA:A0
Certificate issuer:       /CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
Certificate serial:       019428231C845C992DC262B4D6DA2DF9DC07
Authority key identifier: 2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LAKkoAndva90SPNLZD7phJpzuqA.roa
Signing time:             Thu 02 Jan 2025 17:49:37 +0000
ROA not before:           Thu 02 Jan 2025 17:49:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     39232
IP address blocks:        78.111.48.0/20 maxlen: 20
                          78.111.48.0/21 maxlen: 21
                          78.111.56.0/21 maxlen: 21
                          185.81.80.0/22 maxlen: 22
                          185.81.80.0/23 maxlen: 23
                          185.81.82.0/23 maxlen: 23
                          2a03:7740::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:23:1c:84:5c:99:2d:c2:62:b4:d6:da:2d:f9:dc:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
        Validity
            Not Before: Jan  2 17:49:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2c02a4a009ddbdaf7448f34b643ee9849a73baa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:47:f9:b8:a9:c3:c0:8e:dd:76:f3:fc:38:
                    ce:01:80:04:8b:38:ae:e3:50:8f:f1:86:b5:ef:58:
                    7d:a0:9e:a6:77:d4:18:e6:89:b7:51:08:4e:f3:81:
                    06:75:4f:2d:4e:0d:39:af:f8:58:de:9e:4c:f9:8e:
                    73:08:8d:b8:89:86:11:6e:9e:2f:ac:1d:71:77:b6:
                    04:e1:0d:eb:f4:52:ac:94:ff:2f:c3:fa:4f:ef:8c:
                    b8:ca:c9:70:01:8d:2c:db:49:3f:f4:e6:65:c9:fa:
                    23:1f:ca:8d:61:0f:08:50:1f:ff:2a:b3:fd:c3:4e:
                    02:83:93:0c:3a:14:28:9c:99:4b:e6:ef:7e:2d:c4:
                    c7:59:28:63:1e:14:9b:09:55:2e:06:6e:db:b5:3c:
                    13:e2:d5:b3:4b:a5:ed:31:4f:8c:aa:8c:c9:8b:0d:
                    97:64:e2:dc:3f:a2:d2:c9:62:0f:ce:86:d8:52:b5:
                    ea:a4:b8:e1:89:b7:96:ab:84:ea:c9:f5:2e:47:90:
                    87:24:87:7e:dd:73:91:2f:99:1f:95:1a:9d:33:b6:
                    83:98:4d:95:1d:f1:66:33:c3:b6:ba:4e:cd:84:8e:
                    27:ee:56:a0:e3:91:cc:e9:3b:b9:5d:6f:b5:fb:44:
                    e6:7b:89:7d:c4:65:4b:0a:56:c0:26:88:9e:76:ac:
                    ae:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:02:A4:A0:09:DD:BD:AF:74:48:F3:4B:64:3E:E9:84:9A:73:BA:A0
            X509v3 Authority Key Identifier:
                keyid:2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LAKkoAndva90SPNLZD7phJpzuqA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.111.48.0/20
                  185.81.80.0/22
                IPv6:
                  2a03:7740::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:0a:a3:c7:60:11:71:c6:3e:f9:82:a9:3a:b7:8e:9c:70:70:
         95:59:3e:99:a7:84:2c:c3:43:b8:d0:c8:61:25:e9:33:81:fd:
         f8:20:9e:7d:0d:cb:56:58:7d:16:5c:1f:72:45:2b:07:51:bc:
         e2:0f:a7:77:54:65:8b:52:83:5f:88:5a:cb:67:06:d0:cf:91:
         87:af:e9:ac:45:5c:55:2f:58:0b:d1:95:e3:a5:82:1c:e2:c9:
         0f:b5:a8:fb:42:55:6f:2d:f8:f8:25:8c:d5:60:61:c8:b5:75:
         f1:fc:ce:3e:88:d4:0b:3c:5a:b4:05:db:4a:88:90:ff:82:c2:
         13:0a:18:4c:35:6d:82:a9:e1:42:4a:5c:6a:c4:f2:dd:90:d9:
         57:1f:68:6a:a3:28:03:43:e4:6c:83:f6:97:11:70:cc:6d:60:
         9c:7a:c5:9c:c5:db:69:13:61:43:6e:45:aa:42:34:c6:07:bb:
         d5:89:d6:ae:39:92:75:c6:63:79:6a:e5:a7:e1:c3:a3:67:b8:
         f0:e0:d8:c6:89:85:cf:f7:e3:4b:b0:27:1a:f6:10:1b:2a:88:
         4e:7a:9c:17:74:02:89:6f:19:8d:ee:98:78:86:5d:23:d7:9f:
         13:65:50:14:02:47:6f:c8:db:d7:0b:d2:dc:9a:71:b7:76:d2:
         ff:f7:d1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:33 2025 by rpki-client on console.sobornost.net