Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/ltph-6gi_L0tRRLCXMre4piqZuw.roa
File:                     ltph-6gi_L0tRRLCXMre4piqZuw.roa (raw, json)
Hash identifier:          MFmQ6yYiN75fl1Cazo0nbfBN0O2fPbQZ0vfcLROz7mo=
Subject key identifier:   96:DA:61:FB:A8:22:FC:BD:2D:45:12:C2:5C:CA:DE:E2:98:AA:66:EC
Certificate issuer:       /CN=795013346c8d8f23e0128d306997980237db2374
Certificate serial:       019424B3CAF1FA1FBE71672799FBB9F189F9
Authority key identifier: 79:50:13:34:6C:8D:8F:23:E0:12:8D:30:69:97:98:02:37:DB:23:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/ltph-6gi_L0tRRLCXMre4piqZuw.roa
Signing time:             Thu 02 Jan 2025 01:49:10 +0000
ROA not before:           Thu 02 Jan 2025 01:49:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     34066
IP address blocks:        77.240.48.0/20 maxlen: 24
                          78.158.48.0/20 maxlen: 24
                          185.158.56.0/22 maxlen: 24
                          193.104.103.0/24 maxlen: 24
                          193.104.131.0/24 maxlen: 24
                          2a03:7600::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:ca:f1:fa:1f:be:71:67:27:99:fb:b9:f1:89:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795013346c8d8f23e0128d306997980237db2374
        Validity
            Not Before: Jan  2 01:49:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=96da61fba822fcbd2d4512c25ccadee298aa66ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:48:3b:0b:be:9c:b6:81:7b:e1:c7:90:c6:75:
                    9f:1b:f8:b9:e7:e1:72:7f:cb:fc:8c:12:a9:7c:c1:
                    45:bb:c7:79:76:f3:a4:cb:cd:bf:59:20:be:f6:4e:
                    d3:73:8f:b6:2f:70:d5:af:cd:c1:69:59:94:0d:54:
                    c5:4f:91:ca:9a:6b:3d:37:33:0b:d3:88:36:ac:b8:
                    68:7b:a2:58:16:9d:cb:3c:51:d8:25:e4:46:a9:99:
                    02:9b:fe:8c:04:ea:e5:7a:87:ed:9f:71:a5:63:ec:
                    6c:37:98:af:17:08:b7:72:e6:44:73:73:a6:7f:fb:
                    28:f2:c9:f8:cd:82:74:74:2a:ef:d4:a5:f7:ff:f9:
                    19:35:5d:90:db:53:a7:67:3f:7c:f3:b3:7a:8e:70:
                    e5:14:be:c7:37:be:03:e6:fa:80:87:35:91:cf:ae:
                    3b:00:f5:98:65:82:3f:da:52:7d:00:15:e2:aa:bb:
                    97:b7:44:f2:b1:86:23:51:16:8c:f2:4e:40:26:30:
                    07:7d:73:cb:1c:31:36:01:c2:25:7f:b8:ec:25:52:
                    66:00:fb:68:7e:9c:84:b2:39:7a:56:37:f3:87:36:
                    fc:f6:b4:fc:a1:f6:96:82:69:67:f5:a0:fb:d8:26:
                    fe:86:74:4f:e3:08:b0:bf:d4:7c:7e:2f:37:41:aa:
                    49:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DA:61:FB:A8:22:FC:BD:2D:45:12:C2:5C:CA:DE:E2:98:AA:66:EC
            X509v3 Authority Key Identifier:
                keyid:79:50:13:34:6C:8D:8F:23:E0:12:8D:30:69:97:98:02:37:DB:23:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/ltph-6gi_L0tRRLCXMre4piqZuw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.240.48.0/20
                  78.158.48.0/20
                  185.158.56.0/22
                  193.104.103.0/24
                  193.104.131.0/24
                IPv6:
                  2a03:7600::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:81:3b:35:00:9c:43:b5:8b:fd:c6:d8:d5:f1:57:4a:8b:7d:
         4e:e0:54:6c:ec:ed:dc:a4:48:bf:7c:9b:44:1a:17:ce:63:62:
         8f:ed:01:60:49:3d:b0:cf:33:ed:63:47:9b:ba:28:9b:98:95:
         35:32:98:40:aa:e8:b7:00:1a:23:7d:81:06:42:8f:9d:ec:96:
         44:30:d8:a8:8f:e9:1b:9b:f9:4d:6e:04:13:d3:2b:f8:1c:ef:
         9d:2c:7a:93:a1:58:10:9a:6f:13:26:e6:bf:f6:bb:be:80:87:
         42:3e:7c:8e:53:7f:f9:3e:c4:19:e7:e3:0b:b3:27:a3:1a:5e:
         d4:aa:50:c0:5a:66:f6:c3:96:b6:04:ed:73:63:58:2a:a9:71:
         40:4e:aa:ca:f8:b1:fd:91:3d:a5:99:00:88:5e:19:f3:4c:74:
         51:d6:e7:81:56:19:49:07:be:de:a8:7d:9d:02:6c:24:a5:e3:
         02:89:da:81:23:20:57:97:3d:34:d1:00:ae:1d:8a:8e:f8:bc:
         13:b5:4f:3d:c4:c0:74:64:51:14:b3:e7:59:eb:ea:e8:4c:92:
         79:36:cb:d6:53:15:ed:64:ae:b7:61:76:b5:9f:19:d8:24:01:
         a6:bf:24:f7:47:1a:fe:4c:f3:cc:4a:b5:71:7b:d6:14:44:1b:
         e2:58:6f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:33 2025 by rpki-client on console.sobornost.net