Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/koYxRoNx2Z_dDpVJFl-Snjkmcp8.roa
File:                     koYxRoNx2Z_dDpVJFl-Snjkmcp8.roa (raw, json)
Hash identifier:          9wg6bBr0wjB+1nZSYhxJKyc0xntk+ar+Q7kYQKSKRUo=
Subject key identifier:   92:86:31:46:83:71:D9:9F:DD:0E:95:49:16:5F:92:9E:39:26:72:9F
Certificate issuer:       /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Certificate serial:       01942746CAB23C369FC3097D23857528FD3D
Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/koYxRoNx2Z_dDpVJFl-Snjkmcp8.roa
Signing time:             Thu 02 Jan 2025 13:48:58 +0000
ROA not before:           Thu 02 Jan 2025 13:48:58 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209360
IP address blocks:        193.105.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:46:ca:b2:3c:36:9f:c3:09:7d:23:85:75:28:fd:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
        Validity
            Not Before: Jan  2 13:48:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=928631468371d99fdd0e9549165f929e3926729f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c3:80:8e:be:ca:06:93:05:06:39:ed:99:7c:
                    43:95:2f:67:2c:aa:c8:3b:dd:25:39:40:b1:fa:9e:
                    53:d0:d2:f7:b6:99:0f:fc:73:49:7e:c4:08:df:75:
                    46:a5:ed:88:91:1e:de:87:db:3d:e0:da:7c:24:07:
                    02:f4:68:ce:46:1b:7a:e9:0e:d5:8c:3c:d9:a2:e0:
                    77:9a:a3:02:ff:c0:a6:b2:f5:7a:39:2f:24:2b:3c:
                    42:cd:05:b1:f4:89:86:14:9b:f9:eb:c3:04:95:d6:
                    c6:b7:cf:5d:45:2a:27:90:e7:d3:28:20:de:c2:5f:
                    96:5d:47:1a:b4:50:f4:1c:ef:8e:9c:07:77:26:82:
                    ce:80:b1:1f:9d:62:6d:be:ba:0c:a9:d8:1a:f1:df:
                    72:ca:ea:5d:61:cd:ee:a7:b9:20:f4:28:17:b5:a9:
                    09:79:81:1b:77:e5:e9:b7:a3:26:39:44:1e:bc:5e:
                    9c:97:a9:f1:9a:e9:ef:5f:89:2a:28:2a:ff:97:4b:
                    be:95:54:a8:f4:97:5e:a3:45:bf:70:66:1b:75:e7:
                    05:15:1d:af:05:7a:6b:33:00:ad:d4:6f:61:e0:54:
                    b5:f5:3b:f7:22:8e:5c:87:60:19:6c:f6:fb:19:91:
                    fc:81:78:63:2c:08:1c:4e:47:27:ab:e1:0b:9c:42:
                    94:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:86:31:46:83:71:D9:9F:DD:0E:95:49:16:5F:92:9E:39:26:72:9F
            X509v3 Authority Key Identifier:
                keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/koYxRoNx2Z_dDpVJFl-Snjkmcp8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:0c:3e:d3:68:89:a1:ed:39:15:8c:d2:47:00:2c:bc:74:d8:
         c1:fb:d1:9d:ec:dd:de:69:74:33:38:e8:ae:c4:c6:02:87:00:
         e3:eb:af:42:20:0e:cd:74:7c:6e:95:b8:b2:d2:65:36:0d:29:
         33:57:ae:b2:cf:41:75:3d:5f:a4:c0:fc:9a:dd:ad:45:48:47:
         67:ac:88:01:bd:5b:d7:f9:20:17:47:31:aa:2e:1a:6f:45:9c:
         08:19:61:45:5e:b3:44:6e:fb:27:9b:f9:f4:32:cc:ee:25:c4:
         fc:8c:a4:10:ff:22:82:cf:3c:c7:77:a4:b4:d1:3e:4f:84:f2:
         6a:b7:c5:b4:35:b7:c5:df:2f:eb:64:ce:c5:74:b6:94:13:92:
         b1:73:b0:9e:12:e1:78:51:ff:3c:ab:de:94:2f:4c:4a:cf:f6:
         0d:1f:fa:3f:4e:99:8a:f2:b5:ef:c1:6e:18:c7:3d:17:1c:42:
         7c:20:b4:4e:43:cf:23:4a:58:2e:24:8f:26:59:4e:93:c6:8d:
         d9:20:d1:87:3d:ee:ef:2c:03:20:73:27:33:0d:86:dc:d5:99:
         f9:6f:d4:f0:01:ba:97:9e:c3:2d:f6:45:17:aa:c5:0b:63:68:
         97:c9:63:18:39:19:ad:46:9e:6e:81:d9:b7:d6:0b:0b:7b:d5:
         17:96:e9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:43 2025 by rpki-client on console.sobornost.net