Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/C9C0V0G6heXKhMs9zwewEbgyH4E.roa
File:                     C9C0V0G6heXKhMs9zwewEbgyH4E.roa (raw, json)
Hash identifier:          +sw7YDqtUsQwPEhe7kVcvTRomQL8/W5JSnyqYTO1A64=
Subject key identifier:   0B:D0:B4:57:41:BA:85:E5:CA:84:CB:3D:CF:07:B0:11:B8:32:1F:81
Certificate issuer:       /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial:       018FC948CE2F7CE48EF69FA456E9B7B208DE
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/C9C0V0G6heXKhMs9zwewEbgyH4E.roa
Signing time:             Thu 30 May 2024 11:35:42 +0000
ROA not before:           Thu 30 May 2024 11:35:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     208949
IP address blocks:        45.94.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:c9:48:ce:2f:7c:e4:8e:f6:9f:a4:56:e9:b7:b2:08:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
        Validity
            Not Before: May 30 11:35:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0bd0b45741ba85e5ca84cb3dcf07b011b8321f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:be:4f:c7:df:ce:52:95:ac:52:1c:e6:6f:70:
                    bb:86:99:a9:a4:4d:3b:19:1a:09:fd:3a:36:74:c1:
                    46:d8:7c:52:21:29:66:fc:8f:57:97:ff:99:fa:81:
                    81:02:6a:c1:7a:a7:d7:9d:5e:bb:56:65:46:ae:56:
                    a6:87:d3:b1:1c:ff:65:3d:1b:6d:62:da:88:0d:f0:
                    c0:06:a9:d8:bc:84:81:40:45:d7:7f:8d:62:35:5f:
                    91:09:58:7f:2e:dd:8c:f0:ff:4d:90:81:54:0a:00:
                    89:de:8f:29:66:d5:39:80:7e:66:e2:ff:4d:42:2c:
                    4e:f4:49:6f:de:a9:f4:4e:f0:25:00:36:3e:f3:e2:
                    47:95:43:20:81:41:80:c9:13:df:5e:af:5e:6a:b4:
                    5e:31:96:32:e7:2c:d7:3f:bd:7a:eb:3f:fe:95:bb:
                    dd:c7:77:0d:b9:95:62:15:b0:91:c5:a2:80:4b:75:
                    d1:fb:60:78:dc:9c:60:01:ce:a7:43:86:40:9b:5b:
                    0f:4d:df:df:1d:ae:4e:f3:52:3f:e5:d7:ea:23:17:
                    c4:c4:46:5e:11:7a:31:3e:14:a8:e6:46:32:9a:ee:
                    2d:e2:27:ba:2b:c4:ab:e7:e7:3e:95:d4:0f:e5:08:
                    1c:b2:1d:c5:30:48:f6:53:e5:13:c3:0b:2d:9a:13:
                    fa:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D0:B4:57:41:BA:85:E5:CA:84:CB:3D:CF:07:B0:11:B8:32:1F:81
            X509v3 Authority Key Identifier:
                keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/C9C0V0G6heXKhMs9zwewEbgyH4E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:ab:35:7b:b5:02:97:a8:0b:29:cd:83:a3:38:a0:86:ac:14:
         47:4d:69:47:a6:cb:e1:5f:bc:36:d6:92:6f:cd:87:3b:e6:81:
         8f:f8:cd:e0:1c:97:b3:b6:f7:ad:1d:70:ff:34:7e:2c:4e:a7:
         6c:fe:88:29:f2:99:39:2d:89:20:ef:a9:4d:a1:bb:c0:6a:e5:
         09:48:5c:38:bb:22:0c:47:c3:26:bc:42:56:3f:53:09:34:30:
         16:da:db:04:a7:7f:ff:d7:3b:0e:82:26:89:26:d4:3a:73:c8:
         82:aa:4f:fe:17:54:e3:9f:06:a1:fe:05:a6:26:92:af:c7:29:
         89:74:c7:fe:db:7a:76:41:6c:3f:bb:e2:bc:22:d8:8a:ef:fb:
         85:0a:bc:07:ee:25:c4:1b:1b:a9:ca:c6:8a:16:ae:98:15:55:
         11:ca:a7:3a:58:36:5f:31:d0:31:4f:e3:08:50:ef:14:b6:1a:
         34:66:c3:bd:6e:ff:94:af:9a:4e:a9:f6:24:c7:5e:3f:2e:79:
         1f:d6:a2:41:4b:7c:c0:6a:83:e1:72:84:e3:c6:c6:cb:0e:92:
         67:1c:b5:2a:f0:ca:a3:6e:4c:32:19:22:ca:0b:e1:c6:ed:15:
         6b:aa:22:18:0f:33:d5:9c:3b:f0:b3:5e:17:48:a7:1c:a8:14:
         5b:00:6b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:30 2024 by rpki-client on console.sobornost.net