Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/93WDpe_nqig4pm6_Z5KqoXM-m-I.roa
File:                     93WDpe_nqig4pm6_Z5KqoXM-m-I.roa (raw, json)
Hash identifier:          +05qP5tX3rvyytgRGZx+7tHz5to109QDlCt0+rv4I4M=
Subject key identifier:   F7:75:83:A5:EF:E7:AA:28:38:A6:6E:BF:67:92:AA:A1:73:3E:9B:E2
Certificate issuer:       /CN=e0b54e33422ad3dd6ca93a18edd82e0b68c85a5c
Certificate serial:       019423D6BE2ED948768DB2763F1F596179F3
Authority key identifier: E0:B5:4E:33:42:2A:D3:DD:6C:A9:3A:18:ED:D8:2E:0B:68:C8:5A:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/93WDpe_nqig4pm6_Z5KqoXM-m-I.roa
Signing time:             Wed 01 Jan 2025 21:47:43 +0000
ROA not before:           Wed 01 Jan 2025 21:47:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     21060
IP address blocks:        193.105.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:be:2e:d9:48:76:8d:b2:76:3f:1f:59:61:79:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0b54e33422ad3dd6ca93a18edd82e0b68c85a5c
        Validity
            Not Before: Jan  1 21:47:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f77583a5efe7aa2838a66ebf6792aaa1733e9be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8f:4e:3c:f4:c7:b6:56:4a:af:e8:e2:f9:69:
                    38:b0:e6:8e:45:ce:3d:f4:a7:15:ce:2f:ea:a2:76:
                    0d:fd:ec:8a:2f:b0:09:a8:e6:1b:e0:25:44:ca:1c:
                    d2:a8:d3:63:2d:3d:b1:b5:8f:e3:a8:f5:7c:8c:04:
                    24:1f:8e:64:75:9d:a5:5f:ba:62:d3:fa:61:f7:99:
                    68:55:0a:62:d5:33:af:f7:25:2a:6d:56:11:ab:69:
                    b2:70:11:4d:9e:5b:90:ff:74:f0:c2:66:bd:7b:dd:
                    aa:ae:12:56:4b:f2:04:23:6d:a8:04:bf:43:d6:82:
                    cf:16:53:38:86:55:1a:94:21:ff:f0:fd:5a:1e:40:
                    42:aa:d2:d4:a8:83:24:3c:45:ce:5c:25:82:c3:f1:
                    cd:0b:47:15:cc:94:e6:df:d8:4f:f2:b3:e8:03:b2:
                    75:eb:b5:40:9a:07:92:de:65:6f:22:15:10:d1:3b:
                    f6:e3:f3:d8:82:b8:d8:56:17:84:58:7c:53:6b:f5:
                    cb:53:33:1d:10:51:1e:37:be:73:40:3f:70:4f:00:
                    21:bc:85:21:83:94:19:b7:81:22:bd:b6:9b:83:6d:
                    a7:8e:74:16:f4:dd:bf:04:90:ba:c0:6c:20:d7:74:
                    23:04:39:40:de:6d:58:a8:87:da:ce:93:49:92:cb:
                    67:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:75:83:A5:EF:E7:AA:28:38:A6:6E:BF:67:92:AA:A1:73:3E:9B:E2
            X509v3 Authority Key Identifier:
                keyid:E0:B5:4E:33:42:2A:D3:DD:6C:A9:3A:18:ED:D8:2E:0B:68:C8:5A:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/93WDpe_nqig4pm6_Z5KqoXM-m-I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:dd:91:c1:50:45:56:df:fa:4d:76:83:bd:07:8a:92:2b:4d:
         b3:96:bc:fc:d3:c6:20:04:ed:b7:c5:39:5a:86:f8:65:ae:87:
         3b:c9:6c:d0:03:a6:e4:97:07:51:69:0b:23:e9:14:3f:72:57:
         48:a7:ea:3d:8a:8a:af:7e:5d:36:c3:fa:ed:58:ba:a1:78:1f:
         65:9a:24:eb:06:12:5d:a0:af:ae:12:d9:dc:f3:0e:c1:05:1e:
         36:79:9f:fc:71:6b:93:a0:93:b5:1d:27:cc:88:78:4a:b5:02:
         fa:10:52:64:d3:0b:ed:3f:61:5d:7c:59:96:11:ac:41:f0:b1:
         12:8a:36:e8:b5:95:0e:d7:41:a0:97:49:5e:f6:a5:5f:26:38:
         5e:f9:f8:a4:e6:5e:ee:7a:c3:2d:0d:9c:ca:af:ce:dd:74:99:
         78:4e:f4:73:1d:e1:8e:f0:7d:5e:43:e0:3e:b5:23:c7:e7:f1:
         65:9a:66:43:29:4c:a1:18:a7:69:52:c1:83:ae:6c:d7:92:29:
         a9:55:a7:9f:aa:eb:5b:4e:a1:ed:88:74:7d:a4:18:0c:4b:a3:
         4a:3c:0d:97:fb:04:4e:c3:f8:15:71:0a:9c:5e:af:38:54:1d:
         1c:5b:b1:4b:67:87:58:4f:f1:ca:b2:61:aa:dd:a5:33:5c:87:
         40:dc:d5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net