Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1tjVo6ONTAaxIW0jajUHoTeCCWA.roa
File:                     1tjVo6ONTAaxIW0jajUHoTeCCWA.roa (raw, json)
Hash identifier:          uoEE4gSVi7Sb5NiU65v0SjzL2WfU6Ht3qBiCaCyVSoQ=
Subject key identifier:   D6:D8:D5:A3:A3:8D:4C:06:B1:21:6D:23:6A:35:07:A1:37:82:09:60
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       0196202D7563B6E786C77722348A4D0680D5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1tjVo6ONTAaxIW0jajUHoTeCCWA.roa
Signing time:             Thu 10 Apr 2025 14:49:32 +0000
ROA not before:           Thu 10 Apr 2025 14:49:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214079
IP address blocks:        5.231.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:20:2d:75:63:b6:e7:86:c7:77:22:34:8a:4d:06:80:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Apr 10 14:49:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d6d8d5a3a38d4c06b1216d236a3507a137820960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:df:90:57:7e:1c:ab:de:3b:be:99:14:a7:
                    73:25:2d:74:b2:ec:61:b9:b8:ca:5d:c3:cb:9b:5b:
                    b3:00:d1:4c:9a:1b:a6:6b:57:6b:cb:fd:47:5e:11:
                    fa:34:ba:42:43:24:6a:da:f6:7e:cc:f9:ea:d6:ed:
                    93:6a:cc:05:3b:a1:32:26:5a:62:02:ea:2f:a5:22:
                    0b:af:79:22:d9:3b:c4:75:25:11:df:56:9d:f4:88:
                    f7:98:03:25:dc:ac:9a:4a:e3:d5:e1:a9:db:55:a0:
                    40:27:a3:49:76:ab:83:61:f2:97:af:bc:a6:19:35:
                    26:8a:99:fc:e8:18:72:05:15:e9:4f:96:32:6a:08:
                    55:41:36:a8:c9:3e:47:91:76:81:aa:d6:bf:60:58:
                    82:e2:e9:43:1f:21:02:65:45:41:00:a2:68:a6:19:
                    53:0b:6f:1a:ac:7d:dc:27:fa:1e:95:ff:15:3d:d7:
                    53:e5:15:0a:ae:3e:38:b0:97:46:d6:98:71:e7:e5:
                    99:4a:c0:76:8e:96:fe:e1:16:a5:05:48:7a:24:6c:
                    8d:0f:29:94:81:ce:8f:1d:35:ff:1c:ae:85:ca:31:
                    40:8f:60:e9:74:24:6e:40:67:f9:4a:32:6b:1b:a1:
                    f8:46:12:f9:13:8f:a5:d1:8b:2d:c9:50:47:26:e8:
                    8a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D8:D5:A3:A3:8D:4C:06:B1:21:6D:23:6A:35:07:A1:37:82:09:60
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1tjVo6ONTAaxIW0jajUHoTeCCWA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.231.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:8f:99:81:75:11:55:b6:fc:18:7a:fd:89:6b:fd:b7:4e:a4:
         1a:50:1b:31:6f:6e:39:36:1f:22:19:f3:17:4f:c4:89:64:79:
         78:a4:cb:75:4d:f0:51:08:01:0d:e3:b8:7a:b4:16:d7:16:47:
         f4:d9:50:20:5a:77:8e:9e:f2:39:86:2e:60:6c:6d:01:c7:8c:
         52:49:3c:bb:25:65:a4:c6:3e:d7:8a:91:ad:66:48:4f:c8:5f:
         53:6b:25:7a:6c:27:d2:4b:50:c2:7e:80:d8:ac:22:6d:4c:a3:
         99:2a:f0:b1:2c:77:8e:b7:5a:b5:61:68:a0:00:50:24:76:3e:
         6c:a4:41:84:20:9f:61:a3:ef:ea:1b:37:23:a8:e2:32:2d:1b:
         81:11:dc:a5:5f:fb:5a:c9:47:21:38:ce:df:2b:6c:e1:24:e6:
         4a:58:f0:9f:cc:eb:ba:17:01:7b:48:86:af:1b:cb:79:55:85:
         3a:07:35:02:6d:13:24:82:c3:0c:54:52:91:65:60:66:68:98:
         2a:84:db:3b:14:f7:bf:2e:c3:8c:58:f9:e1:9b:ab:81:ac:c8:
         77:1e:f2:f3:64:f8:e5:87:98:ba:dc:99:cc:42:f0:46:4e:96:
         a5:e2:b1:4b:0a:e2:62:f1:e7:99:91:24:66:5f:9e:60:af:83:
         b5:27:a2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net