Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6C8OhncibY6dHHRjrqyyKs3CEUk.roa
File:                     6C8OhncibY6dHHRjrqyyKs3CEUk.roa (raw, json)
Hash identifier:          2We5txPDWWwYIiiSpjEMzZor8xZNmeM6KyX3O1qIhfg=
Subject key identifier:   E8:2F:0E:86:77:22:6D:8E:9D:1C:74:63:AE:AC:B2:2A:CD:C2:11:49
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       01962D59C614CFE57D7A10DD67FB938A61F7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6C8OhncibY6dHHRjrqyyKs3CEUk.roa
Signing time:             Sun 13 Apr 2025 04:13:00 +0000
ROA not before:           Sun 13 Apr 2025 04:13:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     211780
IP address blocks:        5.231.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:59:c6:14:cf:e5:7d:7a:10:dd:67:fb:93:8a:61:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Apr 13 04:13:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e82f0e8677226d8e9d1c7463aeacb22acdc21149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:23:0f:5b:db:db:3f:18:cc:5b:97:6b:f0:
                    4f:a9:07:db:06:9d:01:96:96:9e:2d:24:3d:9f:86:
                    94:89:47:14:18:e5:4b:86:13:ba:d7:84:eb:64:a1:
                    c2:14:0a:db:16:c1:08:36:d1:d4:fe:eb:84:ef:05:
                    8a:c6:39:b1:8f:f5:98:65:7f:3d:c3:52:0f:06:ce:
                    34:5b:86:30:96:6b:b8:ca:35:69:6e:7a:df:0f:a3:
                    9f:10:66:e9:15:df:e3:2e:a0:2b:a3:2f:f6:a6:4b:
                    39:2d:03:0e:de:a5:7e:a3:aa:d7:95:3c:39:69:77:
                    17:0f:8b:2a:67:f6:aa:82:cd:8a:29:24:f2:94:cb:
                    1f:de:e9:3f:e5:8f:26:f4:cd:88:b7:59:bc:7f:e8:
                    89:35:10:02:5d:7f:01:28:e1:90:7a:a8:a6:c7:70:
                    e8:0a:9b:9b:ca:89:2a:e2:8e:62:ac:4f:f5:5d:2a:
                    1a:c0:d1:43:7b:d3:41:fc:92:73:4a:e4:fd:65:c2:
                    27:9f:70:e5:7b:b5:f1:32:4e:5b:71:47:3f:1d:6f:
                    3e:67:71:21:66:a6:3f:ee:30:ec:c7:1b:d8:59:1b:
                    cc:32:6e:4d:cc:28:f1:a4:88:d5:17:19:0f:ee:ba:
                    e0:09:b9:b0:fc:c2:4d:43:f3:f4:74:b1:32:de:fe:
                    34:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2F:0E:86:77:22:6D:8E:9D:1C:74:63:AE:AC:B2:2A:CD:C2:11:49
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6C8OhncibY6dHHRjrqyyKs3CEUk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.231.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:c4:33:d5:91:b8:7d:c1:55:2b:99:dc:59:f0:f6:6f:d4:a7:
         f0:48:71:66:57:e1:65:b4:6c:cd:1a:ba:30:85:11:90:f8:13:
         ac:71:c3:f4:13:53:95:05:b7:43:38:93:68:1c:ad:7c:2f:ec:
         51:e3:eb:a6:23:a5:37:8f:f5:2c:3e:0a:cc:4d:d3:ee:0d:33:
         94:e7:89:e7:33:c1:09:27:89:28:ee:c4:13:c3:90:7d:9c:d1:
         32:e7:40:6a:8c:10:50:5c:95:51:ac:4c:1d:94:6c:82:ee:69:
         85:12:1e:78:ec:24:73:04:b0:eb:8a:50:45:0d:2c:db:75:4b:
         cd:1e:26:9f:9f:07:40:78:2f:ed:ef:64:81:a2:9b:2e:29:6e:
         1a:96:42:cf:37:c8:91:44:33:b5:15:17:21:6d:06:94:82:8b:
         83:9a:3b:3b:c0:bf:3d:4a:1b:f8:73:34:94:3f:64:7b:29:ef:
         6f:67:24:91:e1:7a:4a:31:96:3e:25:9a:f1:9b:4a:cc:dc:08:
         2b:ab:48:da:01:51:34:d5:49:10:ac:76:ab:04:2b:0a:9a:23:
         57:f7:9b:61:5d:53:5b:9b:19:49:33:cf:e5:9a:d7:c0:d3:f1:
         7d:4a:36:1f:7e:99:5a:8a:5a:f9:81:0b:80:dd:ed:a1:ad:63:
         29:af:06:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net