Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/6px4oQpQxURR5IW0gWezwsCgYUA.roa
File:                     6px4oQpQxURR5IW0gWezwsCgYUA.roa (raw, json)
Hash identifier:          aKqSySkiQ4Z3UFY+0fQdpN2yWiQF1RqxRVXfSVXmnd4=
Subject key identifier:   EA:9C:78:A1:0A:50:C5:44:51:E4:85:B4:81:67:B3:C2:C0:A0:61:40
Certificate issuer:       /CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Certificate serial:       01942CFD33C432070198C4EECEE0A322A385
Authority key identifier: 3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/6px4oQpQxURR5IW0gWezwsCgYUA.roa
Signing time:             Fri 03 Jan 2025 16:26:18 +0000
ROA not before:           Fri 03 Jan 2025 16:26:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     199326
IP address blocks:        2a13:7700::/40 maxlen: 40
                          2a13:7700:1::/48 maxlen: 48
                          2a13:7700:2::/48 maxlen: 48
                          2a13:7700:100::/40 maxlen: 40
                          2a13:7705::/40 maxlen: 40
                          2a13:7705::/48 maxlen: 48
                          2a13:7705:a::/48 maxlen: 48
                          2a13:7705:10::/48 maxlen: 48
                          2a13:7705:80::/48 maxlen: 48
                          2a13:7705:90::/48 maxlen: 48
                          2a13:7705:ff00::/40 maxlen: 40
                          2a13:7705:ff00::/48 maxlen: 48
                          2a13:7705:ff01::/48 maxlen: 48
                          2a13:7705:ff04::/48 maxlen: 48
                          2a13:7705:ff08::/48 maxlen: 48
                          2a13:7705:ff10::/48 maxlen: 48
                          2a13:7705:ff14::/48 maxlen: 48
                          2a13:7705:ff18::/48 maxlen: 48
                          2a13:7705:ff1c::/48 maxlen: 48
                          2a13:7705:ff20::/48 maxlen: 48
                          2a13:7705:ff24::/48 maxlen: 48
                          2a13:7705:ff28::/48 maxlen: 48
                          2a13:7705:ff2c::/48 maxlen: 48
                          2a13:7705:ff30::/48 maxlen: 48
                          2a13:7705:ff34::/48 maxlen: 48
                          2a13:7705:ff38::/48 maxlen: 48
                          2a13:7705:ff3c::/48 maxlen: 48
                          2a13:7705:ff40::/48 maxlen: 48
                          2a13:7705:ff44::/48 maxlen: 48
                          2a13:7705:ff4c::/48 maxlen: 48
                          2a13:7705:ff50::/48 maxlen: 48
                          2a13:7705:ff54::/48 maxlen: 48
                          2a13:7705:ff58::/48 maxlen: 48
                          2a13:7705:ff5c::/48 maxlen: 48
                          2a13:7705:ff60::/48 maxlen: 48
                          2a13:7705:ff64::/48 maxlen: 48
                          2a13:7705:ff68::/48 maxlen: 48
                          2a13:7705:ff6c::/48 maxlen: 48
                          2a13:7705:ff70::/48 maxlen: 48
                          2a13:7705:ff74::/48 maxlen: 48
                          2a13:7705:ff78::/48 maxlen: 48
                          2a13:7705:ff7c::/48 maxlen: 48
                          2a13:7705:ff80::/48 maxlen: 48
                          2a13:7705:ff84::/48 maxlen: 48
                          2a13:7705:ff88::/48 maxlen: 48
                          2a13:7705:ff8c::/48 maxlen: 48
                          2a13:7705:ff90::/48 maxlen: 48
                          2a13:7705:ffff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:2c:fd:33:c4:32:07:01:98:c4:ee:ce:e0:a3:22:a3:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d6c2958145f45fad5daeeb38b75b52c09661046
        Validity
            Not Before: Jan  3 16:26:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ea9c78a10a50c54451e485b48167b3c2c0a06140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f2:71:14:55:c4:e3:81:58:2e:04:15:41:6d:
                    55:36:55:ca:68:a7:72:96:96:16:c4:59:52:36:b0:
                    e6:e2:d9:30:a6:4c:49:80:5c:63:b0:16:c8:42:ca:
                    a4:76:a0:d2:bb:52:79:7f:b5:70:cb:2f:8f:66:c8:
                    8c:9b:89:d8:45:29:2a:ea:17:4b:ba:85:d4:5b:d8:
                    95:71:b3:d2:4d:a2:76:d3:63:2d:7c:10:7d:df:3a:
                    53:fb:0e:51:20:2e:20:e3:6e:2b:b7:34:b6:6d:a3:
                    7b:cc:ef:6c:51:72:74:5c:c7:98:a1:dc:4c:4b:e7:
                    ef:d8:da:95:44:5a:57:d4:44:94:75:82:58:7e:91:
                    13:55:7e:de:d1:8e:04:be:46:80:27:0c:ba:5d:f0:
                    6b:02:46:45:33:d2:7f:53:db:65:32:21:b8:40:73:
                    c1:fc:b3:61:a3:55:52:bf:4f:ef:10:3b:cb:4c:6c:
                    5d:87:7d:5f:bf:29:9a:76:94:38:c8:aa:61:e7:63:
                    89:f8:cf:76:98:c9:17:c3:9b:f5:ff:e1:e8:25:0b:
                    c2:33:d2:de:63:a2:1d:a0:95:1f:2c:d0:ca:a6:a4:
                    31:21:4e:69:9f:cc:09:91:51:f1:bc:1b:60:85:5a:
                    02:4b:56:b8:f6:e8:70:bd:f8:f6:24:af:f1:f2:ec:
                    af:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9C:78:A1:0A:50:C5:44:51:E4:85:B4:81:67:B3:C2:C0:A0:61:40
            X509v3 Authority Key Identifier:
                keyid:3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/6px4oQpQxURR5IW0gWezwsCgYUA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:7700::/39
                  2a13:7705::/40
                  2a13:7705:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:56:89:c8:07:f9:3e:13:25:fe:f5:fd:cf:e7:b3:0d:1f:cb:
         23:f3:d1:7b:fd:95:2b:84:a8:72:4b:31:21:7f:34:ca:81:6a:
         4a:a3:32:e0:f3:e7:28:08:dc:3a:a3:98:0a:e0:3c:7f:d2:37:
         ee:cb:89:2a:24:c8:84:d6:6a:8b:6e:fb:78:3d:8a:b5:94:64:
         89:1a:e2:ef:29:07:b7:99:e9:a9:de:48:6f:86:1a:51:8e:ea:
         15:39:bc:76:d8:1b:66:45:fb:6a:a8:c3:f2:05:c0:1f:50:ac:
         35:c1:21:be:ba:ac:5f:14:9b:a6:cf:bb:ed:6a:20:33:fd:1a:
         9e:78:81:75:58:b2:7e:3d:11:09:93:f5:83:c8:3c:4a:8b:06:
         f1:bb:ca:99:1c:47:d5:d1:67:ad:8e:6d:e4:1a:5f:03:59:15:
         ed:e7:4f:30:a8:2e:c0:dd:d7:e2:fc:a9:38:76:1f:75:d7:97:
         08:5b:cd:c0:c3:87:9f:d5:29:d7:92:8d:9f:80:a7:3d:6e:74:
         38:f9:1e:22:c5:a6:a6:9e:90:33:40:47:7e:4b:ef:18:de:7b:
         f1:f1:e0:f4:43:c5:70:a8:5c:96:42:53:09:d7:01:e0:64:73:
         38:a2:7e:33:88:12:46:df:11:9a:12:f6:cd:c0:f1:1a:d9:dd:
         5c:89:a1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net