Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/6QoOwa2ipaJqvrD7E2dbw1UcuV8.roa
File:                     6QoOwa2ipaJqvrD7E2dbw1UcuV8.roa (raw, json)
Hash identifier:          2tOtZzMlaS8Y+/JP7ae7uNFPL8Y8C/sjWCJwPgz2D6M=
Subject key identifier:   E9:0A:0E:C1:AD:A2:A5:A2:6A:BE:B0:FB:13:67:5B:C3:55:1C:B9:5F
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       01942143B2F3702A44A8B92F57E7CD4253C8
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/6QoOwa2ipaJqvrD7E2dbw1UcuV8.roa
Signing time:             Wed 01 Jan 2025 09:47:52 +0000
ROA not before:           Wed 01 Jan 2025 09:47:52 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     41092
IP address blocks:        148.81.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:b2:f3:70:2a:44:a8:b9:2f:57:e7:cd:42:53:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Jan  1 09:47:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e90a0ec1ada2a5a26abeb0fb13675bc3551cb95f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:64:8a:75:dc:26:f9:4f:06:7f:5c:f6:cd:82:
                    f9:c5:ab:c1:8b:08:3e:70:d3:61:37:54:92:f9:7c:
                    2a:e1:07:1c:37:01:95:85:3f:03:3e:ca:49:b1:76:
                    cf:9b:9a:ad:e7:ae:03:1e:41:2e:48:f7:72:53:f6:
                    c8:a6:64:db:4b:5a:4c:f4:3f:96:8f:cc:b5:a9:ae:
                    50:2a:1c:65:fc:52:79:6a:23:bc:52:af:37:a3:bd:
                    cd:6a:0b:99:01:96:1a:a8:70:5d:e3:45:91:95:68:
                    ab:37:39:c8:c3:e6:5c:0f:27:bd:ca:e1:13:6e:16:
                    4a:b3:a7:d2:6f:74:88:27:c4:28:a1:cd:3a:35:40:
                    3f:80:3d:cc:ab:36:c0:e5:80:7f:a8:65:7d:40:c0:
                    a9:5c:59:db:36:f6:6e:96:9d:fb:3b:72:9f:ba:89:
                    a8:12:27:79:13:16:b7:bb:49:0f:50:19:57:8e:79:
                    dd:db:09:06:ca:57:06:37:73:62:54:a7:45:f4:8b:
                    14:66:23:7d:e7:b3:af:e6:b8:87:5b:57:23:79:a6:
                    a8:30:62:8a:40:38:a6:00:44:7e:da:c4:ed:f8:a0:
                    da:74:32:f5:ed:6f:12:19:01:1c:20:b8:b3:b4:8a:
                    d0:3b:0e:b9:75:bf:79:d6:35:f5:b9:f2:05:7d:b6:
                    5b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0A:0E:C1:AD:A2:A5:A2:6A:BE:B0:FB:13:67:5B:C3:55:1C:B9:5F
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/6QoOwa2ipaJqvrD7E2dbw1UcuV8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.81.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:84:1b:35:33:aa:50:d7:b4:e5:ce:2b:e2:42:f3:22:1f:e2:
         43:0b:0f:54:fa:fd:92:23:53:54:86:51:f6:f9:ee:fa:f9:66:
         d4:23:51:d1:e8:14:2a:d2:41:0a:35:88:c5:54:b5:75:8a:45:
         4e:f7:00:1f:62:53:9e:b4:41:7b:9c:6b:f9:e0:b5:2a:3d:06:
         c1:5c:fa:21:00:a7:41:88:78:f0:ec:fc:8e:b6:57:53:43:06:
         15:de:0a:85:b9:b7:38:d4:a8:b0:5e:42:a1:a6:be:da:ba:0e:
         38:3d:f3:29:90:f8:b6:33:06:49:b8:fa:7b:41:42:1b:b0:08:
         a1:f7:f2:6c:ec:1b:63:75:b2:09:89:6a:c4:48:ed:49:6f:06:
         2f:f0:70:56:7d:a7:1c:89:a6:bd:27:90:0b:ba:c7:02:76:5c:
         5a:12:49:50:98:bf:08:79:44:1c:93:8b:59:1d:7d:b8:38:dd:
         82:2f:3a:12:75:3e:cc:8f:f5:bc:19:bf:2a:87:17:ef:26:7f:
         44:cb:69:23:d6:d8:83:51:50:8d:3b:94:c8:56:6b:9b:36:a1:
         c0:11:d4:68:b7:57:f9:b5:0b:bc:81:df:7e:61:cb:ad:a0:74:
         2f:d0:f5:48:82:06:a4:1b:3a:5b:6d:f0:36:47:12:c0:f0:7e:
         e4:b9:99:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net