Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/A0_9B9IWA4OBDn3Vv3YiqymUe8c.roa
File:                     A0_9B9IWA4OBDn3Vv3YiqymUe8c.roa (raw, json)
Hash identifier:          lE06Mjh97LJaUQ/w1auWux3C8TovlUNXB3RO85AG9OU=
Subject key identifier:   03:4F:FD:07:D2:16:03:83:81:0E:7D:D5:BF:76:22:AB:29:94:7B:C7
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       01942143BF15B8EAA8EB1722BBAB8D846207
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/A0_9B9IWA4OBDn3Vv3YiqymUe8c.roa
Signing time:             Wed 01 Jan 2025 09:47:55 +0000
ROA not before:           Wed 01 Jan 2025 09:47:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     203508
IP address blocks:        194.181.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:bf:15:b8:ea:a8:eb:17:22:bb:ab:8d:84:62:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Jan  1 09:47:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=034ffd07d2160383810e7dd5bf7622ab29947bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:41:62:e2:56:00:05:6e:4f:e7:fa:eb:be:6d:
                    de:4a:e8:dd:1a:2d:11:d2:f8:08:9b:54:3e:14:72:
                    1c:e7:bc:8f:0c:2a:fa:fa:f1:ab:39:c0:bd:c4:a9:
                    2c:2d:55:76:11:68:1c:f0:1e:b5:83:c7:1c:6e:99:
                    ab:c3:1a:8e:49:12:39:40:f2:7d:0f:cb:c3:2c:71:
                    f7:60:19:51:78:a9:71:a8:15:a6:cb:36:e3:94:46:
                    1f:c8:ac:b4:97:02:91:a9:02:73:df:78:db:36:ed:
                    d0:03:fe:c8:2a:df:68:fd:1c:0d:d7:b4:6e:86:6e:
                    26:d8:0f:bf:7c:8e:ea:1f:d2:79:e6:bc:20:25:49:
                    62:d8:75:87:df:dd:c0:95:82:07:8c:9e:1d:d6:d4:
                    22:f6:8c:e4:e0:a0:9d:dd:8f:40:83:5f:27:6b:21:
                    1e:ee:7c:d2:44:c5:63:93:b5:af:0f:30:a5:f7:51:
                    a8:cb:0d:44:8a:bf:f2:cf:40:1f:1c:b4:0a:58:10:
                    52:d8:b4:4c:0f:ff:be:a1:3f:75:2f:47:82:3a:a6:
                    6d:6b:8a:3b:4e:ab:79:57:f1:d4:dd:92:a5:c0:34:
                    fa:55:e5:18:73:78:67:c3:98:6d:56:5e:bd:4d:ca:
                    9f:f2:d1:7a:77:c3:16:10:c8:a8:54:83:3a:ec:ae:
                    d4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4F:FD:07:D2:16:03:83:81:0E:7D:D5:BF:76:22:AB:29:94:7B:C7
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/A0_9B9IWA4OBDn3Vv3YiqymUe8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.181.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:23:2e:5a:2b:f5:7d:76:67:1f:cf:aa:93:cc:10:a4:c9:3c:
         31:43:14:a2:a6:c6:18:28:93:e8:88:9a:d0:29:8a:00:c3:cb:
         2a:9a:b2:28:6d:3e:92:3a:9d:1d:25:a6:16:2d:c8:84:70:f5:
         c4:c5:91:45:d2:d5:d9:c3:45:60:0c:a9:a1:d6:bb:58:ca:6e:
         01:7e:46:5c:73:31:dd:e5:6d:61:02:e0:4c:2d:31:3e:9f:20:
         a2:30:f1:bc:48:60:ba:a8:5d:0d:f2:a4:c8:0f:f4:ee:8d:b0:
         7d:f6:b3:d4:49:d8:49:b6:72:78:b7:b4:81:47:a7:6b:ae:ba:
         04:4c:ea:05:3c:a1:79:65:6c:93:32:9d:c2:4c:f9:f9:a9:92:
         38:f0:b4:34:7a:d9:b4:a4:2e:fc:ac:c6:04:7d:28:6e:97:47:
         1b:63:36:30:01:13:71:a6:c4:09:dc:01:98:21:a9:78:6e:49:
         f5:f9:95:e8:45:56:41:31:cd:4d:fe:fe:26:f7:40:67:65:ac:
         2c:5c:64:d8:4d:3e:12:64:0f:7b:2f:f9:8a:f1:fc:a1:d5:54:
         f2:90:47:47:62:77:3a:c9:fc:f3:79:29:39:78:30:6a:8b:64:
         18:ef:db:54:57:71:51:d2:80:c5:10:9b:d5:e1:ad:d5:2e:d1:
         a9:d8:23:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net