Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MFuSjMaEcH_KfJOuOTM_egeHxuM.roa
File:                     MFuSjMaEcH_KfJOuOTM_egeHxuM.roa (raw, json)
Hash identifier:          gSvthfvoW6hKh161OH6a/3I+TpE1mQXg8q3eHq/8gkU=
Subject key identifier:   30:5B:92:8C:C6:84:70:7F:CA:7C:93:AE:39:33:3F:7A:07:87:C6:E3
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       01942143B813B2643DF61A4331507916B55B
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MFuSjMaEcH_KfJOuOTM_egeHxuM.roa
Signing time:             Wed 01 Jan 2025 09:47:53 +0000
ROA not before:           Wed 01 Jan 2025 09:47:53 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     199648
IP address blocks:        194.181.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:b8:13:b2:64:3d:f6:1a:43:31:50:79:16:b5:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Jan  1 09:47:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=305b928cc684707fca7c93ae39333f7a0787c6e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cf:af:19:db:27:65:a3:0e:eb:62:0c:fb:d2:
                    96:74:e3:79:17:8f:ee:8b:ac:ed:84:ea:14:8e:f2:
                    7c:ce:6d:56:2e:57:a2:f6:fe:6d:d2:13:29:b7:94:
                    57:e3:8d:f5:9e:2b:66:16:79:4c:df:3e:34:b4:5f:
                    f3:51:d8:e5:89:dd:a7:f5:87:a9:b9:8a:1f:cd:37:
                    6b:f3:6e:45:d6:76:30:da:21:ec:05:10:f7:d3:7d:
                    03:83:2b:1e:87:86:7f:c9:4c:8e:3c:2f:bd:6d:ed:
                    2c:4e:12:33:a1:ab:03:d5:e6:a0:a5:c4:c0:d3:7d:
                    a3:d8:8e:be:4a:33:1f:10:91:7c:2d:6f:0e:84:84:
                    79:1c:22:04:1a:18:d8:0a:8f:2d:39:f4:86:75:72:
                    ed:0a:0b:7f:a6:2a:7d:fe:b6:f4:80:27:35:59:79:
                    ee:31:20:dd:13:8d:d8:ca:1d:d9:92:34:b0:52:ca:
                    b5:51:06:79:98:26:75:9d:d0:f9:34:c7:df:43:b5:
                    d3:41:ad:40:2b:72:c6:84:36:0e:c6:a4:3c:82:bb:
                    45:36:25:1e:ac:0b:e8:2d:ef:43:37:16:bc:d5:3c:
                    60:81:dd:99:05:1a:d3:e5:80:f9:cd:e7:0c:00:eb:
                    cd:9d:d1:42:41:89:51:2a:1c:92:2a:3d:61:9b:3c:
                    1e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5B:92:8C:C6:84:70:7F:CA:7C:93:AE:39:33:3F:7A:07:87:C6:E3
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MFuSjMaEcH_KfJOuOTM_egeHxuM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.181.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:d2:51:59:cd:59:3d:2d:39:c5:0e:ef:8a:b3:31:3b:13:ac:
         09:ec:3b:31:e2:fb:66:92:30:e2:52:ca:c5:19:f8:a3:bf:1c:
         ba:2c:c8:f9:95:0a:a7:9a:75:83:b0:f4:e3:93:53:63:cc:38:
         9a:2a:fd:a4:08:f6:06:8c:ad:cb:f2:64:ea:79:06:c2:b5:b5:
         d5:0d:18:fc:3e:0e:79:fb:9e:09:0e:ef:99:9c:5f:85:8b:99:
         ef:66:34:89:a4:d5:bc:55:bc:43:18:67:b7:f1:1d:e0:d0:81:
         90:87:9d:ad:14:45:3f:80:c0:95:5b:06:f6:28:fb:c2:f9:5f:
         bf:62:80:da:8d:77:01:07:bc:4c:18:e0:ab:bf:54:11:7a:c9:
         83:ce:06:79:f5:84:43:a6:f1:e6:01:6e:d5:77:2b:91:4c:ba:
         62:cd:fc:1b:09:f5:50:06:c6:d0:1d:fb:22:b0:26:f4:16:85:
         a4:5e:bb:c2:75:fd:b8:af:38:c0:f6:24:77:3e:27:4f:48:75:
         61:5e:92:a3:02:a1:d6:61:2b:7b:5c:db:e2:7f:bb:c0:8d:2e:
         95:37:1b:01:6e:f5:e7:94:d0:40:86:4f:f2:84:b1:b6:3c:7f:
         a8:f2:e6:f7:d6:fe:de:28:df:5d:eb:dc:b1:5f:2c:32:8b:39:
         0f:97:5a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net