Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bcdbdc-d53f-4dc9-8e56-44c39fbc8cb8/1/Txker3NSt5jKhqHvbELRIg2COKU.roa
File:                     Txker3NSt5jKhqHvbELRIg2COKU.roa (raw, json)
Hash identifier:          HX2FmurfgaKXvW1pCzW3tE/3+GkeiYpJ/3qR0KzQKR4=
Subject key identifier:   4F:19:1E:AF:73:52:B7:98:CA:86:A1:EF:6C:42:D1:22:0D:82:38:A5
Certificate issuer:       /CN=2ba4eaaca41307d2e3d3ed93be86ffeaebe7599a
Certificate serial:       0194228D1FCB775FD2EE9A34173AFDE150EE
Authority key identifier: 2B:A4:EA:AC:A4:13:07:D2:E3:D3:ED:93:BE:86:FF:EA:EB:E7:59:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/bcdbdc-d53f-4dc9-8e56-44c39fbc8cb8/1/Txker3NSt5jKhqHvbELRIg2COKU.roa
Signing time:             Wed 01 Jan 2025 15:47:41 +0000
ROA not before:           Wed 01 Jan 2025 15:47:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     51295
IP address blocks:        193.29.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:1f:cb:77:5f:d2:ee:9a:34:17:3a:fd:e1:50:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ba4eaaca41307d2e3d3ed93be86ffeaebe7599a
        Validity
            Not Before: Jan  1 15:47:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4f191eaf7352b798ca86a1ef6c42d1220d8238a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8f:c4:25:61:02:eb:26:b3:a9:f2:1e:bf:5b:
                    9e:3c:1f:58:56:cd:a1:b1:32:8e:68:a7:df:b8:44:
                    88:5a:81:3c:5f:08:34:16:65:a3:3e:e6:a2:3f:c8:
                    44:82:ee:9c:1e:ae:c6:b8:f9:ee:e9:34:38:f6:d9:
                    c3:4c:7b:fc:dc:e0:4a:b4:6d:4f:cd:84:8c:c3:a2:
                    39:cd:ac:47:5e:7a:13:d3:36:75:de:df:19:77:ec:
                    1d:6a:68:67:1c:48:6b:87:f6:f8:e3:8a:56:38:dd:
                    2f:db:30:47:37:f9:56:77:c9:9d:9e:f0:a9:1e:ad:
                    6f:11:2f:96:d2:f5:9f:2d:09:72:a1:68:ec:de:e5:
                    1e:25:49:00:75:7a:29:3a:eb:fe:75:e3:3f:88:4a:
                    24:a8:0e:1e:24:3d:65:ab:0d:3c:87:53:b2:45:65:
                    50:13:39:a3:27:1f:90:1d:f0:d0:2c:d8:6e:6d:72:
                    09:9e:8a:a6:e7:8e:66:08:ed:1a:b3:23:90:f7:d5:
                    dc:02:e0:10:ca:b1:49:25:22:65:06:49:94:e4:68:
                    7f:0c:ee:2e:b4:41:a3:35:6e:eb:9c:9f:3f:3a:bf:
                    40:6d:2e:79:bc:f0:62:24:0a:1e:78:02:10:9b:f6:
                    4d:28:21:d9:6b:f6:b1:79:fa:b5:bb:5e:b6:37:57:
                    e8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:19:1E:AF:73:52:B7:98:CA:86:A1:EF:6C:42:D1:22:0D:82:38:A5
            X509v3 Authority Key Identifier:
                keyid:2B:A4:EA:AC:A4:13:07:D2:E3:D3:ED:93:BE:86:FF:EA:EB:E7:59:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bcdbdc-d53f-4dc9-8e56-44c39fbc8cb8/1/Txker3NSt5jKhqHvbELRIg2COKU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bcdbdc-d53f-4dc9-8e56-44c39fbc8cb8/1/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:5a:95:88:57:41:01:dc:42:63:32:e5:81:3f:46:b8:e4:81:
         bf:1e:9e:a7:91:b7:0e:fc:3c:b9:e8:33:9f:0d:a7:ba:50:1d:
         e5:e2:d4:1e:57:78:21:e4:0f:7e:b3:c3:03:0d:ae:1a:4d:fc:
         c4:25:99:d3:f8:06:70:bf:13:bb:c8:e5:2a:b3:a1:c1:5c:aa:
         9d:46:27:10:36:b6:24:55:3e:ab:28:d2:27:8a:7d:4a:a4:5a:
         69:06:6c:4d:7f:d5:60:11:e9:00:45:35:f2:dd:72:e1:10:27:
         f4:1e:1b:11:27:89:78:d5:31:ec:3c:15:16:f1:5d:5a:ff:58:
         7e:8b:a8:bd:e8:f4:57:f5:5c:a2:40:41:f5:b6:73:ed:c5:db:
         f7:30:a8:99:35:79:7e:ff:f6:9d:26:7a:b2:78:14:bf:c7:d7:
         d6:9e:b7:4e:2d:f5:ca:67:91:77:06:c1:74:90:b2:3c:e1:56:
         af:e2:86:f1:b6:30:30:64:a5:15:4a:b9:d6:d8:07:98:bc:29:
         d6:c6:ce:ee:c7:80:e5:3a:b9:e2:c7:b0:b3:40:9d:27:a4:63:
         ec:21:a8:d0:54:04:3c:fe:8b:1f:25:32:29:fe:6c:c2:f6:90:
         2c:0a:ea:3f:77:76:be:b2:7f:53:50:ce:88:b5:f0:7a:f5:97:
         bc:ff:0b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:05 2025 by rpki-client on console.sobornost.net