Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/xg-0vuEzXVuzdiuzwktHQrOJlhc.roa
File:                     xg-0vuEzXVuzdiuzwktHQrOJlhc.roa (raw, json)
Hash identifier:          UnYr7lD0GNxJhvhS7k6elo5bcXBq3WKgu5KoJxG2aU4=
Subject key identifier:   C6:0F:B4:BE:E1:33:5D:5B:B3:76:2B:B3:C2:4B:47:42:B3:89:96:17
Certificate issuer:       /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial:       018CC64B56581BF68A21D1722388F9BBE750
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/xg-0vuEzXVuzdiuzwktHQrOJlhc.roa
Signing time:             Mon 01 Jan 2024 18:31:15 +0000
ROA not before:           Mon 01 Jan 2024 18:31:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     59413
IP address blocks:        37.110.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4b:56:58:1b:f6:8a:21:d1:72:23:88:f9:bb:e7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
        Validity
            Not Before: Jan  1 18:31:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c60fb4bee1335d5bb3762bb3c24b4742b3899617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d9:a7:13:70:41:97:68:f0:47:1c:a5:49:27:
                    6b:34:82:ae:75:59:d7:cb:27:bf:f9:28:94:53:29:
                    76:e5:92:84:57:83:e0:6f:7c:ae:1a:ef:bb:cc:93:
                    c8:26:c5:46:b9:cd:19:4f:c5:1f:8d:58:f3:33:fd:
                    ea:d7:91:7a:6d:10:f1:ec:7d:8a:48:bb:b4:96:28:
                    96:8e:2a:1d:16:5c:b1:43:d8:ea:d2:6b:24:dc:29:
                    d5:c2:9d:d2:9a:cc:42:df:5d:4f:b5:ec:22:ac:39:
                    38:29:51:80:bc:7e:05:a0:56:d4:90:07:4d:39:bc:
                    35:e9:7c:e8:2a:2a:0b:1e:56:09:67:a6:99:5f:82:
                    ec:66:f7:ac:3a:db:e9:57:a2:d7:9f:41:56:17:7d:
                    b4:4a:16:58:a4:ac:25:ce:22:31:23:70:f8:c3:7b:
                    1a:9b:8f:79:40:de:0a:aa:c9:cf:3b:fd:49:58:09:
                    f0:1a:20:f2:35:b2:88:b6:41:0f:6b:2d:49:db:53:
                    b7:ca:6a:12:67:9f:84:a3:72:e3:23:39:b0:a0:fb:
                    6a:da:34:56:da:49:aa:6d:15:0d:ba:db:57:26:25:
                    02:d5:85:d6:ac:e0:8d:21:78:92:89:c7:16:31:de:
                    98:9f:38:a5:f4:82:4e:a7:10:59:df:18:94:82:d3:
                    ae:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0F:B4:BE:E1:33:5D:5B:B3:76:2B:B3:C2:4B:47:42:B3:89:96:17
            X509v3 Authority Key Identifier:
                keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/xg-0vuEzXVuzdiuzwktHQrOJlhc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.110.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:aa:7d:a8:d1:fd:ee:f8:5f:31:de:7f:cd:3f:c7:37:53:e3:
         bc:e4:3d:48:25:2e:95:5f:0c:a9:a4:e5:99:95:c6:20:c1:ae:
         6c:09:af:ed:ec:94:bc:e5:a0:18:6c:14:69:e2:63:4f:8b:da:
         41:b9:01:1e:28:06:3e:1b:17:3a:a7:4c:c1:4c:0b:37:b5:88:
         f5:ac:dd:e0:b9:19:07:e0:0b:78:7c:32:71:80:5e:ef:15:78:
         4b:ba:d1:10:f0:0f:77:1c:77:11:e6:17:63:09:37:54:40:fc:
         10:12:7b:9f:55:47:0f:40:db:32:22:b7:ee:75:33:0b:ca:1b:
         92:90:f6:27:e4:b4:e6:5d:d1:c2:c6:0f:49:8c:e8:64:a3:a7:
         a9:5e:34:e4:80:18:36:ab:68:f8:89:9f:2f:66:b0:42:2e:8e:
         c8:a6:e3:ab:24:46:0b:00:c9:df:5e:63:9d:a1:07:57:57:64:
         ea:8b:d3:96:35:f0:f5:b7:41:74:37:28:c3:2c:4d:74:dc:20:
         90:30:34:d7:48:0d:e3:cf:53:7f:5b:5b:09:30:c4:1c:f2:62:
         99:a2:6b:f2:f6:16:d0:84:64:f2:97:32:a4:d3:ba:b3:a5:89:
         d8:2f:79:a2:86:e5:31:d0:d0:29:35:38:c0:e9:b6:16:56:95:
         d6:33:cb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:48 2024 by rpki-client on console.sobornost.net