Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/nQHHyJdR7VdyLzWRcfz9RjWluHI.roa
File:                     nQHHyJdR7VdyLzWRcfz9RjWluHI.roa (raw, json)
Hash identifier:          wUqU4JLfOQRJgBLADQ5dPAtFSDcyvb/QUfXXBvudqpE=
Subject key identifier:   9D:01:C7:C8:97:51:ED:57:72:2F:35:91:71:FC:FD:46:35:A5:B8:72
Certificate issuer:       /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial:       0195994E7179A9C01E46B4FD5D8D0BE3A15D
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/nQHHyJdR7VdyLzWRcfz9RjWluHI.roa
Signing time:             Sat 15 Mar 2025 10:16:49 +0000
ROA not before:           Sat 15 Mar 2025 10:16:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     61106
IP address blocks:        81.162.54.0/23 maxlen: 24
                          82.115.48.0/23 maxlen: 23
                          82.115.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:99:4e:71:79:a9:c0:1e:46:b4:fd:5d:8d:0b:e3:a1:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
        Validity
            Not Before: Mar 15 10:16:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9d01c7c89751ed57722f359171fcfd4635a5b872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ba:b9:75:10:cc:83:f2:a4:33:78:61:94:e5:
                    f8:80:35:70:00:4e:43:49:2e:57:bf:18:0b:be:8f:
                    f7:64:fc:fb:cb:43:8c:c3:83:1d:e7:5f:83:96:7f:
                    f8:ce:a4:b3:a5:02:d5:3b:23:bf:f2:06:e4:eb:b0:
                    91:9c:c2:c7:cd:8b:26:16:49:28:2c:47:73:27:af:
                    d7:32:97:72:05:ad:d7:cd:a7:7e:5c:c2:87:18:37:
                    e1:7e:22:92:71:0d:0b:0c:04:4f:1a:fa:6a:9c:5a:
                    01:6c:90:f3:cb:35:a6:c9:3f:c3:ef:e1:9f:2f:a7:
                    5b:a1:cd:2e:cf:b1:7c:bd:61:65:4d:71:9b:19:13:
                    f3:93:5e:34:40:93:5a:1c:99:40:c0:d4:28:fb:7f:
                    f0:ba:1a:e0:38:61:20:c9:48:12:71:c6:92:4e:43:
                    9b:63:1a:4f:b1:e0:b8:b5:d9:23:32:b4:e8:b8:24:
                    e5:f9:90:09:bb:6b:0e:31:52:84:87:41:96:01:8c:
                    54:6b:fe:67:13:b2:61:e0:69:1a:08:14:51:b9:fa:
                    56:e4:24:9a:58:63:c8:a4:31:a0:14:84:af:07:2a:
                    76:c1:9b:3f:71:85:4f:84:ae:6c:9b:ce:8a:f4:52:
                    89:54:6a:7a:f2:e8:be:cd:d3:8c:d5:37:bb:d5:37:
                    eb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:01:C7:C8:97:51:ED:57:72:2F:35:91:71:FC:FD:46:35:A5:B8:72
            X509v3 Authority Key Identifier:
                keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/nQHHyJdR7VdyLzWRcfz9RjWluHI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.162.54.0/23
                  82.115.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:de:05:9a:e3:0a:b2:30:3b:1b:58:f0:3d:10:11:51:b6:d1:
         45:f8:d8:43:07:d4:4f:bd:9d:83:95:10:7d:57:90:ea:2b:26:
         d3:6b:ab:33:59:a5:73:7c:02:57:ec:eb:e2:90:7a:ff:1a:1d:
         b0:a4:97:e5:41:3c:a4:11:17:af:27:2a:21:7f:3a:6d:db:aa:
         57:13:84:d2:71:18:51:2c:cd:f4:eb:e1:cd:01:24:12:d6:31:
         ea:99:2a:40:08:b1:2c:bd:33:0f:23:bb:7f:47:ee:ef:38:2c:
         05:1f:92:0e:b2:ce:c4:68:b1:d7:74:92:31:f0:26:e9:a0:41:
         6c:9a:c5:eb:42:f1:d0:85:7d:cc:10:1e:53:92:03:6b:66:40:
         ad:58:1d:8b:4e:eb:89:a2:76:0c:6a:c4:b0:97:b2:9e:89:09:
         8c:8b:cc:43:ad:c1:b0:40:cb:5b:2b:26:ea:2b:da:57:c7:65:
         2d:3a:cc:ec:69:ac:3e:a2:a4:a8:9f:cf:79:9b:eb:6d:5b:55:
         17:47:07:35:60:07:13:61:7a:c6:18:91:ae:c7:e4:cb:13:ec:
         63:38:52:a9:be:9e:24:41:de:8f:49:0d:10:08:bb:92:5f:08:
         0e:dd:c6:de:5b:e6:e8:29:0b:6d:8d:15:59:0f:1a:d2:88:af:
         01:1c:27:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 18:26:25 2025 by rpki-client on console.sobornost.net