Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/F2uITNu1PZNUmusi91Ke733wGf8.roa
File:                     F2uITNu1PZNUmusi91Ke733wGf8.roa (raw, json)
Hash identifier:          3vwk9Z7TvNwvsLZES2ih3ivleE8KPvyuVHfW4JEi938=
Subject key identifier:   17:6B:88:4C:DB:B5:3D:93:54:9A:EB:22:F7:52:9E:EF:7D:F0:19:FF
Certificate issuer:       /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial:       0194266C156FA6CBEEC6FB5C263C7F7C1F74
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/F2uITNu1PZNUmusi91Ke733wGf8.roa
Signing time:             Thu 02 Jan 2025 09:50:05 +0000
ROA not before:           Thu 02 Jan 2025 09:50:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     6774
IP address blocks:        80.231.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:15:6f:a6:cb:ee:c6:fb:5c:26:3c:7f:7c:1f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
        Validity
            Not Before: Jan  2 09:50:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=176b884cdbb53d93549aeb22f7529eef7df019ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:29:6c:8b:5d:00:d7:a1:d1:ae:fb:96:ad:de:
                    6d:cc:a4:4e:b1:08:37:6b:b7:67:de:49:02:4b:97:
                    74:5a:13:a1:53:41:69:ae:94:de:24:51:cc:3e:fb:
                    0a:1f:da:d2:05:ce:b3:91:17:6a:f3:29:58:88:95:
                    7a:14:be:a9:08:f3:fa:9e:b5:31:24:ba:fa:32:ee:
                    52:6a:22:f5:34:cc:72:39:21:5a:5c:54:af:18:56:
                    b1:b8:0e:cc:b7:aa:f2:7f:60:5f:c5:c1:51:6c:87:
                    c0:32:e8:ac:e3:4c:16:85:b6:f2:4e:24:2e:61:b5:
                    5c:7d:d6:07:90:cf:1b:d5:f6:13:74:19:93:19:6c:
                    ec:cf:12:ca:41:74:cb:95:2d:53:22:21:2e:4a:7f:
                    ed:23:85:1a:0f:19:84:ab:2f:91:13:b1:e1:73:ec:
                    78:1c:86:4a:bc:a4:3b:0e:1b:f9:ee:fe:4f:34:14:
                    bb:a1:ac:57:c6:bd:4c:1a:33:b6:5a:77:08:a9:6c:
                    8b:71:fd:f4:df:f2:d0:72:95:7f:32:9f:c6:72:7e:
                    13:fe:57:ef:ff:d2:68:d5:01:90:d1:c2:88:d1:6d:
                    3b:a2:63:7c:d5:2b:75:9b:0f:3f:6e:32:77:65:45:
                    b6:d0:19:21:2d:a6:24:23:87:82:20:cb:b1:31:a1:
                    a2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6B:88:4C:DB:B5:3D:93:54:9A:EB:22:F7:52:9E:EF:7D:F0:19:FF
            X509v3 Authority Key Identifier:
                keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/F2uITNu1PZNUmusi91Ke733wGf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.231.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:b8:7f:e5:b9:6c:58:66:68:7a:a3:b6:5f:c4:11:5f:b9:b8:
         e1:1c:cf:f5:b7:21:d8:ab:e6:f6:7a:15:00:96:81:c3:27:b5:
         89:70:f2:a4:9d:b4:9e:5f:f8:de:bf:e6:67:90:87:6a:cb:06:
         94:b2:03:4c:bf:8b:e2:0f:b2:5c:bc:2f:b3:6a:01:c7:72:2e:
         cb:85:9e:4e:f2:87:22:d7:91:49:8a:6c:aa:6a:6b:4f:42:e7:
         6f:7d:3b:9d:c8:53:f0:7c:e0:73:7c:a1:10:97:64:d2:5f:c8:
         3d:b2:e7:d0:ad:9b:83:e9:76:7f:36:c5:09:04:17:c2:7d:a8:
         dd:cd:c1:d8:c0:28:4b:34:56:f2:31:33:6d:7e:d9:ab:e7:0c:
         b9:16:62:27:af:6b:ec:b7:e6:ee:0d:32:83:f1:b4:4a:25:6f:
         0e:21:37:10:ee:b8:9d:73:46:4b:30:ef:41:8f:1a:e7:bf:73:
         18:e1:9b:09:2b:e9:9c:cc:99:bd:df:85:33:72:0c:a9:3f:da:
         35:4e:f7:e5:89:03:18:5f:47:fe:63:f1:13:4d:d4:b5:bd:45:
         12:86:6c:e5:5e:37:e3:39:db:bd:3c:2f:b4:79:59:0f:73:d8:
         54:3e:cd:a8:b5:b5:47:42:1e:21:be:f7:d3:3a:7d:52:f1:0e:
         51:8e:29:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:20 2025 by rpki-client on console.sobornost.net