Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/I9DHGKx_AzmEJdMn8QvC9F9ySxQ.roa
File:                     I9DHGKx_AzmEJdMn8QvC9F9ySxQ.roa (raw, json)
Hash identifier:          dPotTh32y5QoI9nrsrf5Jji9m8QedErHZ0IgteKV744=
Subject key identifier:   23:D0:C7:18:AC:7F:03:39:84:25:D3:27:F1:0B:C2:F4:5F:72:4B:14
Certificate issuer:       /CN=ef75517b3161a047762413301614217679a82608
Certificate serial:       01942748017E367BB75B5B465D1888BF8A42
Authority key identifier: EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/I9DHGKx_AzmEJdMn8QvC9F9ySxQ.roa
Signing time:             Thu 02 Jan 2025 13:50:17 +0000
ROA not before:           Thu 02 Jan 2025 13:50:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49556
IP address blocks:        185.93.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:01:7e:36:7b:b7:5b:5b:46:5d:18:88:bf:8a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef75517b3161a047762413301614217679a82608
        Validity
            Not Before: Jan  2 13:50:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=23d0c718ac7f03398425d327f10bc2f45f724b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3d:43:fe:33:ea:e0:c7:72:82:b5:ae:7e:78:
                    a4:58:4a:34:31:44:c1:dd:1c:f1:c4:a2:f8:04:34:
                    fa:25:af:1c:f8:12:1b:eb:97:80:93:40:e6:9b:35:
                    88:9d:db:2e:99:a4:25:06:90:4b:3b:a5:4c:9f:62:
                    7b:75:3c:ea:72:44:ca:f5:e2:bc:c6:22:54:1b:16:
                    f1:7f:83:66:30:94:57:ac:f4:14:dd:80:a2:e1:14:
                    ba:03:06:04:a9:35:91:5f:a7:95:44:f4:69:3a:de:
                    af:a6:3b:c1:be:7c:67:5b:c4:39:03:cf:1c:2e:59:
                    c0:95:f4:f0:20:92:cc:b9:dc:35:55:d7:78:97:c1:
                    a8:59:b0:ab:56:47:4d:c8:ba:31:9f:88:5f:2a:22:
                    63:10:3f:8d:da:46:d6:db:15:6d:23:4c:15:f4:01:
                    22:c3:62:12:c3:8d:83:ff:02:69:40:47:20:07:d5:
                    bc:1b:a8:28:e5:70:94:96:07:97:a7:e2:ed:3e:16:
                    88:a8:41:93:b7:24:2e:0c:73:c3:da:d6:6a:0c:f1:
                    40:c2:de:1f:b3:61:28:8c:8d:03:ff:74:e5:f6:7d:
                    06:64:2a:6b:55:8e:af:66:7c:2a:c0:9c:75:f4:f4:
                    e9:e7:9e:e1:05:31:70:46:f9:b3:ea:ad:76:f9:1b:
                    46:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D0:C7:18:AC:7F:03:39:84:25:D3:27:F1:0B:C2:F4:5F:72:4B:14
            X509v3 Authority Key Identifier:
                keyid:EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/I9DHGKx_AzmEJdMn8QvC9F9ySxQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.93.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:df:a7:80:30:34:ce:bb:64:0b:0b:e1:8a:9b:1f:f7:19:a1:
         65:6c:23:f0:76:a5:a0:ef:45:0a:a8:b3:bb:16:03:e1:2d:7d:
         1a:e3:64:ef:8b:c1:bb:c6:cd:c8:74:4d:b5:ac:bd:35:1b:a4:
         74:8b:1e:4c:c1:e2:3e:1f:5c:39:d9:c8:d0:cf:08:13:67:db:
         78:bc:26:77:60:59:5f:01:39:55:7a:85:f1:15:2f:6f:39:3a:
         bd:27:f7:4a:13:df:64:08:86:4d:df:81:44:f1:c7:ef:04:cf:
         f8:30:76:02:d2:ab:83:46:6a:1b:89:3a:14:21:85:f6:e6:e4:
         82:bf:64:f9:25:af:29:2c:97:a2:68:cd:b9:8e:10:fb:9e:1d:
         bd:93:36:23:a8:60:93:18:74:fc:94:09:1b:a4:e2:f8:c4:c0:
         d7:7f:e0:70:6b:bb:95:fe:b8:f0:48:dc:66:b1:8c:c2:b5:a1:
         a6:bd:37:11:fe:e8:e7:db:b2:26:c2:ae:23:fe:d5:e2:1a:31:
         c7:ba:61:a1:45:9f:b0:e3:b6:47:c5:2f:3b:4c:0a:e4:b9:de:
         46:ca:f4:77:7b:24:72:e4:0c:ac:70:0a:8e:40:ac:63:b7:57:
         d0:38:68:75:cf:e5:85:f7:65:04:f4:f3:54:60:91:0b:66:0d:
         de:ea:65:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:54 2025 by rpki-client on console.sobornost.net