Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/O5xF7oIJP6ZuWTlfTbgXmrc4NJ0.roa
File:                     O5xF7oIJP6ZuWTlfTbgXmrc4NJ0.roa (raw, json)
Hash identifier:          QWFj7XhcfXlw9g2/c/qBt7QiwxeumWX5goy59AVdHaY=
Subject key identifier:   3B:9C:45:EE:82:09:3F:A6:6E:59:39:5F:4D:B8:17:9A:B7:38:34:9D
Certificate issuer:       /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial:       0193F2FF1B392CC19EB98FFB78FD7BC4962C
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/O5xF7oIJP6ZuWTlfTbgXmrc4NJ0.roa
Signing time:             Mon 23 Dec 2024 10:10:25 +0000
ROA not before:           Mon 23 Dec 2024 10:10:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214201
IP address blocks:        81.26.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:f2:ff:1b:39:2c:c1:9e:b9:8f:fb:78:fd:7b:c4:96:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
        Validity
            Not Before: Dec 23 10:10:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3b9c45ee82093fa66e59395f4db8179ab738349d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f2:3c:32:d3:48:09:b8:64:35:15:d4:23:fc:
                    2d:39:11:9e:9c:6a:8b:a0:32:0e:b6:99:35:86:4d:
                    51:77:2b:a7:b0:ef:da:74:c3:15:ec:91:9e:5a:4c:
                    bd:f4:81:f0:ff:5c:9d:c7:2b:fc:fe:73:7c:02:5d:
                    5d:cf:08:d8:0a:41:8d:77:bd:59:3f:94:b0:ea:99:
                    5f:41:74:30:fb:9f:57:6f:5a:95:01:7f:54:88:d4:
                    88:c4:e0:a9:d9:0a:03:7b:32:43:ff:61:8f:b7:6a:
                    67:58:da:83:46:77:c9:99:c5:11:71:0e:79:6b:a6:
                    4d:9e:19:e1:d8:58:08:89:c6:25:c0:06:92:58:a8:
                    49:f8:da:ee:8c:f9:71:82:08:3a:53:32:76:03:98:
                    2a:61:5c:bb:14:5f:2b:5d:e8:56:8e:62:bc:62:7f:
                    c8:2f:93:34:b7:66:4e:9b:5b:c1:b9:dc:91:45:d4:
                    0f:14:03:8b:49:87:61:a3:23:be:81:c5:d3:ce:4a:
                    f3:1a:86:eb:22:3b:42:57:56:72:8d:3f:db:bf:c3:
                    eb:4d:9b:ae:fa:82:ab:ce:af:4c:ed:30:75:3b:a1:
                    4b:58:50:3a:47:c3:3f:67:66:5d:f7:29:91:82:03:
                    f4:7b:5c:3d:f6:a8:af:5a:a1:b0:48:75:44:22:8c:
                    cc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9C:45:EE:82:09:3F:A6:6E:59:39:5F:4D:B8:17:9A:B7:38:34:9D
            X509v3 Authority Key Identifier:
                keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/O5xF7oIJP6ZuWTlfTbgXmrc4NJ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.26.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:29:ac:b6:ee:a3:6b:fe:2b:a5:b0:81:01:96:66:b2:4a:31:
         63:76:5c:f2:3a:2d:69:82:b6:dc:77:42:ba:cc:12:fa:5e:e2:
         01:c0:df:86:e1:17:26:70:b0:63:fe:7c:dd:7e:f6:49:89:bf:
         6d:3a:02:f0:55:33:3d:37:73:f9:fc:5d:e1:da:b2:e0:48:ec:
         88:25:d6:9a:e1:0d:8f:26:f8:f1:97:26:74:16:3f:b7:21:d5:
         aa:89:75:99:5d:45:1f:fa:f1:5a:d9:e8:df:f0:94:90:c2:f5:
         55:38:6e:21:27:08:ab:98:f5:97:eb:d1:c6:61:92:db:94:ea:
         7f:26:81:72:29:4b:77:a1:39:fe:79:8d:20:02:bc:1a:aa:15:
         48:81:16:aa:57:14:35:1b:ee:c2:bc:0b:8c:95:f9:ca:e8:71:
         e7:ff:b9:18:bd:b9:96:34:b4:0b:e3:10:36:bf:59:64:03:3f:
         42:37:99:80:8f:5d:13:96:86:0d:08:95:3a:b2:aa:a7:e8:6e:
         3d:10:61:79:98:36:95:65:50:56:98:ef:cd:bd:00:b4:31:97:
         e7:ca:b6:b4:a5:69:16:e7:ce:95:ed:36:fc:0f:7d:f3:55:7f:
         6b:fe:99:44:29:20:6d:99:81:72:e6:1d:c5:25:e3:d4:41:9f:
         97:31:5d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:24 2024 by rpki-client on console.sobornost.net