Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/s6pjMkaUMJH3bmFXp69HLkN6HiA.roa
File:                     s6pjMkaUMJH3bmFXp69HLkN6HiA.roa (raw, json)
Hash identifier:          nbZzfTGEGLYlrEJQFB74A8uRuG/tPptj9lY9KUc17PU=
Subject key identifier:   B3:AA:63:32:46:94:30:91:F7:6E:61:57:A7:AF:47:2E:43:7A:1E:20
Certificate issuer:       /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial:       01941F8C1A6E63B8C26A32EB668007A42A58
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/s6pjMkaUMJH3bmFXp69HLkN6HiA.roa
Signing time:             Wed 01 Jan 2025 01:47:43 +0000
ROA not before:           Wed 01 Jan 2025 01:47:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207114
IP address blocks:        193.22.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:1a:6e:63:b8:c2:6a:32:eb:66:80:07:a4:2a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
        Validity
            Not Before: Jan  1 01:47:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b3aa633246943091f76e6157a7af472e437a1e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2b:05:55:00:e6:4e:b0:66:4e:64:be:af:4b:
                    bf:72:2b:4c:d9:8e:f0:96:38:1e:69:aa:89:ce:64:
                    99:47:ff:0e:35:a5:b4:e8:2a:e3:09:47:ad:8d:2e:
                    da:14:7a:e6:da:31:88:ec:43:b4:c1:14:17:e9:9d:
                    2c:de:e9:02:51:80:dc:a1:bd:c7:d7:bf:5a:08:39:
                    d6:8f:db:10:57:09:a7:4a:3e:10:3c:9d:e5:fe:b1:
                    3f:05:ce:ee:ba:ce:8b:20:87:07:71:16:e3:3b:5b:
                    fc:5b:d5:2f:83:86:5c:5f:44:30:26:a2:da:69:af:
                    e4:1a:62:1e:16:01:bd:fd:4a:d2:be:7c:5d:0f:03:
                    5d:26:87:d5:be:1c:d2:d7:c6:de:c6:f0:3d:99:6c:
                    6d:72:d3:ce:1d:cc:90:21:f1:23:db:6e:63:f5:bc:
                    1d:85:bb:ee:bb:f1:84:69:24:e4:b0:70:94:d6:25:
                    20:54:46:f0:95:41:27:0e:3b:59:0b:93:86:17:ea:
                    eb:79:3c:1f:64:ac:1f:48:99:a1:c6:83:4f:ff:50:
                    38:d3:45:0a:d0:cb:11:de:c2:24:a5:ca:c5:63:31:
                    34:5f:c7:c7:d7:e4:f4:12:0d:33:24:f9:97:7b:80:
                    55:ac:35:2d:54:7c:ba:49:38:7a:9f:61:df:2e:f3:
                    b2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AA:63:32:46:94:30:91:F7:6E:61:57:A7:AF:47:2E:43:7A:1E:20
            X509v3 Authority Key Identifier:
                keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/s6pjMkaUMJH3bmFXp69HLkN6HiA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:d1:2f:be:6e:52:1e:db:cd:0d:7c:db:d2:c9:0c:98:b0:71:
         28:b9:5a:2b:fb:6c:d7:a7:91:09:85:68:1d:2a:3b:67:37:85:
         b5:86:96:c4:15:c3:5b:8c:0d:eb:a5:37:ee:20:7d:f2:80:56:
         ca:f6:f9:98:06:42:31:51:38:a2:0c:56:05:56:08:73:81:4a:
         5a:51:5d:ae:b4:75:31:47:d9:2c:f1:84:13:96:b5:03:ca:fd:
         42:fc:60:89:e5:a9:28:6c:bb:1d:85:4a:7e:db:d7:cd:a0:f2:
         54:05:87:33:bc:5d:d0:c2:9e:42:6e:e7:5d:54:63:22:16:a2:
         28:09:df:95:e3:b9:f6:de:f5:55:81:e3:8d:3f:65:f4:05:23:
         08:a7:a8:31:e4:f2:78:b8:aa:d4:cb:cf:26:8d:8c:f3:15:3d:
         f3:00:c6:57:24:9f:4e:0b:59:ed:21:8f:35:40:05:08:11:6b:
         b6:4c:b5:8f:ca:88:11:d6:f8:47:03:2e:6b:10:29:e3:1c:90:
         b2:70:1a:45:80:6d:c8:b0:0d:ca:32:ca:f0:7d:6a:42:4d:52:
         d8:14:a2:13:00:93:e5:58:1f:e0:ab:a2:98:3f:18:07:c3:a2:
         58:62:4e:5f:cd:e2:fa:2c:f9:7d:16:c0:88:e4:b5:63:33:d0:
         7e:14:80:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:13 2025 by rpki-client on console.sobornost.net