Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/YijLZfZ1VVcQMfbO2kW4jsYTug8.roa
File:                     YijLZfZ1VVcQMfbO2kW4jsYTug8.roa (raw, json)
Hash identifier:          f055fbJfO/jOl/pVZwNG+0XakEEdz2iyjouPpXHwKII=
Subject key identifier:   62:28:CB:65:F6:75:55:57:10:31:F6:CE:DA:45:B8:8E:C6:13:BA:0F
Certificate issuer:       /CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Certificate serial:       01942747B271A2E10C240E9E46815F9F8B4F
Authority key identifier: B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/YijLZfZ1VVcQMfbO2kW4jsYTug8.roa
Signing time:             Thu 02 Jan 2025 13:49:57 +0000
ROA not before:           Thu 02 Jan 2025 13:49:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     200034
IP address blocks:        81.30.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:b2:71:a2:e1:0c:24:0e:9e:46:81:5f:9f:8b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b061bd3cca3d33645a276e0f3224ff89eee44857
        Validity
            Not Before: Jan  2 13:49:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6228cb65f67555571031f6ceda45b88ec613ba0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:03:f8:4a:dd:a2:62:20:c3:53:91:23:55:ca:
                    41:06:c7:6f:fa:42:86:27:8d:ae:81:79:d4:34:a8:
                    b3:2a:4b:3e:e2:21:9c:4e:ea:39:dc:0f:8f:3d:33:
                    3d:5f:5a:22:e8:9b:df:8c:6d:78:0a:52:3e:cf:f7:
                    e6:e7:96:e4:74:1e:49:7d:0c:58:ad:e4:9b:41:3d:
                    ae:90:e8:89:2f:57:69:e3:aa:1c:0a:50:7f:9b:47:
                    b0:00:43:70:64:17:d4:59:7c:e5:83:aa:23:60:85:
                    c5:8a:9e:38:8c:19:4d:30:1c:2e:10:10:8f:d0:b1:
                    a1:d2:f0:f8:99:e2:aa:17:95:59:d1:23:10:2f:8d:
                    34:8b:ce:17:00:34:cf:88:44:25:fc:9a:53:af:f9:
                    a5:7e:86:c6:b6:4d:14:9e:7d:c1:02:f2:9d:91:bb:
                    5b:8d:e9:d3:3f:4f:34:a3:e6:94:41:5d:6d:b5:fc:
                    44:26:99:d0:41:82:d6:57:b3:23:53:9b:4b:c6:a8:
                    dd:34:71:1c:32:0d:0d:40:97:41:a4:f4:4e:91:f2:
                    3e:2d:58:cb:b7:cd:39:1e:98:f5:9c:69:83:8d:1e:
                    57:27:34:6a:62:23:85:89:9e:aa:d7:de:2d:80:df:
                    d6:27:15:03:eb:ab:30:d9:e6:0e:6f:e0:99:25:39:
                    8a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:28:CB:65:F6:75:55:57:10:31:F6:CE:DA:45:B8:8E:C6:13:BA:0F
            X509v3 Authority Key Identifier:
                keyid:B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/YijLZfZ1VVcQMfbO2kW4jsYTug8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.30.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:42:6c:09:c0:5a:21:34:f6:8f:9d:75:19:da:43:39:87:66:
         50:90:3e:d1:1b:e4:19:78:8d:cc:20:72:69:30:5e:77:8c:80:
         04:fe:81:45:5c:65:e6:f7:fd:79:81:a3:e4:97:ff:9f:de:c7:
         4d:71:fc:71:ea:63:bb:c4:2b:c8:26:7c:da:d8:a5:1c:f5:75:
         60:db:8f:3d:28:92:e3:62:99:4d:97:b5:1c:57:49:bf:22:51:
         b7:1f:b3:f5:c3:6c:a9:63:64:2e:5d:d4:49:02:94:3b:ce:14:
         e4:c2:3b:20:91:97:14:d3:47:21:1f:93:b1:f3:f9:18:74:7a:
         5a:36:dd:91:e0:88:50:7e:96:c6:b1:ed:14:5a:86:1a:b4:1d:
         c1:26:62:8f:49:24:a0:15:95:83:e3:4d:f8:41:3a:b3:d1:a3:
         df:58:94:49:84:f7:dc:aa:6d:bd:04:e2:71:40:4d:b0:ab:76:
         13:bf:29:cc:1e:30:4c:7e:a9:35:54:df:06:69:42:ee:6c:94:
         ac:06:44:e5:ac:36:71:b8:58:3e:fd:71:59:61:3b:ef:16:9c:
         21:23:eb:bb:b3:c1:52:92:73:81:bb:91:82:4e:05:d4:96:df:
         87:ef:25:71:19:6b:2e:d0:e9:a2:d2:32:11:d4:5b:2e:e1:39:
         42:c3:6d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:27 2025 by rpki-client on console.sobornost.net