Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/nW9JmwgiiGAVB_K1nO2cWSvmKyY.roa
File:                     nW9JmwgiiGAVB_K1nO2cWSvmKyY.roa (raw, json)
Hash identifier:          TXBtN/KFQ2Gy96mdP11tBg++FsQ+5qL+BiMyEx1qPZo=
Subject key identifier:   9D:6F:49:9B:08:22:88:60:15:07:F2:B5:9C:ED:9C:59:2B:E6:2B:26
Certificate issuer:       /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial:       019424B3BCF0AB56107F9272F1ECFDACC5F0
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/nW9JmwgiiGAVB_K1nO2cWSvmKyY.roa
Signing time:             Thu 02 Jan 2025 01:49:06 +0000
ROA not before:           Thu 02 Jan 2025 01:49:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     6750
IP address blocks:        194.145.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:bc:f0:ab:56:10:7f:92:72:f1:ec:fd:ac:c5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
        Validity
            Not Before: Jan  2 01:49:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9d6f499b082288601507f2b59ced9c592be62b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:dc:fc:6b:5e:a2:86:20:13:b6:5b:d5:f8:02:
                    d8:26:c8:c1:a6:d2:a7:43:5e:6a:77:fe:0b:ba:62:
                    b0:ac:58:1a:ac:e7:31:0e:88:f8:47:5e:c6:78:8c:
                    ac:02:3b:60:63:bc:39:44:e1:c5:6d:14:2e:4b:a0:
                    b9:bf:de:29:35:63:d9:fa:a9:72:3c:bf:46:48:e8:
                    e5:61:67:08:c3:a2:37:f4:9e:8c:63:b8:39:54:ed:
                    db:56:f3:61:fe:6e:7b:b5:ff:d3:61:16:62:0d:ae:
                    eb:50:7b:b4:87:67:cf:29:e4:b6:ef:6c:18:82:44:
                    4f:e1:71:ee:33:b9:a7:e9:e8:91:0a:e0:5c:32:48:
                    46:79:a7:eb:82:2a:d5:77:37:16:15:d7:9c:74:e6:
                    11:3f:b3:65:07:c9:87:10:b4:83:68:41:6e:69:67:
                    a3:74:e3:33:4e:83:fe:33:94:30:7c:d2:91:8f:24:
                    a6:a3:d5:dd:2a:c8:88:b3:a3:ae:ee:09:4f:5f:eb:
                    78:d1:82:e6:f4:17:f6:00:4a:85:8d:6b:b6:1d:af:
                    d0:5c:50:ac:ef:ee:f9:98:99:af:98:08:9e:9f:cf:
                    6e:f4:28:30:e3:19:58:4e:03:45:27:6a:8b:5d:2f:
                    ed:df:72:51:18:3d:ca:04:3f:44:ef:49:c8:d8:38:
                    eb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6F:49:9B:08:22:88:60:15:07:F2:B5:9C:ED:9C:59:2B:E6:2B:26
            X509v3 Authority Key Identifier:
                keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/nW9JmwgiiGAVB_K1nO2cWSvmKyY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.145.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:9a:d8:00:6c:35:2c:a2:88:a5:72:5f:56:ef:d5:18:68:8e:
         80:3d:66:2c:29:16:a2:a4:7a:ff:15:6d:6d:98:7e:41:98:d2:
         a1:31:fa:87:15:02:ad:c3:fa:5b:73:5b:3b:49:17:fb:f8:6a:
         81:b9:9e:e3:f3:d7:c6:32:6a:16:82:ef:d4:7e:54:f6:46:d4:
         5d:05:e0:25:d9:ea:7a:a4:96:81:bc:b5:0a:f3:95:75:91:46:
         e2:85:5c:42:6a:15:45:43:b4:26:ff:04:1c:27:8d:6f:ee:37:
         8e:21:0a:4f:ef:c8:1e:03:17:de:5f:51:20:1c:a5:fb:dc:92:
         50:23:78:c4:02:97:70:95:7a:6f:de:76:c3:bb:fa:75:9d:64:
         da:fe:01:7a:ed:76:aa:13:5a:33:ea:ce:f3:24:38:85:ca:be:
         0e:69:f9:c1:a5:fe:e0:a4:23:ab:4f:e6:e6:78:62:82:70:df:
         02:1d:08:94:42:7c:ce:66:32:67:18:e3:fa:d5:3c:f9:6b:38:
         5b:6b:a8:25:9f:bb:d5:bf:29:3e:1f:97:ba:38:7c:67:e0:05:
         42:6e:86:c0:c0:68:e2:55:cb:fb:2f:d1:df:f1:80:96:58:cf:
         41:a2:52:0f:7e:7b:83:d6:4a:66:ea:7b:70:e4:a7:91:51:9b:
         d7:b9:9a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net