Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/ZOtVlpNsNb2GW_q8fIDEsjZxVxI.roa
File:                     ZOtVlpNsNb2GW_q8fIDEsjZxVxI.roa (raw, json)
Hash identifier:          7rk9xKdNHSzQfO5JviAoxrgWG4fOvZM81G7lqkgVRGQ=
Subject key identifier:   64:EB:55:96:93:6C:35:BD:86:5B:FA:BC:7C:80:C4:B2:36:71:57:12
Certificate issuer:       /CN=616014101ffbce675139cd4c02ba00634ad86e02
Certificate serial:       018CC64B63AFF6311A6A8BB5C37E37A1A354
Authority key identifier: 61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/ZOtVlpNsNb2GW_q8fIDEsjZxVxI.roa
Signing time:             Mon 01 Jan 2024 18:31:18 +0000
ROA not before:           Mon 01 Jan 2024 18:31:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204896
IP address blocks:        2001:67c:17c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4b:63:af:f6:31:1a:6a:8b:b5:c3:7e:37:a1:a3:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=616014101ffbce675139cd4c02ba00634ad86e02
        Validity
            Not Before: Jan  1 18:31:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=64eb5596936c35bd865bfabc7c80c4b236715712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:73:0d:65:e4:3e:49:ab:99:6b:28:cb:de:e1:
                    4a:6f:ea:ec:9b:79:a8:79:d0:a8:cb:28:1d:81:00:
                    a9:3f:9b:a6:87:1d:17:81:c8:3a:4f:04:0e:55:ef:
                    e2:74:c1:a4:08:73:18:0a:76:ef:58:a7:9c:6e:bb:
                    93:e6:0c:94:e8:82:1b:3d:1b:65:89:36:f0:2b:ba:
                    d0:04:14:8f:6f:54:e0:17:0b:20:0a:d3:06:88:2b:
                    be:56:2b:7a:6d:1c:84:41:20:53:ac:b5:a3:79:f9:
                    77:20:21:2c:3d:e6:5b:51:bc:0b:09:fc:cc:f0:84:
                    ca:a3:47:b8:3b:3b:86:8a:97:ce:a2:5f:4f:b2:a8:
                    a8:8e:97:27:2f:6a:5a:2b:4b:0d:f1:d8:b3:75:81:
                    9a:37:d2:72:32:44:d6:e7:94:7a:50:76:2d:08:98:
                    83:64:76:57:90:3c:84:85:94:fe:ff:33:76:ec:f0:
                    da:f8:e4:77:b7:28:8e:37:07:1c:88:63:53:fb:bd:
                    db:ca:49:28:9c:8c:2e:3f:db:c2:9d:72:c6:64:92:
                    e5:d0:16:3a:62:6d:a7:52:61:67:6e:2f:52:7e:46:
                    54:9f:43:aa:37:be:11:b3:12:77:ac:27:fd:6a:60:
                    a0:bf:bb:03:72:45:74:19:bc:7a:df:23:ab:91:eb:
                    56:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:EB:55:96:93:6C:35:BD:86:5B:FA:BC:7C:80:C4:B2:36:71:57:12
            X509v3 Authority Key Identifier:
                keyid:61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/ZOtVlpNsNb2GW_q8fIDEsjZxVxI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:17c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:17:c7:54:dd:7f:76:c9:1a:20:12:71:e4:d7:aa:08:87:1a:
         58:db:27:7d:12:43:41:ff:a9:cb:fe:45:e8:1a:87:e7:50:ec:
         58:05:73:4f:8e:6b:f2:4d:40:01:f3:e3:7f:4a:c0:a0:aa:3e:
         6c:21:c7:04:52:ef:90:c1:12:5a:2a:fe:ca:d3:9a:5f:69:93:
         a5:4c:8c:ff:65:e2:a1:bd:d7:3c:77:01:4c:88:d1:c9:d2:8a:
         70:dc:66:ef:11:5e:58:a3:94:0e:95:23:68:e1:48:1e:f1:5b:
         39:a1:19:6a:99:10:00:c7:75:b3:5f:7e:2f:64:e2:7d:71:b1:
         dc:cc:a8:42:bd:15:74:cd:60:f6:86:c4:6e:84:da:c6:5d:90:
         1b:c3:16:75:fc:07:82:fd:d1:f1:80:bd:3f:d3:33:53:a4:36:
         73:23:80:c7:85:a7:be:05:86:05:e2:8d:c0:4e:39:41:3e:07:
         13:9b:fc:fc:e4:42:cc:ef:c1:36:40:6e:69:cc:a9:da:b2:a5:
         3f:be:0a:14:5b:33:92:fa:70:08:21:a8:af:bd:6e:ba:14:3b:
         23:31:a4:3e:7e:95:a8:fa:d3:b3:19:90:3d:f7:15:29:f1:23:
         7b:7c:1a:a9:39:50:5b:c2:02:a2:b2:00:91:b0:f7:5c:6a:29:
         9a:b6:48:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:48 2024 by rpki-client on console.sobornost.net