Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/E6bot_tKJqCzADpBxFeKtsutgCs.roa
File:                     E6bot_tKJqCzADpBxFeKtsutgCs.roa (raw, json)
Hash identifier:          IzVVajCV/IB0bxI8d5Bqo7CZjFjDagAuPrwaJPvu9o8=
Subject key identifier:   13:A6:E8:B7:FB:4A:26:A0:B3:00:3A:41:C4:57:8A:B6:CB:AD:80:2B
Certificate issuer:       /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Certificate serial:       01942143A773B25D34F9BBF4D0CD73207C3F
Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/E6bot_tKJqCzADpBxFeKtsutgCs.roa
Signing time:             Wed 01 Jan 2025 09:47:49 +0000
ROA not before:           Wed 01 Jan 2025 09:47:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     6730
IP address blocks:        91.213.4.0/24 maxlen: 24
                          91.214.168.0/22 maxlen: 22
                          91.214.168.0/24 maxlen: 24
                          91.214.169.0/24 maxlen: 24
                          91.214.170.0/24 maxlen: 24
                          91.214.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:a7:73:b2:5d:34:f9:bb:f4:d0:cd:73:20:7c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
        Validity
            Not Before: Jan  1 09:47:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=13a6e8b7fb4a26a0b3003a41c4578ab6cbad802b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:41:1f:19:0d:45:1c:f1:b6:e2:11:d5:74:29:
                    9f:e3:b1:e2:1c:f6:6d:f9:60:9e:cb:37:c6:8b:a4:
                    de:89:a4:4c:d6:29:74:f6:49:da:71:9b:2e:41:59:
                    e6:0f:b9:42:5e:84:4e:f7:35:b4:4d:b6:da:34:06:
                    6e:72:da:70:32:52:b9:e5:85:b5:47:28:c4:11:5a:
                    0b:57:11:37:3d:6d:22:b7:18:00:cd:1b:27:f2:c7:
                    86:23:2e:4a:53:86:49:e6:d5:a0:85:d5:94:e0:fd:
                    aa:da:83:9c:41:6e:e6:04:da:82:29:04:18:e0:cc:
                    6a:65:15:fa:06:ef:97:7c:03:bb:21:41:25:97:36:
                    da:16:d6:e7:71:42:1b:0f:a6:c9:c5:99:b4:d3:5a:
                    4f:22:86:ce:ef:bb:db:e3:70:51:63:81:ae:8f:b4:
                    b8:76:8c:bc:a1:91:60:ab:0b:44:26:b8:56:92:0e:
                    b3:e9:3a:3b:ee:b4:91:30:b2:c7:42:c2:9f:0e:eb:
                    c8:bb:ca:0d:e8:90:f4:66:1a:f2:a4:65:b3:01:6f:
                    37:74:d9:d9:31:75:e6:b9:22:46:38:4c:08:41:cf:
                    ff:4f:be:06:81:7f:12:75:3e:5b:95:be:80:b7:88:
                    dc:58:8e:b8:41:e8:44:01:50:6e:9d:0f:66:e3:c2:
                    40:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A6:E8:B7:FB:4A:26:A0:B3:00:3A:41:C4:57:8A:B6:CB:AD:80:2B
            X509v3 Authority Key Identifier:
                keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/E6bot_tKJqCzADpBxFeKtsutgCs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.4.0/24
                  91.214.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:8f:1e:b5:78:f7:10:00:52:18:54:d4:2c:9e:5f:04:be:4d:
         60:75:b7:d4:52:c1:c5:5c:d0:29:83:73:bf:26:88:e3:bc:e6:
         9d:d4:65:57:df:2b:dd:b7:c2:81:e4:3f:37:55:af:57:52:a1:
         b2:c6:3e:9f:74:4b:9b:61:c2:b6:f4:5d:8f:ba:3d:99:8a:cf:
         ad:78:8d:04:40:d5:a5:65:57:54:e5:68:0f:3b:cb:b5:a8:18:
         38:69:f0:53:a5:29:1d:f8:96:ce:46:92:a9:dc:6d:86:7d:17:
         df:42:5d:84:dc:29:43:ba:98:09:2c:a8:71:82:b0:78:9f:82:
         4e:a6:85:a4:6f:00:37:8e:d0:9b:aa:f1:18:82:54:5f:eb:0d:
         e8:a7:d1:46:7d:a1:f0:18:28:41:5b:d6:cd:a4:7e:7a:27:cd:
         34:ce:c4:9f:c6:f5:f1:cd:84:10:cc:16:f0:d5:5e:fc:01:89:
         9d:35:40:6e:d1:08:d3:19:f8:3e:53:0f:d8:53:b4:9e:c4:08:
         36:8b:4b:41:f0:41:69:5d:d6:e5:4b:46:c9:86:7e:f1:c9:15:
         5b:7c:0d:c4:51:5b:de:02:62:21:cd:a5:17:21:b4:77:da:ac:
         76:ff:48:3f:ab:27:59:58:ff:a6:b9:d0:8c:36:2b:14:22:f5:
         97:23:dc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:32 2025 by rpki-client on console.sobornost.net