Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/RmJWhAxRco_E7xVjUFT03f6Xzf4.roa
File:                     RmJWhAxRco_E7xVjUFT03f6Xzf4.roa (raw, json)
Hash identifier:          fQ9hdhF3VEd9Q8e/aZRy085yRuISqh5rUOV7wWDjEP0=
Subject key identifier:   46:62:56:84:0C:51:72:8F:C4:EF:15:63:50:54:F4:DD:FE:97:CD:FE
Certificate issuer:       /CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Certificate serial:       019423691E2A7B8C2AF0104D26ABCCB71FFA
Authority key identifier: 0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/RmJWhAxRco_E7xVjUFT03f6Xzf4.roa
Signing time:             Wed 01 Jan 2025 19:47:59 +0000
ROA not before:           Wed 01 Jan 2025 19:47:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     62364
IP address blocks:        193.39.4.0/23 maxlen: 23
                          193.39.4.0/24 maxlen: 24
                          193.39.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:1e:2a:7b:8c:2a:f0:10:4d:26:ab:cc:b7:1f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d026a518947dd5bd3981ed0669c11c5621d0475
        Validity
            Not Before: Jan  1 19:47:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=466256840c51728fc4ef15635054f4ddfe97cdfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3f:03:34:ce:1a:9f:b2:07:6f:bc:2e:dd:63:
                    3b:2f:05:27:08:e5:04:21:f1:d2:da:95:99:02:55:
                    7f:ae:6f:76:f0:f9:6a:43:0c:15:56:0d:a2:0e:2d:
                    5b:44:a2:a5:7e:b9:17:e7:81:1d:6c:c4:6a:40:e0:
                    3e:1f:2e:39:91:a9:6d:66:9d:73:8a:65:48:0a:c5:
                    c8:da:b4:73:e4:f4:7f:a4:56:09:4f:3d:5b:76:7a:
                    99:52:2a:88:a9:70:1d:dc:e3:37:8d:2a:c3:e6:12:
                    51:41:0b:e9:3a:d6:09:e4:01:3e:5f:97:7c:57:64:
                    ca:28:0e:f5:1f:87:f1:4a:cb:62:2f:b3:ca:48:25:
                    59:66:b1:4e:aa:d9:be:41:a6:bf:f1:cd:89:98:1a:
                    28:94:2b:ff:fb:d3:19:f9:7d:7a:8a:41:24:ca:f1:
                    dd:c0:0a:8e:98:30:51:aa:61:f8:45:b6:d5:ed:ac:
                    60:6e:cd:d8:4f:f9:1c:98:eb:73:b4:c0:c6:60:dd:
                    4e:fd:9c:aa:0e:a8:12:5c:a3:b7:c2:81:6a:11:6b:
                    fe:f5:56:1e:4a:cd:4e:0b:e3:29:bb:55:eb:80:3b:
                    c0:5b:c5:27:a4:34:73:98:82:78:0c:cc:03:f9:ee:
                    16:79:93:26:6f:ae:5f:84:c3:83:8d:39:24:fd:70:
                    d9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:62:56:84:0C:51:72:8F:C4:EF:15:63:50:54:F4:DD:FE:97:CD:FE
            X509v3 Authority Key Identifier:
                keyid:0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/RmJWhAxRco_E7xVjUFT03f6Xzf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.39.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ce:8a:b6:b6:24:df:40:fd:57:0f:80:29:fb:1d:b5:b6:f8:8b:
         c8:70:49:a3:47:09:9b:ce:d0:1c:89:9a:d0:55:72:87:5c:f5:
         58:f0:b4:e9:95:13:b3:55:e1:8a:e2:a8:02:71:f7:42:5f:fa:
         9e:70:db:5b:1d:f0:a2:7c:dc:12:6c:2d:31:4a:3e:8c:c6:99:
         95:fb:62:71:cc:e6:87:03:ad:b4:ef:2f:a6:ad:e7:60:42:d1:
         f4:e4:d8:a9:87:ef:98:b7:8a:72:42:58:53:bd:26:ea:17:81:
         8c:56:eb:f2:01:c2:70:ff:66:3b:08:1b:d8:c4:2a:c6:e2:45:
         61:5d:53:c8:7f:c5:35:d7:8f:7c:af:c0:fe:c8:69:a3:2a:6e:
         ff:3d:e3:8b:cd:ed:06:bf:dc:d5:27:74:7f:30:bb:ae:11:13:
         cf:91:9b:76:88:6b:8a:48:49:02:23:87:bb:63:6f:f4:15:63:
         5b:3d:d6:fe:11:4a:e8:59:a7:77:6f:db:89:9a:07:1e:c4:f0:
         6c:ca:7c:a4:74:47:30:5d:09:dc:6c:ad:ff:e4:8b:6a:69:31:
         1b:0c:04:37:91:48:4f:fe:b2:90:1a:55:08:f7:09:80:12:9e:
         8a:87:f1:75:40:da:30:d3:bd:7c:5c:bc:8a:05:27:cb:48:0a:
         49:b7:34:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:40 2025 by rpki-client on console.sobornost.net