Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/jr93hN4EhKSWYqIbECyoZXKfIBk.roa
File:                     jr93hN4EhKSWYqIbECyoZXKfIBk.roa (raw, json)
Hash identifier:          73KNAqHLsWX0NkD2n0f2jQTbbkk8jmsVt6nVH9n8jm0=
Subject key identifier:   8E:BF:77:84:DE:04:84:A4:96:62:A2:1B:10:2C:A8:65:72:9F:20:19
Certificate issuer:       /CN=8b613794927050b22525ab70091835408eee4c79
Certificate serial:       019420D613A3D5F1BF4D302CE2052CDB9CD4
Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/jr93hN4EhKSWYqIbECyoZXKfIBk.roa
Signing time:             Wed 01 Jan 2025 07:48:08 +0000
ROA not before:           Wed 01 Jan 2025 07:48:08 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     202574
IP address blocks:        193.57.17.0/24 maxlen: 24
                          193.57.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:13:a3:d5:f1:bf:4d:30:2c:e2:05:2c:db:9c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b613794927050b22525ab70091835408eee4c79
        Validity
            Not Before: Jan  1 07:48:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8ebf7784de0484a49662a21b102ca865729f2019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:19:ad:04:28:16:85:e9:05:3b:80:9a:39:e0:
                    82:64:8d:a7:d9:83:eb:8c:29:b7:78:d4:84:0f:35:
                    3a:ba:ac:f9:40:86:f5:b4:1f:3b:3f:b7:5b:30:9f:
                    a4:07:0a:48:af:26:48:83:0b:43:92:90:ff:a9:58:
                    4c:50:23:be:d5:53:10:00:43:c3:8b:68:2d:ce:53:
                    fc:00:84:d1:ac:a8:f9:e9:29:2f:43:66:f3:1a:8f:
                    95:12:12:25:30:c8:78:ca:d7:2e:24:1c:1a:fd:22:
                    1f:63:03:a0:e9:e1:b3:a8:29:b6:cb:3f:d5:a7:0e:
                    52:30:6d:64:13:f1:ae:c0:80:9c:b0:af:58:1e:14:
                    2f:ce:14:27:15:88:17:63:fe:ff:9d:c1:bf:b4:d3:
                    fa:d8:8e:89:a7:40:d7:7e:c7:b3:29:a7:84:ea:b7:
                    1d:12:f6:48:5e:bb:1e:85:b6:13:62:1d:21:cf:8b:
                    81:9f:6c:f3:65:f9:69:01:90:b7:4d:b2:4f:2c:3e:
                    a1:cf:bc:53:03:28:8e:8f:26:82:f9:bf:b3:e6:21:
                    a2:1b:65:71:65:70:1a:c9:3c:c9:5e:b6:26:56:b9:
                    a4:a0:fd:9e:c5:e7:50:5f:cb:8d:ab:e7:7c:83:f7:
                    63:df:8e:79:ae:50:55:5a:91:d8:15:ea:af:80:f7:
                    d6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BF:77:84:DE:04:84:A4:96:62:A2:1B:10:2C:A8:65:72:9F:20:19
            X509v3 Authority Key Identifier:
                keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/jr93hN4EhKSWYqIbECyoZXKfIBk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.57.17.0-193.57.18.255

    Signature Algorithm: sha256WithRSAEncryption
         aa:1f:b4:80:96:ea:62:0d:57:29:05:be:a2:da:c9:cd:62:07:
         52:88:05:81:b0:48:14:0b:36:e4:ce:c0:94:a3:bd:65:6a:45:
         cc:aa:10:2f:dd:56:6d:dc:91:21:07:35:88:b9:d8:8d:f9:16:
         c3:43:38:ff:3a:49:7a:1b:6c:99:cc:e3:c5:36:92:e8:6d:ef:
         14:d2:1c:b1:e9:86:94:41:22:ed:b8:d0:db:f6:64:50:3c:fb:
         d2:44:d1:5a:32:77:91:b6:5b:d3:cd:d8:0b:10:09:a4:d7:48:
         e0:d3:87:3a:16:1f:c3:f8:67:51:09:be:92:d7:a0:0d:ee:b2:
         10:77:4b:0e:7d:f9:2f:44:d8:0b:ce:79:f6:14:e6:91:4a:24:
         a3:b8:cb:42:99:e2:33:03:97:71:d1:ed:76:49:a3:5f:b7:7a:
         a8:ef:ef:13:1f:cd:2b:4f:59:b7:76:e5:bf:3e:8e:8e:62:ad:
         83:d8:b6:f5:be:97:db:9e:fe:bd:2a:21:fe:9d:cd:ba:e9:53:
         8c:87:c6:ab:2a:4a:af:64:2d:8c:ce:c2:68:22:7f:23:2a:85:
         d1:c3:c2:d4:4d:d3:bd:40:6e:17:01:89:41:f5:5d:a0:dc:c3:
         bf:1f:34:e1:1d:58:fa:f0:25:c1:1d:eb:d7:3c:52:de:8b:d6:
         3d:53:e2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net