Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/8i_tvPtWf70i2EmSEMpvUHFIlh0.roa
File:                     8i_tvPtWf70i2EmSEMpvUHFIlh0.roa (raw, json)
Hash identifier:          5i+xKeAIrkPv9y5KV9LM5WC3PSC5H7SyU1nhMQB9nho=
Subject key identifier:   F2:2F:ED:BC:FB:56:7F:BD:22:D8:49:92:10:CA:6F:50:71:48:96:1D
Certificate issuer:       /CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Certificate serial:       019427484A77ABA42AD2A8D971061304730C
Authority key identifier: 97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/8i_tvPtWf70i2EmSEMpvUHFIlh0.roa
Signing time:             Thu 02 Jan 2025 13:50:36 +0000
ROA not before:           Thu 02 Jan 2025 13:50:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     12516
IP address blocks:        91.216.195.0/24 maxlen: 24
                          195.54.48.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:4a:77:ab:a4:2a:d2:a8:d9:71:06:13:04:73:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=976ba6229c459d7695d3529b1207e2c29b0842b1
        Validity
            Not Before: Jan  2 13:50:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f22fedbcfb567fbd22d8499210ca6f507148961d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3a:e8:ae:57:fd:47:bd:3b:cf:12:21:e2:55:
                    d2:dd:53:24:7c:50:6b:0d:af:d0:c2:3b:be:6b:16:
                    08:26:31:0a:92:b4:9e:b4:03:42:c2:77:16:27:47:
                    4e:26:5b:98:cf:37:7a:fb:58:b7:f1:f4:50:f4:63:
                    c0:5b:91:1d:c2:5d:f4:23:90:93:6e:a6:ed:33:f2:
                    66:2f:8e:bd:30:af:46:f4:c9:c5:3b:e1:8f:4c:bb:
                    dc:2c:ab:d0:ca:72:4b:b7:c3:64:bc:fb:84:75:25:
                    9e:ce:6c:01:04:e8:74:23:61:c0:8c:2b:6e:1d:d8:
                    0e:70:32:4f:64:e9:76:d9:e8:d2:a3:56:35:10:02:
                    ab:32:d8:f7:92:d5:98:ce:2f:f0:b6:b2:1a:d8:9f:
                    c9:90:2a:6e:c3:50:d7:b7:d0:62:cd:1f:32:88:ce:
                    07:8a:b0:95:00:1f:9c:87:13:c0:ec:9a:0f:23:48:
                    0d:18:ba:b4:76:24:2c:63:bb:db:26:bf:5d:3c:19:
                    bf:b4:2a:d5:16:d6:0a:9f:bf:c4:3d:61:ba:c9:df:
                    c0:58:3c:ed:19:02:72:8d:81:ec:db:23:48:90:1f:
                    55:7d:41:06:13:d4:a2:b4:cc:d7:e3:c4:c7:5b:09:
                    7b:e0:7f:68:a2:4e:38:43:73:32:f6:9e:14:7a:8a:
                    77:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2F:ED:BC:FB:56:7F:BD:22:D8:49:92:10:CA:6F:50:71:48:96:1D
            X509v3 Authority Key Identifier:
                keyid:97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/8i_tvPtWf70i2EmSEMpvUHFIlh0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.195.0/24
                  195.54.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:7d:e7:ac:26:4a:57:05:03:ce:fe:0c:5b:85:4f:25:d9:a0:
         9b:08:63:74:de:dd:0d:f4:28:db:1f:3f:76:ef:dc:c0:67:d6:
         3a:42:8e:8a:e3:ce:00:cc:e9:e4:60:5b:ea:f7:ce:db:fe:3d:
         37:f9:4a:74:c5:05:29:90:4b:a0:c7:90:74:fa:4e:29:9e:53:
         47:7c:c2:6c:92:f4:31:ee:71:aa:3e:c1:b6:9f:68:ff:d3:4d:
         1f:40:bd:d3:12:90:d0:15:28:2d:9a:7b:c8:55:bc:58:1f:ad:
         6c:e9:7d:05:8f:68:45:ff:f0:f8:aa:3e:ec:db:5a:6e:90:b3:
         5f:65:6f:07:d9:3c:b5:83:db:1d:a6:90:7f:2a:29:3a:2f:c1:
         36:d9:82:ef:dc:58:5b:01:41:2f:9f:7f:9a:fc:a1:d8:c2:4a:
         c4:a8:36:45:c2:37:de:cc:84:7c:96:f3:d9:36:82:0b:34:0d:
         bf:2d:67:1d:2e:47:b3:f0:09:30:91:be:ba:96:27:3f:9b:f9:
         7e:32:fe:5a:8f:9a:05:52:cb:8b:86:61:e5:a5:e9:9b:22:55:
         8e:ac:5d:57:58:07:ed:73:fe:20:25:35:dd:c1:54:f6:8e:cf:
         27:18:e5:f1:46:d2:e7:ba:53:44:f7:a6:c5:83:77:5d:25:d3:
         aa:c7:76:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net