Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/E1bl48S3uJKeNjvLI-bFqfXhncs.roa
File:                     E1bl48S3uJKeNjvLI-bFqfXhncs.roa (raw, json)
Hash identifier:          ArUx/3Qpsc+v7haQQn7oiPimdfGwPvnJmdz3/p9me1Q=
Subject key identifier:   13:56:E5:E3:C4:B7:B8:92:9E:36:3B:CB:23:E6:C5:A9:F5:E1:9D:CB
Certificate issuer:       /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial:       01942825B61216A599610121B61070CF80A0
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/E1bl48S3uJKeNjvLI-bFqfXhncs.roa
Signing time:             Thu 02 Jan 2025 17:52:27 +0000
ROA not before:           Thu 02 Jan 2025 17:52:27 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15682
IP address blocks:        212.74.231.0/24 maxlen: 24
                          212.74.233.0/24 maxlen: 24
                          212.74.237.0/24 maxlen: 24
                          212.74.240.0/21 maxlen: 21
                          2a01:5f40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:25:b6:12:16:a5:99:61:01:21:b6:10:70:cf:80:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
        Validity
            Not Before: Jan  2 17:52:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1356e5e3c4b7b8929e363bcb23e6c5a9f5e19dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:61:23:43:11:dd:df:32:fa:f2:a8:29:10:b7:
                    6f:02:6d:fe:34:6e:ad:db:aa:e3:8e:3c:d1:b5:8a:
                    23:13:87:99:f6:15:79:9f:01:46:ae:a6:81:fd:54:
                    b7:ed:66:7c:50:03:8c:36:02:0e:b9:f8:a6:ff:8c:
                    0e:dc:e8:75:fb:50:07:96:ee:c1:b1:c1:96:e8:d7:
                    c5:a4:39:9d:56:95:32:ad:18:20:87:c1:6d:cc:45:
                    fb:40:ca:c1:66:2d:63:9b:ae:f3:bb:c5:69:5b:6d:
                    da:20:55:08:9b:14:20:bf:db:5e:b0:77:29:99:65:
                    ef:d7:d6:ef:ec:d9:f7:de:e1:f0:a8:1c:42:db:46:
                    b5:be:19:3e:bd:2a:18:8f:66:a9:85:75:59:89:a1:
                    fe:aa:23:f0:65:91:31:cb:cb:2c:9c:63:b3:91:2d:
                    78:fc:e7:f9:ba:fc:0d:30:32:c9:9d:e7:bf:4a:0d:
                    d7:6e:d5:90:d3:e3:b4:c7:6c:7b:57:f0:c5:b6:91:
                    12:27:f6:1a:62:33:28:ba:7b:6c:31:69:83:39:bb:
                    b9:ff:76:7d:f2:81:fb:22:d4:b2:4e:37:68:12:0b:
                    9a:9f:51:2a:dc:18:b7:9e:27:b5:3a:0a:58:40:d0:
                    85:2c:20:d0:f4:d0:06:5c:c8:85:bc:74:1a:f1:17:
                    37:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:56:E5:E3:C4:B7:B8:92:9E:36:3B:CB:23:E6:C5:A9:F5:E1:9D:CB
            X509v3 Authority Key Identifier:
                keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/E1bl48S3uJKeNjvLI-bFqfXhncs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.74.231.0/24
                  212.74.233.0/24
                  212.74.237.0/24
                  212.74.240.0/21
                IPv6:
                  2a01:5f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:dd:03:b0:34:27:dc:8d:ca:c3:92:2e:df:c8:41:48:63:58:
         bd:8a:26:b8:74:d5:62:fc:5c:2b:fb:34:55:6a:8b:9d:70:1f:
         85:8d:bb:87:d9:66:6f:af:33:33:4f:cb:c1:2c:b7:d6:f8:2f:
         ae:5e:9f:6c:64:97:9c:c8:fd:af:0b:a2:a3:a2:a7:b3:23:24:
         4e:02:c4:c0:92:6c:7e:ba:5e:ba:4d:c7:b8:4f:3c:fe:d9:92:
         a0:9e:e3:00:3d:31:42:60:37:4b:5f:6e:c1:8e:f6:68:41:50:
         0b:5b:e8:fc:dd:21:25:df:69:d7:0f:5c:f1:ec:c2:c9:76:3e:
         3f:bf:74:ad:8a:49:b4:ea:5a:d8:47:60:03:47:48:a3:47:d4:
         b5:40:6c:a5:fb:66:11:92:e7:50:c9:62:f8:b9:ec:3c:50:cf:
         04:29:64:6f:29:6a:e0:e0:d6:be:b4:0f:57:a4:88:49:b7:ed:
         07:29:c6:8c:49:ef:bb:41:b8:a1:1e:8b:39:68:52:f5:e1:11:
         f5:a0:c2:5e:5d:f9:1c:72:a5:ce:6b:de:1b:c4:9f:43:5c:0e:
         8f:bf:9e:40:da:32:d6:a6:47:bb:94:93:b4:9d:e5:73:51:e1:
         65:07:5a:4e:cd:b1:0c:e8:14:b9:7c:f9:25:78:98:37:ce:43:
         1e:1d:37:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:47 2025 by rpki-client on console.sobornost.net