Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/OHnGqH8ODe0VGfVk77RANg9luyc.roa
File:                     OHnGqH8ODe0VGfVk77RANg9luyc.roa (raw, json)
Hash identifier:          HlOjQ/Z+sFurdhMd32vQd4ICj8ZNPxavby8lE2qox1Q=
Subject key identifier:   38:79:C6:A8:7F:0E:0D:ED:15:19:F5:64:EF:B4:40:36:0F:65:BB:27
Certificate issuer:       /CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Certificate serial:       01951EEB77BB8A19AC3011D8E577ECC591C6
Authority key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/OHnGqH8ODe0VGfVk77RANg9luyc.roa
Signing time:             Wed 19 Feb 2025 15:55:02 +0000
ROA not before:           Wed 19 Feb 2025 15:55:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207266
IP address blocks:        2a01:8840:4::/48 maxlen: 48
                          2a01:8840:5::/48 maxlen: 48
                          2a01:8840:15::/48 maxlen: 48
                          2a01:8840:19::/48 maxlen: 48
                          2a01:8840:1d::/48 maxlen: 48
                          2a01:8840:21::/48 maxlen: 48
                          2a01:8840:25::/48 maxlen: 48
                          2a01:8840:29::/48 maxlen: 48
                          2a01:8840:2d::/48 maxlen: 48
                          2a01:8840:31::/48 maxlen: 48
                          2a01:8840:35::/48 maxlen: 48
                          2a01:8840:39::/48 maxlen: 48
                          2a01:8840:3d::/48 maxlen: 48
                          2a01:8840:41::/48 maxlen: 48
                          2a01:8840:45::/48 maxlen: 48
                          2a01:8840:4d::/48 maxlen: 48
                          2a01:8840:51::/48 maxlen: 48
                          2a01:8840:55::/48 maxlen: 48
                          2a01:8840:59::/48 maxlen: 48
                          2a01:8840:5d::/48 maxlen: 48
                          2a01:8840:61::/48 maxlen: 48
                          2a01:8840:65::/48 maxlen: 48
                          2a01:8840:69::/48 maxlen: 48
                          2a01:8840:6d::/48 maxlen: 48
                          2a01:8840:71::/48 maxlen: 48
                          2a01:8840:75::/48 maxlen: 48
                          2a01:8840:79::/48 maxlen: 48
                          2a01:8840:7d::/48 maxlen: 48
                          2a01:8840:81::/48 maxlen: 48
                          2a01:8840:85::/48 maxlen: 48
                          2a01:8840:89::/48 maxlen: 48
                          2a01:8840:8d::/48 maxlen: 48
                          2a01:8840:91::/48 maxlen: 48
                          2a01:8840:95::/48 maxlen: 48
                          2a01:8840:99::/48 maxlen: 48
                          2a01:8840:9d::/48 maxlen: 48
                          2a01:8840:a1::/48 maxlen: 48
                          2a01:8840:a5::/48 maxlen: 48
                          2a01:8840:a9::/48 maxlen: 48
                          2a01:8840:ad::/48 maxlen: 48
                          2a01:8840:b1::/48 maxlen: 48
                          2a01:8840:b5::/48 maxlen: 48
                          2a01:8840:b9::/48 maxlen: 48
                          2a01:8840:bd::/48 maxlen: 48
                          2a01:8840:c1::/48 maxlen: 48
                          2a01:8840:c5::/48 maxlen: 48
                          2a01:8840:c9::/48 maxlen: 48
                          2a01:8840:cd::/48 maxlen: 48
                          2a01:8840:d1::/48 maxlen: 48
                          2a01:8840:d5::/48 maxlen: 48
                          2a01:8840:d9::/48 maxlen: 48
                          2a01:8840:dd::/48 maxlen: 48
                          2a01:8840:e1::/48 maxlen: 48
                          2a01:8840:e5::/48 maxlen: 48
                          2a01:8840:e9::/48 maxlen: 48
                          2a01:8840:ed::/48 maxlen: 48
                          2a01:8840:f1::/48 maxlen: 48
                          2a01:8840:f5::/48 maxlen: 48
                          2a01:8840:f7::/48 maxlen: 48
                          2a01:8840:f9::/48 maxlen: 48
                          2a01:8840:fb::/48 maxlen: 48
                          2a01:8840:107::/48 maxlen: 48
                          2a01:8840:109::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:1e:eb:77:bb:8a:19:ac:30:11:d8:e5:77:ec:c5:91:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
        Validity
            Not Before: Feb 19 15:55:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3879c6a87f0e0ded1519f564efb440360f65bb27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:1f:ed:ed:7b:ac:8d:c9:bb:64:bf:71:a9:36:
                    9c:69:4f:f7:1d:42:13:ba:2d:04:94:ec:5b:bd:ae:
                    6f:90:ee:74:75:0e:68:fc:a7:92:68:5b:65:88:f2:
                    e4:fc:00:a4:e4:01:0b:f8:12:70:0d:9f:0d:7f:ce:
                    c1:1a:8d:7b:09:87:0a:04:b2:79:08:e2:2d:e5:15:
                    c8:ac:ef:d5:77:13:41:0b:8a:12:5a:6e:ca:10:ef:
                    a9:c9:af:73:cb:81:58:3e:c6:eb:20:2a:30:17:92:
                    fb:cf:fc:25:4c:64:45:59:98:ef:26:bf:4d:fb:8d:
                    9c:2f:0b:92:4b:b6:77:73:c2:9d:a8:49:96:3f:83:
                    2d:13:69:c0:be:19:fe:ea:a6:ab:92:ad:63:41:9b:
                    e0:f5:0f:11:c3:64:33:85:05:41:5b:b0:47:37:10:
                    b2:4e:3b:67:76:4f:e7:1d:0b:22:67:f4:4b:e0:5f:
                    ba:a5:8a:b3:05:22:b1:a2:66:dd:b3:2d:6f:bd:ee:
                    fe:5a:36:dc:d8:5f:df:b8:64:ec:a6:08:e0:02:63:
                    92:0e:65:e4:0f:44:b9:7a:4e:3e:56:32:44:1b:09:
                    9a:fb:ab:71:f0:d0:99:89:1e:22:f7:f6:25:05:0f:
                    a9:dd:b4:d6:70:2b:5a:25:60:64:49:43:1c:4d:f8:
                    de:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:79:C6:A8:7F:0E:0D:ED:15:19:F5:64:EF:B4:40:36:0F:65:BB:27
            X509v3 Authority Key Identifier:
                keyid:D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/OHnGqH8ODe0VGfVk77RANg9luyc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:8840:4::/47
                  2a01:8840:15::/48
                  2a01:8840:19::/48
                  2a01:8840:1d::/48
                  2a01:8840:21::/48
                  2a01:8840:25::/48
                  2a01:8840:29::/48
                  2a01:8840:2d::/48
                  2a01:8840:31::/48
                  2a01:8840:35::/48
                  2a01:8840:39::/48
                  2a01:8840:3d::/48
                  2a01:8840:41::/48
                  2a01:8840:45::/48
                  2a01:8840:4d::/48
                  2a01:8840:51::/48
                  2a01:8840:55::/48
                  2a01:8840:59::/48
                  2a01:8840:5d::/48
                  2a01:8840:61::/48
                  2a01:8840:65::/48
                  2a01:8840:69::/48
                  2a01:8840:6d::/48
                  2a01:8840:71::/48
                  2a01:8840:75::/48
                  2a01:8840:79::/48
                  2a01:8840:7d::/48
                  2a01:8840:81::/48
                  2a01:8840:85::/48
                  2a01:8840:89::/48
                  2a01:8840:8d::/48
                  2a01:8840:91::/48
                  2a01:8840:95::/48
                  2a01:8840:99::/48
                  2a01:8840:9d::/48
                  2a01:8840:a1::/48
                  2a01:8840:a5::/48
                  2a01:8840:a9::/48
                  2a01:8840:ad::/48
                  2a01:8840:b1::/48
                  2a01:8840:b5::/48
                  2a01:8840:b9::/48
                  2a01:8840:bd::/48
                  2a01:8840:c1::/48
                  2a01:8840:c5::/48
                  2a01:8840:c9::/48
                  2a01:8840:cd::/48
                  2a01:8840:d1::/48
                  2a01:8840:d5::/48
                  2a01:8840:d9::/48
                  2a01:8840:dd::/48
                  2a01:8840:e1::/48
                  2a01:8840:e5::/48
                  2a01:8840:e9::/48
                  2a01:8840:ed::/48
                  2a01:8840:f1::/48
                  2a01:8840:f5::/48
                  2a01:8840:f7::/48
                  2a01:8840:f9::/48
                  2a01:8840:fb::/48
                  2a01:8840:107::/48
                  2a01:8840:109::/48

    Signature Algorithm: sha256WithRSAEncryption
         ce:5f:a6:92:6e:35:55:f4:20:d6:e4:cb:b1:5c:07:6a:5a:de:
         bc:61:54:d7:94:e1:04:b6:15:eb:99:f5:d0:0c:41:a6:c7:ba:
         4d:58:64:fd:9e:0b:dc:d8:a8:14:c5:51:f8:1b:e1:98:5b:36:
         4d:ee:aa:9f:3e:10:65:1e:3b:a6:18:bc:79:39:06:28:c6:88:
         44:bf:d3:98:3e:dd:3e:04:07:f3:7e:fb:a6:16:fb:18:2b:8f:
         54:03:17:4d:5f:6f:c9:0d:04:ed:5a:fd:0b:a5:ab:1e:3a:ed:
         ea:d5:0e:ca:bc:62:f3:5f:7a:5e:d4:cb:65:43:ff:74:72:15:
         be:07:2d:61:62:11:d8:1b:23:60:74:af:2c:32:0e:ce:0d:37:
         a1:00:90:bc:9f:67:c5:0a:56:ce:44:4e:54:02:42:4a:35:9f:
         a2:a3:24:0c:cc:aa:fd:70:7c:4c:4b:84:c2:15:7b:04:61:9d:
         41:af:02:76:2a:42:df:08:5c:f2:a1:3b:a2:77:ae:a1:1c:50:
         dc:2d:ea:76:16:22:ac:2f:1d:7d:d0:73:18:d6:80:5f:28:02:
         24:91:3b:d0:3d:d2:c6:d8:3b:80:1c:25:d9:2d:ad:6d:73:f2:
         1c:1f:c2:8e:ec:59:05:ea:4d:63:56:81:b0:b2:54:a0:8f:0a:
         8d:38:fc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:47 2025 by rpki-client on console.sobornost.net