Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/11HD7yYKcpDp91MDnZ2qx4f7DA4.roa
File:                     11HD7yYKcpDp91MDnZ2qx4f7DA4.roa (raw, json)
Hash identifier:          I82O47jamEqwRmGn3/G2hhZ8d3EhBnYIg9JLsYyDdcE=
Subject key identifier:   D7:51:C3:EF:26:0A:72:90:E9:F7:53:03:9D:9D:AA:C7:87:FB:0C:0E
Certificate issuer:       /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial:       0194221FF88AC1C11619E05E8FA81F67F67C
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/11HD7yYKcpDp91MDnZ2qx4f7DA4.roa
Signing time:             Wed 01 Jan 2025 13:48:28 +0000
ROA not before:           Wed 01 Jan 2025 13:48:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     199279
IP address blocks:        83.230.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:f8:8a:c1:c1:16:19:e0:5e:8f:a8:1f:67:f6:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
        Validity
            Not Before: Jan  1 13:48:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d751c3ef260a7290e9f753039d9daac787fb0c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:48:16:0b:55:02:2d:48:08:7e:7b:96:6b:62:
                    5a:2a:07:3a:23:11:62:51:9c:ae:95:3d:d4:f4:77:
                    17:ce:2f:37:e1:59:ca:92:6c:16:da:38:23:30:09:
                    70:5c:23:6f:ea:7b:d5:64:41:24:cc:1b:b8:d5:c3:
                    af:9c:bd:98:19:48:e6:74:39:1b:ec:dc:ba:a9:ec:
                    c2:82:7c:1b:b5:9d:c6:05:06:72:b2:71:29:72:96:
                    60:ae:2d:66:de:a6:00:66:29:b0:35:da:1b:fe:6d:
                    ad:5b:74:e5:87:6e:cc:a1:40:8e:87:89:d5:b7:13:
                    af:d5:14:eb:41:ca:c7:a1:44:35:3a:fb:53:2c:99:
                    dc:b3:94:89:d8:c9:87:c5:92:9b:58:27:bf:d6:90:
                    af:a3:d6:e7:59:22:6d:4b:34:63:5a:e6:25:ab:88:
                    90:49:ae:f4:17:8b:24:73:a3:b2:ce:a4:89:ef:46:
                    33:f4:0d:da:12:f3:35:05:3b:5b:68:5a:0a:4d:03:
                    5b:88:fb:67:f8:a2:5e:b0:6b:01:48:49:b2:94:12:
                    df:7d:60:9a:0d:49:25:a9:67:be:4d:5f:a2:22:fb:
                    3d:38:7c:25:f2:73:a3:a3:2f:d7:dc:09:d4:48:be:
                    0d:2c:24:cd:55:72:57:d0:cc:b1:18:99:f4:67:2b:
                    68:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:51:C3:EF:26:0A:72:90:E9:F7:53:03:9D:9D:AA:C7:87:FB:0C:0E
            X509v3 Authority Key Identifier:
                keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/11HD7yYKcpDp91MDnZ2qx4f7DA4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.230.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:a4:f9:90:77:ad:7f:43:52:a5:a5:e6:56:76:de:5c:75:0e:
         8a:dc:f2:48:12:32:88:21:8d:bf:c1:6f:27:77:9a:d9:b1:21:
         7e:83:83:e8:1a:42:40:7f:5e:cd:03:1e:2f:f1:55:a8:e2:e7:
         c3:bc:09:ec:67:e8:b3:33:c8:bf:b4:39:69:ff:09:b0:31:12:
         03:79:dc:49:8d:ef:1d:60:78:ad:42:01:b8:51:91:ae:ff:06:
         fb:1b:e6:2b:11:7b:c7:af:f5:48:e4:e3:3f:14:6f:08:e5:9b:
         d8:80:7b:e7:76:25:08:cd:2b:d6:2e:5d:22:81:c2:e4:b3:e4:
         4a:d9:9c:12:de:7c:c4:36:d3:38:6f:16:3b:21:c1:a9:5b:c9:
         c7:66:c1:49:16:44:17:40:bc:27:47:7d:bb:7f:32:e4:16:d0:
         b9:7c:28:53:ed:b0:85:3b:a3:65:b6:8c:44:e3:de:80:74:7f:
         bb:9e:00:77:64:a3:de:c5:46:56:04:49:dc:07:8d:6f:56:1f:
         ff:e3:5c:32:d2:ce:8e:cf:7b:ae:29:fc:7e:6d:f9:0d:43:a0:
         92:94:4c:ba:1b:67:b8:ce:60:44:59:2f:11:3e:67:98:72:d0:
         9c:b1:35:46:d7:3d:10:b4:3c:88:c9:71:8d:ac:16:f3:37:c1:
         d0:41:f6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:54 2025 by rpki-client on console.sobornost.net