Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/fVmkukCoNZRcRoc3LS-TXPrqhnE.roa
File:                     fVmkukCoNZRcRoc3LS-TXPrqhnE.roa (raw, json)
Hash identifier:          jN7loYTxoFJMSibKv+JC0+n6QXqAWoukHaK+yW79eHE=
Subject key identifier:   7D:59:A4:BA:40:A8:35:94:5C:46:87:37:2D:2F:93:5C:FA:EA:86:71
Certificate issuer:       /CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Certificate serial:       019425FD80A996C35C85FFAC47A10664D9B1
Authority key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/fVmkukCoNZRcRoc3LS-TXPrqhnE.roa
Signing time:             Thu 02 Jan 2025 07:49:18 +0000
ROA not before:           Thu 02 Jan 2025 07:49:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     197889
IP address blocks:        193.110.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:80:a9:96:c3:5c:85:ff:ac:47:a1:06:64:d9:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
        Validity
            Not Before: Jan  2 07:49:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7d59a4ba40a835945c4687372d2f935cfaea8671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:91:44:3e:93:a9:60:c5:3e:7c:4c:7d:5c:a6:
                    c2:ef:13:23:f8:32:d4:a5:24:9f:96:d9:55:87:95:
                    55:33:03:93:70:49:f9:a6:e1:99:41:9d:f8:e6:11:
                    65:d6:ce:c1:c8:d1:6e:de:8c:35:e9:5c:b1:cb:31:
                    8f:5f:36:b3:e9:1c:ff:be:de:31:92:ee:e4:a6:2f:
                    a6:5a:b4:34:76:43:44:a8:db:74:84:49:3d:37:4f:
                    f9:09:a0:99:f1:38:bb:e6:1b:52:91:4d:ae:9c:3b:
                    45:f1:6e:4d:6d:00:81:b0:26:47:09:65:8a:a5:ae:
                    90:a4:a9:9a:cb:92:e9:7f:34:e9:17:57:40:54:5a:
                    3c:ce:29:eb:d2:9e:b2:d8:2d:60:ae:17:e8:8a:5a:
                    93:88:f7:6a:b7:c2:5c:7e:9d:8b:93:96:e2:f2:28:
                    ad:e9:b9:66:c0:a2:d4:5d:44:af:57:fe:b5:98:80:
                    c7:e9:72:b8:d2:94:36:f2:3d:2a:2e:a0:17:5e:50:
                    81:bd:de:06:bd:a1:54:33:84:ae:57:60:03:f4:87:
                    71:65:ce:5c:fb:c4:ad:0b:4c:cc:e4:56:8f:0e:c4:
                    a7:e8:a3:fa:a3:d0:27:a2:dc:7a:65:07:b2:75:81:
                    01:dc:31:e6:57:03:77:d8:01:68:58:7e:70:48:cf:
                    d5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:59:A4:BA:40:A8:35:94:5C:46:87:37:2D:2F:93:5C:FA:EA:86:71
            X509v3 Authority Key Identifier:
                keyid:02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/fVmkukCoNZRcRoc3LS-TXPrqhnE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.110.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:9b:80:19:21:6a:98:4c:6a:76:c6:25:86:bc:54:84:0a:55:
         5a:62:0f:c9:5e:06:62:10:d6:e0:00:38:55:f5:79:bd:f9:3f:
         81:94:19:e2:7b:94:49:83:8d:32:07:4d:f2:e9:dd:25:7c:8f:
         45:37:f3:e8:e6:31:be:8a:3f:19:84:24:48:0b:d1:27:ed:ad:
         d7:be:83:d1:22:a4:5b:12:4b:3c:ad:2c:fb:e8:bf:69:64:54:
         5b:8c:fd:e7:80:00:65:f7:b6:ef:82:0b:b9:0e:29:c5:ec:ea:
         36:1b:31:44:e8:ae:f5:b1:2a:86:b5:42:92:8f:21:55:1c:fc:
         a2:df:c3:ad:c0:3a:87:36:00:34:d5:52:47:20:cc:da:33:6f:
         f4:92:23:19:8d:f1:74:f7:3a:27:6a:2f:a1:df:97:53:1e:c3:
         f5:5d:f5:62:ea:93:c7:b1:82:b2:40:40:3a:5a:91:da:85:22:
         00:37:a9:c2:dd:73:eb:d3:ce:95:74:d5:a1:a1:0b:90:70:04:
         a1:84:c6:c8:b8:cc:ab:02:2c:c7:10:3c:ff:c0:9d:1f:a7:44:
         92:44:d3:4b:ba:01:c5:d5:85:34:e4:ee:04:d7:2d:8c:70:ee:
         0c:91:58:80:d0:7d:dd:a4:c4:2d:e4:67:2e:0f:7c:ca:c2:90:
         36:47:a0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:02 2025 by rpki-client on console.sobornost.net