Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/fk9piBmxadoxJuP7Wx4UPTdBTGM.roa
File:                     fk9piBmxadoxJuP7Wx4UPTdBTGM.roa (raw, json)
Hash identifier:          P0efcRRoA7jHUP2kLMx2ZKnIu/J2T6OthYnnV4Yj06A=
Subject key identifier:   7E:4F:69:88:19:B1:69:DA:31:26:E3:FB:5B:1E:14:3D:37:41:4C:63
Certificate issuer:       /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial:       019426D9EAE88885E3A8A0392F333DFABBD3
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/fk9piBmxadoxJuP7Wx4UPTdBTGM.roa
Signing time:             Thu 02 Jan 2025 11:50:03 +0000
ROA not before:           Thu 02 Jan 2025 11:50:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49357
IP address blocks:        94.141.116.0/22 maxlen: 24
                          94.141.116.0/23 maxlen: 23
                          94.141.118.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:ea:e8:88:85:e3:a8:a0:39:2f:33:3d:fa:bb:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
        Validity
            Not Before: Jan  2 11:50:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7e4f698819b169da3126e3fb5b1e143d37414c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:eb:95:df:26:8e:c4:f4:01:e0:c9:40:1d:7b:
                    9b:f5:56:61:00:a6:b3:cd:c6:ee:f9:15:e8:5c:09:
                    83:28:f8:55:30:bc:35:51:57:7b:40:73:b3:49:80:
                    f3:c8:a0:b8:3b:4f:52:cc:e1:58:6f:86:3d:b3:de:
                    3b:26:4a:ff:15:6f:21:23:57:b5:b7:8c:c1:57:f9:
                    48:3d:de:e5:c0:f9:fd:e9:ae:8e:8b:6a:e5:94:3e:
                    69:c2:d8:fa:c6:8e:9c:58:e8:bf:58:6b:88:c3:ae:
                    5f:6d:c2:9a:30:9f:68:8d:7f:45:ae:3b:7b:63:77:
                    05:e3:87:69:d7:c0:6e:56:9c:a9:63:c1:0a:86:55:
                    c1:0f:83:a4:b7:28:c3:57:67:b7:ab:78:8e:94:1e:
                    cb:10:8e:56:f2:9d:94:c2:43:c4:bb:73:69:77:67:
                    2b:c8:2c:24:08:9a:f7:0a:85:3b:42:6f:5b:ce:17:
                    49:b1:02:62:10:62:c0:4a:35:e0:90:11:23:71:2e:
                    2a:06:b3:13:96:d1:8b:97:b7:de:a5:47:56:da:11:
                    eb:72:08:5c:7e:81:92:db:18:62:6e:d8:60:4d:ec:
                    a1:3f:7a:47:74:be:7a:1f:a5:e7:86:a8:5d:03:cb:
                    ce:26:45:4d:a7:79:94:07:39:c7:80:bb:99:61:45:
                    4a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4F:69:88:19:B1:69:DA:31:26:E3:FB:5B:1E:14:3D:37:41:4C:63
            X509v3 Authority Key Identifier:
                keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/fk9piBmxadoxJuP7Wx4UPTdBTGM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.141.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:ff:36:61:be:39:3d:57:74:71:f3:3e:fd:d3:6d:9a:a9:f3:
         7d:bc:79:6f:e3:6e:20:37:19:53:47:70:89:61:73:d5:bb:71:
         89:31:24:75:45:dd:86:1c:78:06:e7:5c:5b:5b:ee:38:b9:48:
         c4:69:9e:b1:1c:10:ab:f2:21:05:17:dc:de:5b:dd:ac:9f:7e:
         1b:6c:4e:73:ad:d1:5b:51:a8:36:7b:c7:63:99:ab:e3:15:45:
         48:e5:06:59:89:5b:d0:43:2a:12:b8:85:92:d0:93:79:2a:47:
         44:1b:e2:21:ba:b0:84:ab:f6:fc:66:7b:9d:a2:db:d0:1c:e3:
         a6:7a:7a:2b:bd:8d:e0:77:22:2f:23:aa:79:d8:7e:9d:97:cb:
         28:7f:ac:1f:1b:b9:02:0c:d7:77:5c:e9:41:ec:f0:e3:7d:92:
         47:44:16:91:70:89:75:00:1a:22:7e:a7:4b:a4:b4:ac:ec:8a:
         a4:45:44:43:b7:bb:58:92:e6:0d:26:5d:e2:73:81:9d:b6:b6:
         a2:b6:7b:43:f5:f7:9d:1e:32:2d:3e:c2:3c:82:a9:36:2d:01:
         dc:ef:fe:d7:ab:44:60:0f:5d:a0:c2:46:3d:e8:d3:ea:a3:39:
         41:3f:ec:7e:77:8d:f9:c8:ab:af:8b:c1:1c:bd:14:72:9d:90:
         67:93:3f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:03 2025 by rpki-client on console.sobornost.net