Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/HZDIjKjXqWPf-ee37Nhj9_hhLmU.roa
File:                     HZDIjKjXqWPf-ee37Nhj9_hhLmU.roa (raw, json)
Hash identifier:          HSOaEhMUsdBzgZ8yvnvkhm7cbQn7PS/dlSIORdNMvnw=
Subject key identifier:   1D:90:C8:8C:A8:D7:A9:63:DF:F9:E7:B7:EC:D8:63:F7:F8:61:2E:65
Certificate issuer:       /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial:       0194236A20081995A133E10D2CB5D19EF7F1
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/HZDIjKjXqWPf-ee37Nhj9_hhLmU.roa
Signing time:             Wed 01 Jan 2025 19:49:05 +0000
ROA not before:           Wed 01 Jan 2025 19:49:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     205384
IP address blocks:        93.159.180.0/24 maxlen: 24
                          93.159.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:20:08:19:95:a1:33:e1:0d:2c:b5:d1:9e:f7:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
        Validity
            Not Before: Jan  1 19:49:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1d90c88ca8d7a963dff9e7b7ecd863f7f8612e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f3:25:60:b7:f4:bc:f9:cc:58:6d:07:06:27:
                    a9:07:d3:64:8b:0b:aa:41:87:ea:aa:83:e0:c4:db:
                    a9:8a:24:13:8d:7e:bb:f6:d0:09:4b:ac:77:49:c8:
                    d0:bf:78:11:bc:c2:a2:e0:38:f7:24:d1:e3:5d:e2:
                    36:0d:d5:45:69:e3:66:92:5d:32:9b:4c:08:57:cb:
                    c9:c1:3e:f6:f5:b2:5d:ee:c5:22:6e:a3:92:12:9d:
                    31:0b:31:05:9e:33:d0:76:c8:20:2c:f5:a4:1a:34:
                    38:29:e7:7f:5c:9e:e9:ba:97:af:0a:c5:16:4d:d3:
                    1a:02:23:04:35:42:72:dc:63:53:4b:5c:c2:81:2a:
                    c5:79:4e:7b:4b:cf:8c:ba:89:cf:2e:d7:6b:2b:d6:
                    59:81:ae:8d:58:bb:11:48:54:f6:c4:13:ff:34:46:
                    0b:de:ea:37:6e:bf:67:03:66:f1:43:13:56:84:3d:
                    f8:9c:21:6f:c6:7d:7a:67:f8:28:9a:d2:4d:67:0e:
                    f4:65:5d:9c:be:ed:32:5e:dd:ac:95:14:4a:50:1d:
                    9c:40:68:c0:4f:cc:b8:19:24:86:f4:b2:96:55:89:
                    ad:b9:b5:bc:59:11:39:54:8d:d3:a4:9e:ee:b7:b7:
                    26:3a:9f:03:81:67:d5:e7:e5:30:49:c4:10:07:85:
                    b4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:90:C8:8C:A8:D7:A9:63:DF:F9:E7:B7:EC:D8:63:F7:F8:61:2E:65
            X509v3 Authority Key Identifier:
                keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/HZDIjKjXqWPf-ee37Nhj9_hhLmU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.159.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:6a:a8:7f:35:4a:d3:29:34:bb:45:ce:5d:48:23:76:ef:28:
         e2:b0:a9:19:74:83:b4:1c:3c:a0:0b:46:d9:96:38:ac:b7:97:
         7b:b6:90:c6:26:eb:5b:af:96:fd:20:a8:e3:8b:e7:9b:22:aa:
         df:ee:4c:47:14:26:82:b1:27:ee:bf:ae:2a:d7:c8:a7:16:29:
         b2:a3:0b:91:cb:46:c0:7c:b7:c7:6b:c4:ae:03:01:7f:6d:d4:
         03:42:f5:41:9d:23:9a:05:12:1e:46:65:a0:d2:03:87:c0:0a:
         cc:38:92:cc:01:ea:d6:b6:a7:48:c6:4b:2e:25:fe:cd:8a:fa:
         06:83:3f:ef:88:e7:0b:cd:c6:11:ec:a3:36:d8:45:36:21:57:
         00:88:0d:ca:d9:8b:56:62:a1:bd:18:b5:3f:c5:4c:dd:fe:e3:
         f6:5b:c5:6d:be:ea:b6:0e:5d:a3:11:6e:e5:7a:6d:25:2e:e5:
         52:ac:24:54:c3:8b:5d:42:d9:e9:f1:3c:3f:0b:04:f9:44:02:
         e3:15:91:a8:7a:47:b0:13:33:77:52:dc:58:31:3e:f9:90:15:
         f8:22:72:02:d8:29:08:a2:9a:f3:75:f0:55:6c:d7:85:63:50:
         69:8a:8e:d0:ef:2a:57:75:9f:25:50:0a:55:6c:a0:8d:89:0f:
         e7:3b:5a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:10 2025 by rpki-client on console.sobornost.net