Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/N3Y7O0SBisZukLRMHy8_setuvFI.roa
File:                     N3Y7O0SBisZukLRMHy8_setuvFI.roa (raw, json)
Hash identifier:          mKagmk6f++epGFCdum5PDcyniZIRDa8iTpQ+v2TwpbA=
Subject key identifier:   37:76:3B:3B:44:81:8A:C6:6E:90:B4:4C:1F:2F:3F:B1:EB:6E:BC:52
Certificate issuer:       /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial:       019601418A5DBC6056CD85F3F9CA9B17F2B1
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/N3Y7O0SBisZukLRMHy8_setuvFI.roa
Signing time:             Fri 04 Apr 2025 14:43:14 +0000
ROA not before:           Fri 04 Apr 2025 14:43:14 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215380
IP address blocks:        93.159.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:01:41:8a:5d:bc:60:56:cd:85:f3:f9:ca:9b:17:f2:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
        Validity
            Not Before: Apr  4 14:43:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=37763b3b44818ac66e90b44c1f2f3fb1eb6ebc52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:de:fb:d2:a0:f3:18:2e:f2:07:79:67:44:eb:
                    ba:e7:36:c6:f1:3a:d1:6f:be:6f:e3:66:b8:25:59:
                    27:26:d9:81:08:6e:6d:f4:78:c6:23:81:8f:15:47:
                    f4:e1:fc:24:63:d8:14:d6:9c:7e:4b:18:ef:a5:de:
                    39:0c:6d:82:f1:f7:92:58:06:1e:83:de:c5:53:13:
                    f7:18:74:f5:af:dc:49:90:54:fa:51:2e:46:0f:c1:
                    6a:3e:60:e5:ba:99:7a:e4:cf:d8:51:4c:ef:9a:4a:
                    12:7a:40:4e:8f:93:7d:61:2e:15:ba:bd:e0:41:db:
                    52:0c:f8:cb:35:65:50:ad:b0:d3:7c:4f:c7:69:d6:
                    d9:98:de:86:c3:08:e6:d4:bc:f3:4d:cf:f2:ee:8c:
                    22:8f:13:3f:03:b2:a7:f8:87:6e:6c:fb:e3:cc:97:
                    5f:37:32:5f:20:c1:4f:1c:fd:58:0b:08:fb:a3:49:
                    fa:8b:dd:dc:1f:c0:fe:18:17:89:61:c5:86:4b:93:
                    48:5e:f7:31:67:c5:d3:49:41:dd:9d:26:c0:a1:4c:
                    b7:c0:69:e5:19:a0:67:96:7b:1b:94:fe:82:48:d0:
                    28:86:9e:64:30:60:0a:0c:da:c0:4c:23:f9:ce:dc:
                    33:2d:c2:af:ce:9e:d7:cf:f2:29:78:ff:a9:17:d7:
                    90:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:76:3B:3B:44:81:8A:C6:6E:90:B4:4C:1F:2F:3F:B1:EB:6E:BC:52
            X509v3 Authority Key Identifier:
                keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/N3Y7O0SBisZukLRMHy8_setuvFI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.159.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:f2:17:2a:d2:36:a5:ed:f0:be:63:01:72:d7:5b:35:f7:95:
         5b:d3:9b:de:03:27:69:7d:5d:99:d8:bd:84:c6:91:83:53:e4:
         9c:f8:49:e6:af:1f:04:e6:54:aa:7f:86:f3:52:df:61:09:9b:
         98:bb:26:96:f5:9e:1c:6d:07:be:30:99:5d:a9:28:c9:a0:cc:
         5c:3c:9d:67:8f:6b:6d:e8:4e:da:54:4d:5e:6c:a1:d8:6c:fd:
         14:51:46:4f:54:9c:8a:ba:7f:c1:7d:9b:33:4d:09:7a:15:17:
         9a:2b:2b:b7:f6:3d:9d:61:99:f1:bd:d0:82:bc:c6:71:03:32:
         a8:d3:57:0c:a6:47:f8:d9:6e:46:d0:af:cc:2a:a0:a1:1c:c7:
         78:f7:91:73:bc:3c:ae:83:c2:46:c9:53:2f:13:f7:88:c8:03:
         e7:ed:3e:14:7d:d7:06:2e:75:a5:25:e6:e9:a8:8e:33:8d:de:
         c0:b0:a5:29:c3:a7:42:98:2f:f0:82:14:52:16:45:36:e6:18:
         64:47:04:14:fa:4d:21:f3:d8:93:6c:cd:00:8f:ba:80:60:8c:
         38:9b:2c:f8:cb:6e:69:b8:7a:f1:cb:88:5c:e3:a8:5a:9d:c9:
         1f:11:95:e0:2f:18:a4:10:bd:3c:f6:cc:ad:d1:98:dc:f1:30:
         f6:c5:5a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:10 2025 by rpki-client on console.sobornost.net