Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/tqu-QanjX6tyJHx__ZdrkRcFQsk.roa
File:                     tqu-QanjX6tyJHx__ZdrkRcFQsk.roa (raw, json)
Hash identifier:          OLKkbSnqqo0RLnA2/zbv4ebHR3Sjd16V0KLb7Bt5pzw=
Subject key identifier:   B6:AB:BE:41:A9:E3:5F:AB:72:24:7C:7F:FD:97:6B:91:17:05:42:C9
Certificate issuer:       /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial:       01960EBBC946DC2984D5D580C61B2615580E
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/tqu-QanjX6tyJHx__ZdrkRcFQsk.roa
Signing time:             Mon 07 Apr 2025 05:31:49 +0000
ROA not before:           Mon 07 Apr 2025 05:31:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     60781
IP address blocks:        185.155.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0e:bb:c9:46:dc:29:84:d5:d5:80:c6:1b:26:15:58:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
        Validity
            Not Before: Apr  7 05:31:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b6abbe41a9e35fab72247c7ffd976b91170542c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:f0:a1:fd:d4:66:2b:38:09:1b:10:59:1e:
                    b5:d1:c8:85:71:f3:fb:e5:45:e5:90:09:5e:d3:6f:
                    76:2d:24:51:c2:c9:42:05:9f:a9:a6:ef:8e:49:32:
                    ff:45:d1:99:a2:d7:31:8b:11:db:81:1d:f4:a5:81:
                    e9:a8:73:3b:9e:01:2d:f4:7f:4a:c2:77:10:a8:b1:
                    25:4f:f5:a7:15:d6:e8:2d:98:f6:64:9a:a5:63:c9:
                    0f:55:57:9b:10:24:b8:30:8c:25:b7:fe:05:83:a2:
                    64:a8:71:31:a9:4f:34:2b:6b:e5:d4:bb:2f:f1:4c:
                    94:89:24:72:c7:c8:89:36:2e:ab:31:b2:57:51:2f:
                    3b:c1:54:99:6d:85:4a:6a:5e:ce:30:46:26:b9:00:
                    b5:57:15:69:8b:1f:31:68:1a:88:87:1d:da:cc:02:
                    bf:22:57:f0:a2:2e:fc:cd:da:37:7f:cb:d8:8e:d9:
                    fb:bb:11:76:42:46:e8:ff:93:55:8a:e5:9a:9e:42:
                    d3:c2:78:f5:f7:92:7b:08:18:ef:4a:ce:01:e0:da:
                    76:9e:85:90:9d:5d:ed:3b:e6:e5:29:69:5b:df:20:
                    c7:cf:de:72:2b:79:7f:75:4c:fd:42:f7:67:ac:18:
                    eb:9a:3d:e1:84:d4:71:0c:21:4f:c8:a5:75:c0:f2:
                    68:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AB:BE:41:A9:E3:5F:AB:72:24:7C:7F:FD:97:6B:91:17:05:42:C9
            X509v3 Authority Key Identifier:
                keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/tqu-QanjX6tyJHx__ZdrkRcFQsk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:74:7a:0f:f4:af:b2:cc:f8:4f:d1:cc:f7:2e:3e:fa:82:e4:
         50:0a:80:3d:78:7e:df:11:85:16:73:fb:61:cb:c1:c1:3d:cd:
         05:f2:29:3c:d9:65:fa:cb:37:47:48:b3:2d:b4:9a:bc:8c:80:
         d3:13:4d:1e:0b:52:de:07:78:4d:a5:4d:ee:9d:8b:9f:5f:1a:
         cd:3f:f0:8c:88:ea:07:27:10:cb:2f:eb:ae:ee:da:27:ca:59:
         68:28:79:64:5e:d5:9d:b3:e0:e4:b3:82:33:e4:56:d0:46:64:
         e2:aa:6e:d4:72:94:8c:d1:1a:fc:f8:24:dd:21:dc:b1:b0:1b:
         9f:9d:30:e3:92:82:fa:bb:9c:c0:61:4c:93:03:3c:44:96:a0:
         79:c9:a9:f8:b2:42:22:5c:ba:88:17:94:b4:31:83:65:b0:26:
         90:cb:a3:e3:d0:06:bd:17:3b:39:70:87:a6:0b:6c:9c:d3:60:
         6b:12:b7:af:07:56:d1:e5:5f:c1:12:b9:79:fc:c1:43:73:48:
         88:6e:70:ea:e6:dd:57:e6:d5:1d:e7:f8:b3:c2:91:73:df:ad:
         93:85:1b:b8:9f:2a:18:45:08:10:3a:8b:f0:50:ba:34:1a:f0:
         6f:ee:a1:a1:3c:7d:46:63:ee:e7:d4:2f:98:15:22:20:6b:dd:
         59:2c:98:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:11 2025 by rpki-client on console.sobornost.net