Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/c9pIRKumzJnPv6L0_0S99z5-7Pw.roa
File:                     c9pIRKumzJnPv6L0_0S99z5-7Pw.roa (raw, json)
Hash identifier:          JszoDngQwRDEsojUMs8/qjNo60rDhfYCdak0Z9nn2Bg=
Subject key identifier:   73:DA:48:44:AB:A6:CC:99:CF:BF:A2:F4:FF:44:BD:F7:3E:7E:EC:FC
Certificate issuer:       /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial:       019428254A2EF39CEA0FB308F9C4C83DB4A2
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/c9pIRKumzJnPv6L0_0S99z5-7Pw.roa
Signing time:             Thu 02 Jan 2025 17:52:00 +0000
ROA not before:           Thu 02 Jan 2025 17:52:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     204447
IP address blocks:        178.235.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:25:4a:2e:f3:9c:ea:0f:b3:08:f9:c4:c8:3d:b4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
        Validity
            Not Before: Jan  2 17:52:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=73da4844aba6cc99cfbfa2f4ff44bdf73e7eecfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:75:e5:9e:b6:d3:58:97:4d:d6:36:c7:7b:c6:
                    33:ca:7a:70:48:9b:86:fe:ca:32:1d:a8:f7:90:bd:
                    e6:2d:ee:56:d0:ed:47:a3:11:26:1d:6b:43:b5:52:
                    e5:2a:9a:cf:a9:c3:9b:ed:20:d0:03:5b:4d:5f:18:
                    4a:8e:ea:0e:f2:9d:57:2d:7e:99:aa:90:33:8c:0b:
                    6b:d1:b4:97:52:b4:9c:a1:e9:ab:70:36:89:17:78:
                    1c:26:68:0d:2e:c0:97:5a:af:2d:b3:d7:8a:3b:2b:
                    c0:22:35:f9:56:d4:53:dd:fc:e9:61:41:bc:8a:01:
                    b6:3b:74:55:f7:9f:88:ee:c2:5a:99:fc:b7:a8:bb:
                    27:c5:18:8c:a2:06:07:77:7f:6d:d2:0f:46:b2:3c:
                    e9:48:c8:dc:30:ea:6d:1a:a4:6f:89:c0:f2:27:fa:
                    b0:a2:fe:23:6b:3e:dc:e3:01:b7:95:5d:3b:58:72:
                    36:35:82:68:1c:70:17:46:0d:db:c6:1e:ac:0c:1c:
                    a2:d9:d8:df:f6:61:5d:01:ea:a7:5d:61:7f:3e:ba:
                    0e:03:41:c6:0d:f7:89:74:e4:63:c0:8d:11:f5:c0:
                    5b:90:62:50:3c:01:d1:32:79:f9:b1:a7:65:78:e2:
                    2f:9e:0a:2e:38:e2:f8:8c:dc:b2:44:f4:c6:a3:43:
                    de:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DA:48:44:AB:A6:CC:99:CF:BF:A2:F4:FF:44:BD:F7:3E:7E:EC:FC
            X509v3 Authority Key Identifier:
                keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/c9pIRKumzJnPv6L0_0S99z5-7Pw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.235.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:f9:5c:7f:28:e5:eb:db:87:fe:e8:30:a6:8a:4a:f0:38:e0:
         37:3e:ba:05:2c:a1:db:93:0b:d8:67:85:92:35:c7:15:5f:5f:
         7b:0f:a6:46:c1:0e:57:8b:ae:3c:47:91:3a:e7:ec:10:7a:52:
         91:6f:b1:19:2e:0c:69:9a:9d:3d:1f:19:ed:95:9c:dd:b8:60:
         3e:8a:67:b0:a8:a5:f5:3d:92:20:7a:89:2a:ca:a4:d7:99:cf:
         4b:3d:7a:a6:c1:a6:e1:c3:63:7b:a5:b8:1e:19:96:38:a3:4e:
         5d:d7:ab:fb:b6:67:d4:db:86:01:7c:9b:5c:bb:59:fe:e5:ff:
         ea:a6:de:8a:e5:1f:5f:68:21:7f:5f:36:fe:39:bf:c7:0a:d7:
         f7:4a:44:a7:58:c6:3a:ce:42:6d:9b:ed:e8:04:6e:c6:77:8b:
         5d:eb:6b:c2:a3:87:ca:e7:e7:76:d7:de:db:e1:a2:af:50:d4:
         1c:27:35:68:2a:2f:2d:91:db:84:a9:d0:7c:f4:75:ed:8b:c7:
         8f:23:80:d5:0e:fa:5e:5f:ea:be:0d:24:51:52:21:62:8c:ef:
         ec:27:2a:56:e3:1f:1b:c9:de:73:5e:3d:84:43:09:22:54:02:
         67:9a:7a:85:ad:f0:61:4f:58:52:82:8a:23:2b:35:3f:6f:da:
         20:a5:8a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:13 2025 by rpki-client on console.sobornost.net