Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/hHohIOb2CSqEknFi_nDQXoU5ar0.roa
File:                     hHohIOb2CSqEknFi_nDQXoU5ar0.roa (raw, json)
Hash identifier:          xB55Nu7rOiJO9tXAMzNF3RdHu4LzXSqrLL3QX5pcM/8=
Subject key identifier:   84:7A:21:20:E6:F6:09:2A:84:92:71:62:FE:70:D0:5E:85:39:6A:BD
Certificate issuer:       /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial:       01941FFA65239300961DD8A6600328A4C93E
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/hHohIOb2CSqEknFi_nDQXoU5ar0.roa
Signing time:             Wed 01 Jan 2025 03:48:11 +0000
ROA not before:           Wed 01 Jan 2025 03:48:11 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     44400
IP address blocks:        93.126.9.0/24 maxlen: 24
                          93.126.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:65:23:93:00:96:1d:d8:a6:60:03:28:a4:c9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
        Validity
            Not Before: Jan  1 03:48:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=847a2120e6f6092a84927162fe70d05e85396abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:57:d3:7e:fc:8c:18:40:a6:d3:47:46:17:d0:
                    d1:4e:5b:43:5e:d0:ba:ba:c3:28:81:ce:32:59:66:
                    4f:d4:56:df:7b:9f:a1:44:b9:0d:f7:68:8a:a8:58:
                    ba:a5:8b:9d:d9:33:a7:94:36:cd:62:77:45:68:62:
                    1f:7d:65:cf:ff:74:ce:8b:80:82:6f:85:96:12:71:
                    d5:87:8b:46:94:a5:7d:dd:fe:c4:11:5b:53:61:50:
                    6a:9f:e0:c4:85:b8:45:d0:af:a2:bc:54:93:91:a2:
                    8b:54:8a:61:c2:62:ae:ec:f3:71:c6:fa:6e:c5:37:
                    c1:31:a1:95:a0:f4:10:cd:62:9f:d1:3b:e9:bf:96:
                    bc:fb:70:d8:ae:31:e5:54:ed:3e:6c:76:df:6f:9a:
                    f6:65:0b:3b:52:62:37:64:6e:40:fe:eb:e3:3a:4c:
                    81:3e:dd:04:d2:b0:2a:5c:51:8e:3c:f4:36:0b:d8:
                    aa:b9:7f:45:72:07:34:5c:f1:4e:09:d7:cd:dc:61:
                    8f:a2:f5:1a:35:6f:9a:45:de:7f:53:55:0e:22:38:
                    ac:15:fa:39:28:bc:49:7e:92:c0:0c:a5:cf:9a:63:
                    55:33:93:b3:a7:f2:c4:bb:2b:44:fe:7e:3b:2b:1f:
                    40:9c:f2:4b:75:4b:37:d4:7e:e2:f1:16:0c:83:1c:
                    0c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7A:21:20:E6:F6:09:2A:84:92:71:62:FE:70:D0:5E:85:39:6A:BD
            X509v3 Authority Key Identifier:
                keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/hHohIOb2CSqEknFi_nDQXoU5ar0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.126.9.0-93.126.10.255

    Signature Algorithm: sha256WithRSAEncryption
         8d:65:a5:ed:cf:c9:32:03:f9:39:a7:75:a7:8b:34:36:1c:20:
         4e:9c:3f:70:79:3f:de:5b:f8:bf:fc:54:5d:db:e8:44:13:d9:
         e5:c4:7d:e2:ae:97:6f:80:70:d2:01:c8:08:cc:2f:3b:69:e0:
         fe:4a:38:67:5d:a0:e2:83:c4:9d:c4:d2:b4:f4:58:33:14:74:
         a8:ec:e6:51:62:2d:e9:09:dd:f8:4c:5b:b8:a0:2b:c3:5b:1d:
         34:19:e5:cd:0d:79:4e:d9:fd:e6:e9:08:aa:89:cd:4e:f8:a7:
         f5:7d:34:57:58:32:43:d5:04:23:09:3e:a3:4c:4e:94:d5:10:
         31:29:86:8b:42:06:63:3c:51:d7:1c:dd:9d:14:37:69:ee:d7:
         f2:98:09:e6:4b:c5:5d:6c:49:06:cd:c5:69:ba:e7:44:ff:02:
         df:ca:f2:39:27:f5:cc:12:3f:bf:d4:2b:df:d2:52:9d:b0:ea:
         e9:fa:0c:76:07:44:4c:cd:0c:03:44:f4:3c:ae:91:40:3f:51:
         ba:ad:2d:77:a0:1d:a0:0f:1c:5e:86:73:99:44:dc:da:a2:9a:
         d1:db:10:03:01:e4:a1:09:d7:aa:3f:90:6f:72:50:1f:f7:93:
         c5:fd:5e:f3:b6:40:0a:f2:b1:14:bb:cb:5d:97:3d:68:d5:cd:
         6c:e7:61:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:17 2025 by rpki-client on console.sobornost.net