Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Ju6K_k5aEz6SqSZhNuewgFZ6Tpc.roa
File:                     Ju6K_k5aEz6SqSZhNuewgFZ6Tpc.roa (raw, json)
Hash identifier:          eSc+nFa0PsPsCuhZ0NSVf3t+L8KNOuXb5VC0gk1mWnU=
Subject key identifier:   26:EE:8A:FE:4E:5A:13:3E:92:A9:26:61:36:E7:B0:80:56:7A:4E:97
Certificate issuer:       /CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Certificate serial:       019420D5C9B4F580BC349FDCBB8B7ECAD02E
Authority key identifier: 01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Ju6K_k5aEz6SqSZhNuewgFZ6Tpc.roa
Signing time:             Wed 01 Jan 2025 07:47:49 +0000
ROA not before:           Wed 01 Jan 2025 07:47:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     34834
IP address blocks:        193.58.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:c9:b4:f5:80:bc:34:9f:dc:bb:8b:7e:ca:d0:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
        Validity
            Not Before: Jan  1 07:47:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=26ee8afe4e5a133e92a9266136e7b080567a4e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:df:a9:e0:57:54:49:f4:e6:39:c5:72:18:09:
                    8d:ec:1d:26:f0:ca:cb:b8:92:72:31:41:1c:9f:9f:
                    e5:69:76:ed:98:b6:41:30:39:54:b0:99:f3:14:16:
                    66:70:08:20:f2:36:cc:9b:64:53:0a:66:c4:4e:9d:
                    33:f6:8e:79:5c:7b:95:44:c6:8a:51:85:b5:a2:df:
                    2f:53:19:eb:ce:65:61:b9:8e:3a:40:44:de:51:e3:
                    00:7d:d4:ae:01:8f:60:40:37:50:91:f7:d3:3f:87:
                    d6:ba:74:57:10:ce:6c:ca:bd:c2:c1:47:0c:ad:6c:
                    fe:00:bc:e2:cc:18:bc:d7:ce:59:ae:65:69:ff:44:
                    b4:51:dc:09:44:59:f2:2e:c9:6c:b6:1d:a7:18:b1:
                    16:e9:81:66:f5:9b:f6:6f:8a:27:43:ec:ca:8f:d4:
                    c1:fc:57:63:ca:bb:93:9a:f3:ee:bc:49:c5:12:8e:
                    3b:de:10:78:73:bc:0b:c7:48:07:87:3f:5e:17:5f:
                    41:6c:54:e7:c1:dc:d3:15:db:86:4f:3d:67:ee:ad:
                    6c:f5:21:37:a1:7a:50:94:df:ed:68:c8:41:d7:85:
                    49:df:57:86:94:5c:16:8f:41:9e:ad:32:cb:db:27:
                    21:16:77:14:af:8c:5a:08:63:05:6c:b4:f3:e6:a0:
                    fb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EE:8A:FE:4E:5A:13:3E:92:A9:26:61:36:E7:B0:80:56:7A:4E:97
            X509v3 Authority Key Identifier:
                keyid:01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Ju6K_k5aEz6SqSZhNuewgFZ6Tpc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.58.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:6b:e8:57:aa:8b:a4:2d:47:cb:6c:69:7d:ca:cd:24:4c:a3:
         fc:06:d4:d5:cc:84:e2:2f:ea:87:1c:45:97:9a:1c:c0:83:02:
         97:a9:7c:5e:60:70:12:62:03:ac:6c:0d:af:b0:65:de:39:e0:
         32:22:d9:50:58:04:94:1a:07:99:d1:90:41:53:5c:38:7b:4f:
         f6:92:e4:1d:68:7a:e6:19:29:c0:0d:1c:08:3f:8b:c8:cb:b1:
         a4:f8:72:8c:0a:8d:c2:a8:f7:e2:2e:c6:07:3e:92:94:db:81:
         ce:02:6d:89:b3:23:ea:42:2e:b9:cd:2f:3f:de:a1:07:c2:43:
         2c:ba:ca:16:6b:ef:5b:3c:9f:1f:55:1c:09:24:fc:28:83:4e:
         40:c7:52:11:59:8a:b6:65:64:6b:0d:4c:02:e1:ce:e6:82:ac:
         9b:45:3d:e6:8c:28:73:c7:9a:f4:d8:78:ea:19:ec:b7:01:41:
         95:04:e2:c7:dc:56:58:41:0e:87:7a:37:21:1a:3b:b0:27:5c:
         12:71:c4:b6:20:45:17:14:cd:69:54:84:f0:da:bd:c0:82:8c:
         82:f5:0f:a4:3b:c3:00:c9:74:84:6a:b1:4b:d1:58:52:07:dd:
         a3:ab:4a:8e:34:bf:ee:bb:1a:b7:0c:fd:40:cd:2c:f1:75:3b:
         02:4b:ec:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:24 2025 by rpki-client on console.sobornost.net