Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/NRGRL-46NCSPaGi9AZCwzE3w5nE.roa
File:                     NRGRL-46NCSPaGi9AZCwzE3w5nE.roa (raw, json)
Hash identifier:          u0L8t2q2EBStWXwxFZXL40Y75wNx2nDlIz7mo+UHSk8=
Subject key identifier:   35:11:91:2F:EE:3A:34:24:8F:68:68:BD:01:90:B0:CC:4D:F0:E6:71
Certificate issuer:       /CN=ad393c63f178657821a237ba026ca5279233333d
Certificate serial:       019427B4FAB5B3B9A0DC6DC6F991367947FB
Authority key identifier: AD:39:3C:63:F1:78:65:78:21:A2:37:BA:02:6C:A5:27:92:33:33:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/NRGRL-46NCSPaGi9AZCwzE3w5nE.roa
Signing time:             Thu 02 Jan 2025 15:49:19 +0000
ROA not before:           Thu 02 Jan 2025 15:49:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209791
IP address blocks:        93.175.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b4:fa:b5:b3:b9:a0:dc:6d:c6:f9:91:36:79:47:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad393c63f178657821a237ba026ca5279233333d
        Validity
            Not Before: Jan  2 15:49:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3511912fee3a34248f6868bd0190b0cc4df0e671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ef:c6:57:e9:de:14:a8:24:08:42:04:30:d1:
                    d5:57:b3:2c:7a:ac:8f:55:64:43:d3:d9:d1:00:7e:
                    84:93:38:6c:b1:76:e0:0d:5e:0b:9d:0f:7f:f7:7e:
                    32:27:ae:88:98:fc:19:61:db:42:7f:fd:76:61:92:
                    50:46:32:33:9a:22:b7:01:7b:7f:ad:68:42:dd:95:
                    2d:fe:4b:7f:c9:5f:89:c1:88:4e:02:09:33:f3:11:
                    ee:cf:62:cb:49:f0:f5:8a:06:2d:c8:ea:72:17:33:
                    dc:2e:c0:39:78:bf:2d:0d:d7:44:d2:53:06:bb:c1:
                    8a:e5:27:b7:eb:1f:34:48:19:2a:9d:30:33:01:03:
                    10:c6:cd:86:b9:44:43:16:81:00:5d:72:58:d1:db:
                    e4:09:75:99:41:f5:fc:5d:e8:18:04:59:9e:1f:b2:
                    00:2b:b6:33:de:40:d1:9c:11:25:7d:05:35:30:26:
                    d4:68:21:4f:d8:f1:a1:01:dc:2c:e6:bf:3a:05:32:
                    95:17:40:c0:5b:85:15:8e:ec:bc:31:f8:41:2e:d6:
                    40:2b:83:0d:47:f7:78:a2:2d:ca:ec:29:64:7f:a1:
                    33:c8:11:03:0a:7d:99:57:4e:bb:e4:61:5b:22:e0:
                    a4:ed:3b:0c:8c:ab:df:f2:93:8a:f7:4f:7d:19:85:
                    ec:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:11:91:2F:EE:3A:34:24:8F:68:68:BD:01:90:B0:CC:4D:F0:E6:71
            X509v3 Authority Key Identifier:
                keyid:AD:39:3C:63:F1:78:65:78:21:A2:37:BA:02:6C:A5:27:92:33:33:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/NRGRL-46NCSPaGi9AZCwzE3w5nE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.175.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:53:7d:0b:04:30:4d:ac:63:3a:38:a9:ac:87:e0:77:7e:a2:
         1f:ad:4f:55:53:45:28:39:d2:56:94:8a:dd:ba:de:16:cb:27:
         6c:b3:ce:ac:06:02:da:f0:d9:7f:76:13:88:2c:09:8e:a5:b8:
         7e:7f:69:57:97:5b:05:13:b0:4b:12:12:a4:10:f1:4b:16:8f:
         db:1d:94:04:0b:28:70:5f:1c:c0:c4:5c:29:c2:68:88:ea:79:
         c0:98:4a:63:40:63:e3:1c:e3:34:24:a0:ae:01:f0:41:f7:d8:
         f8:a4:60:2d:f2:70:85:d4:9b:9e:9d:87:17:9e:59:8e:5d:ee:
         f2:6d:b6:bf:1f:f7:1d:3f:63:98:40:a0:ad:0a:72:c2:80:c3:
         2c:f6:e7:76:b9:d2:53:bd:e6:e8:9d:b6:ef:0f:6c:6c:a7:1e:
         88:ce:5f:a7:63:a2:94:7e:11:20:a1:3b:86:14:25:5c:12:60:
         f2:d8:1d:55:7e:0e:84:74:38:c6:bd:9b:7b:e9:72:f5:27:f9:
         c4:2d:79:20:50:d3:42:4b:12:ea:fa:86:8c:3f:b3:a2:ad:b0:
         b0:2f:d1:50:91:eb:32:cc:80:2c:22:6c:d8:78:e7:61:a5:2f:
         1c:66:4e:f7:2b:d1:b8:94:31:ce:53:c3:87:1a:25:7d:2c:35:
         c3:65:06:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:24 2025 by rpki-client on console.sobornost.net