Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M0jWsTF-ztjLCfVHJVYnhFGMZY4.roa
File:                     M0jWsTF-ztjLCfVHJVYnhFGMZY4.roa (raw, json)
Hash identifier:          aF2QO8VpgY5yuHWaKShbj4/EXVEDc8dbNnoedgG/b5o=
Subject key identifier:   33:48:D6:B1:31:7E:CE:D8:CB:09:F5:47:25:56:27:84:51:8C:65:8E
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       0195ED47F2771350A81CE4249F6C53DAFAD1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M0jWsTF-ztjLCfVHJVYnhFGMZY4.roa
Signing time:             Mon 31 Mar 2025 17:37:50 +0000
ROA not before:           Mon 31 Mar 2025 17:37:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     211011
IP address blocks:        31.56.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:ed:47:f2:77:13:50:a8:1c:e4:24:9f:6c:53:da:fa:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Mar 31 17:37:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3348d6b1317eced8cb09f54725562784518c658e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9b:be:6a:58:b3:38:c9:5f:ef:35:d1:78:e0:
                    36:cf:99:f1:e6:a4:4b:de:a1:70:c3:b4:fa:f6:b0:
                    e8:4a:e9:68:e3:25:81:3a:9d:0b:c7:2f:90:44:55:
                    5d:21:06:d3:dd:db:2a:38:17:02:73:3c:52:b1:ac:
                    ad:d0:d9:a7:73:0b:c4:26:59:67:7b:36:c9:f8:31:
                    5a:ae:21:59:8e:4e:c9:1d:e1:15:51:60:89:94:1b:
                    a5:b5:90:87:ac:55:76:5b:b6:4b:20:78:9f:4b:a4:
                    89:83:49:8f:74:83:f8:ef:36:3e:81:38:5b:d2:68:
                    a0:bb:85:37:17:63:94:81:4c:d5:75:e7:de:e6:07:
                    ea:3a:db:3d:43:13:21:ac:49:4d:18:e4:6e:f7:b9:
                    62:db:57:39:0a:a8:c0:d9:ba:a7:5e:28:b3:79:6b:
                    f8:9b:48:b2:8e:9e:65:aa:04:c6:97:36:39:f7:6b:
                    0f:17:d9:09:5a:8d:f3:6e:3e:52:4c:1e:10:c6:82:
                    9f:76:c9:dc:cb:0d:ce:01:81:8f:77:79:d3:ac:06:
                    d4:55:14:c4:18:1c:16:98:f6:09:2a:61:47:b4:b0:
                    24:c9:31:f6:03:63:b9:4f:cd:ac:b6:9f:fa:e2:cf:
                    f2:e3:cf:af:24:53:02:36:08:c2:67:2a:01:35:a7:
                    06:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:48:D6:B1:31:7E:CE:D8:CB:09:F5:47:25:56:27:84:51:8C:65:8E
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M0jWsTF-ztjLCfVHJVYnhFGMZY4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.56.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:55:dc:3a:25:b4:5b:14:c2:c3:6b:33:04:82:5e:53:7f:2b:
         a3:a7:0d:62:22:d5:73:ef:80:97:1b:7e:8b:c9:9b:e7:5b:73:
         6f:fd:1e:a3:1b:09:9e:4e:42:fa:a1:b5:53:2d:1a:f2:9a:26:
         9b:b7:09:0c:57:91:ab:cc:f1:04:78:31:bc:3d:b5:b4:4d:d0:
         e2:23:29:29:c9:a3:d6:65:96:e3:37:73:da:91:b3:3e:a1:02:
         16:a3:0e:2d:87:8f:06:d2:01:5f:a7:c8:c3:e6:64:b7:d9:91:
         8f:36:b6:6c:50:ac:18:35:0b:38:0e:ed:33:93:1d:7a:a1:d4:
         e9:d0:75:17:ea:b9:ab:f1:16:d2:3e:ac:a3:22:d8:67:71:2c:
         b4:34:58:8a:2b:9c:08:48:dd:ee:50:73:dc:bd:7c:11:e5:73:
         85:8a:fe:0e:af:ff:3b:da:42:7b:74:5e:66:f6:ec:c3:e9:e9:
         b9:20:64:53:f3:98:49:dc:a6:3c:3c:7b:c5:55:9b:8e:64:c7:
         68:b0:f9:ed:5d:5b:16:a8:6b:76:71:53:be:0b:20:84:57:0d:
         1c:0f:8c:f7:d8:25:1a:42:1a:89:31:16:64:c0:16:e5:7c:41:
         22:0c:b9:c9:37:13:5a:c3:ea:7f:eb:4d:34:15:83:09:8c:ab:
         05:eb:07:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net