Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/6KXLkC_cgd5ILMccrhh-m3RCwS8.roa
File:                     6KXLkC_cgd5ILMccrhh-m3RCwS8.roa (raw, json)
Hash identifier:          Az+UEZWLV4uod4atp3pTmM4QksD0MTVrJp8g22f4T2Y=
Subject key identifier:   E8:A5:CB:90:2F:DC:81:DE:48:2C:C7:1C:AE:18:7E:9B:74:42:C1:2F
Certificate issuer:       /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Certificate serial:       019425FCC7F6A8FB63EFF0F2C318B7616290
Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/6KXLkC_cgd5ILMccrhh-m3RCwS8.roa
Signing time:             Thu 02 Jan 2025 07:48:30 +0000
ROA not before:           Thu 02 Jan 2025 07:48:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     3292
IP address blocks:        185.73.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:c7:f6:a8:fb:63:ef:f0:f2:c3:18:b7:61:62:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
        Validity
            Not Before: Jan  2 07:48:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e8a5cb902fdc81de482cc71cae187e9b7442c12f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d7:61:62:63:b4:96:bd:a3:3e:33:a7:c8:37:
                    36:b2:e8:f0:8c:b3:8a:64:88:ac:c1:5a:92:38:0a:
                    da:3f:9d:b5:66:48:fa:00:ba:f0:0b:9a:de:b7:bf:
                    f2:d4:8e:13:a7:8b:bd:4c:68:a0:d5:a3:29:80:9b:
                    d0:f7:23:3e:29:df:e0:54:a5:77:ce:35:9a:db:89:
                    2e:1a:1a:75:9e:c4:c9:fa:2b:5c:98:18:65:cc:2e:
                    0f:1b:3f:b9:29:86:f3:40:7d:aa:3f:4c:0a:f2:1e:
                    d9:3d:66:ef:c7:ee:67:28:8d:af:fd:0b:2e:bf:ff:
                    8f:9a:58:15:f7:f8:34:d3:78:79:00:e4:b0:5d:4f:
                    d1:5a:b5:c3:4a:e9:94:d3:ca:a5:a3:a0:70:e1:f0:
                    73:45:2d:c3:51:66:04:36:fe:60:a0:be:f5:63:29:
                    33:03:b2:f7:59:b9:5a:ed:69:4f:a1:29:2b:d7:10:
                    02:f3:f9:b8:ef:94:fd:71:92:3c:8e:5c:2a:40:f5:
                    44:43:26:8a:b8:78:9c:2c:9d:9e:d0:88:6e:5f:f1:
                    8a:a4:a5:3f:33:66:c4:7b:dc:1b:f0:12:54:c2:41:
                    f3:0f:99:e6:55:c5:d2:5f:d7:c0:ff:ac:f4:36:c9:
                    6c:a1:74:aa:57:b9:4d:4e:3c:2a:d8:8c:d1:06:65:
                    5c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A5:CB:90:2F:DC:81:DE:48:2C:C7:1C:AE:18:7E:9B:74:42:C1:2F
            X509v3 Authority Key Identifier:
                keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/6KXLkC_cgd5ILMccrhh-m3RCwS8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.73.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:05:1d:a1:52:26:cb:71:ef:e5:5f:16:e0:0a:a6:78:17:06:
         a0:5d:c1:6a:65:f1:3f:13:92:30:b5:ed:b3:3e:4d:81:10:fc:
         9b:e8:c0:5c:9e:57:3b:60:94:db:e6:34:29:2b:31:c8:ed:3e:
         51:39:55:0b:88:05:46:4e:c6:76:c4:4b:61:60:cc:36:10:64:
         c5:02:7b:d1:9e:24:0f:62:e9:2e:b1:17:4f:7f:7c:80:69:03:
         f7:3f:1c:cb:a6:4a:d1:e1:3c:dd:d6:60:a0:a4:6a:cf:24:b0:
         b3:61:fd:61:06:37:eb:ad:31:f7:1c:76:c8:63:54:c8:ce:3d:
         0c:5c:f8:6b:68:12:f1:f3:53:a9:29:05:d9:5c:d3:a4:5b:bc:
         ed:0d:eb:94:e5:6a:34:af:7f:2b:c0:4d:5a:ac:53:ab:56:bc:
         39:bf:7f:76:e0:25:39:b2:71:9e:64:6c:78:eb:8f:56:fd:0f:
         ff:ba:4b:e1:57:5f:e7:1b:14:89:1c:a0:13:0c:6c:0e:cc:ed:
         fe:0a:06:64:ac:63:88:78:9a:23:85:8b:85:59:b9:a7:c0:9b:
         38:cb:fe:0f:24:71:19:22:2e:e9:ef:7d:b7:a1:0e:f4:cd:8f:
         21:39:4b:b1:c0:f1:b7:44:3c:bb:52:1e:21:79:e9:aa:36:30:
         dc:ee:24:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:28 2025 by rpki-client on console.sobornost.net