Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/dvL-jIIUnjzrmF_ix2eqcqmBOt8.roa
File:                     dvL-jIIUnjzrmF_ix2eqcqmBOt8.roa (raw, json)
Hash identifier:          lxw8tmWyTGgbmVPvCpBbeUcrOgcDy10u21KTE2KYeAU=
Subject key identifier:   76:F2:FE:8C:82:14:9E:3C:EB:98:5F:E2:C7:67:AA:72:A9:81:3A:DF
Certificate issuer:       /CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Certificate serial:       0194266B26E286D64CFA89BEB670BA6A65C5
Authority key identifier: 60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/dvL-jIIUnjzrmF_ix2eqcqmBOt8.roa
Signing time:             Thu 02 Jan 2025 09:49:04 +0000
ROA not before:           Thu 02 Jan 2025 09:49:04 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     216054
IP address blocks:        81.30.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:26:e2:86:d6:4c:fa:89:be:b6:70:ba:6a:65:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
        Validity
            Not Before: Jan  2 09:49:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=76f2fe8c82149e3ceb985fe2c767aa72a9813adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:78:f9:90:8d:b1:07:80:13:61:96:e8:8a:ec:
                    27:98:0c:19:6b:bb:9f:19:c7:fa:cf:78:2b:b2:b0:
                    8a:2b:91:58:dc:a2:46:7b:38:27:a3:a8:0b:7a:98:
                    fb:1d:26:4b:30:ef:c6:ad:3a:51:e7:8e:2f:da:3e:
                    a0:2d:1b:45:d4:42:43:8c:2e:96:a9:fa:7e:e7:f8:
                    5d:b7:59:14:a0:6a:e5:55:c2:5c:a4:9d:3b:53:80:
                    2b:7a:61:45:56:44:08:0e:16:88:99:07:c1:1f:5b:
                    0c:42:73:24:4a:99:77:c4:e6:2f:f9:4d:33:41:c5:
                    a6:ce:70:0b:74:67:73:e5:4f:46:7a:a4:f5:4e:71:
                    a4:e8:e7:47:33:59:38:b0:fc:ca:44:54:5a:41:bf:
                    03:cc:78:c9:ba:09:46:6c:c1:9a:8e:95:6c:15:09:
                    eb:a6:8f:d0:0a:eb:32:f5:21:9c:a5:e0:73:59:98:
                    48:21:39:9c:27:32:c3:12:cc:ce:bd:32:7e:33:07:
                    88:2b:18:48:e9:45:85:68:63:fb:5b:65:9a:ef:6a:
                    a8:f8:cb:53:05:e3:d7:7e:47:a3:3b:1b:79:82:4c:
                    2b:2a:b1:17:40:b6:45:9b:50:16:32:ba:46:1a:eb:
                    23:a3:c2:fd:4d:fc:b8:ee:ac:a0:20:7a:ff:ad:a3:
                    4c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F2:FE:8C:82:14:9E:3C:EB:98:5F:E2:C7:67:AA:72:A9:81:3A:DF
            X509v3 Authority Key Identifier:
                keyid:60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/dvL-jIIUnjzrmF_ix2eqcqmBOt8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.30.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:51:7d:b6:42:83:16:ea:96:e7:54:df:22:3a:0f:8f:b4:0d:
         36:e7:22:ed:22:ba:aa:8d:1b:7a:e8:e2:3e:d6:77:df:69:3b:
         f2:fe:7f:9c:45:9e:86:94:88:b5:56:63:dd:d1:c2:05:04:08:
         38:ce:eb:bc:b1:12:26:c3:65:6a:11:ba:8d:2c:b2:8c:33:0c:
         19:55:bc:58:6a:2f:48:e1:1c:87:01:4a:53:8c:14:9f:a3:2e:
         44:94:34:07:54:08:53:77:6b:65:d7:26:ff:16:17:96:95:d3:
         c0:02:86:0c:39:0a:72:91:57:44:40:07:ab:b4:ca:32:3b:ff:
         04:39:98:c7:09:5a:e0:80:0e:a3:18:d3:9c:91:9d:eb:43:0e:
         8e:58:24:05:88:2f:ae:11:bf:f8:b9:84:3a:8a:5f:b7:01:61:
         74:70:b9:48:e2:6c:17:9f:6f:1c:2e:82:38:d0:dd:e0:bd:56:
         a9:27:a5:e2:fd:81:c0:d0:80:e3:e6:40:1e:c8:f5:09:04:b7:
         16:37:1e:c0:3c:83:54:e5:96:7d:dd:a4:7f:d6:1d:95:27:01:
         46:b9:ec:76:d5:0f:96:a8:d0:60:37:1f:cb:f8:c8:89:c2:98:
         ff:64:15:11:1a:f2:47:d0:2d:e1:11:62:ff:1b:02:00:dd:30:
         aa:e9:83:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:29 2025 by rpki-client on console.sobornost.net