Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/TelciHh83ohMZLEiglr17mKx9tQ.roa
File:                     TelciHh83ohMZLEiglr17mKx9tQ.roa (raw, json)
Hash identifier:          WRRAn8x5n/KXtMausaPQfYREHYj3cbcPK0dMlkeLq38=
Subject key identifier:   4D:E9:5C:88:78:7C:DE:88:4C:64:B1:22:82:5A:F5:EE:62:B1:F6:D4
Certificate issuer:       /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Certificate serial:       019423D6BCBEFC71AA832CE19380BE2098CB
Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/TelciHh83ohMZLEiglr17mKx9tQ.roa
Signing time:             Wed 01 Jan 2025 21:47:43 +0000
ROA not before:           Wed 01 Jan 2025 21:47:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     206002
IP address blocks:        91.199.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:bc:be:fc:71:aa:83:2c:e1:93:80:be:20:98:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
        Validity
            Not Before: Jan  1 21:47:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4de95c88787cde884c64b122825af5ee62b1f6d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0b:7c:60:27:09:db:84:6f:99:b3:04:74:9b:
                    ae:b8:c4:39:18:bd:5c:e6:90:d9:2a:ab:ab:c1:d2:
                    d7:91:03:ca:34:eb:1b:6f:60:11:d7:9f:80:c4:99:
                    d0:be:ae:ff:0d:05:83:9c:c3:ed:88:7e:b0:7f:2b:
                    b5:8c:d3:74:ae:c9:ef:e2:16:2d:45:9e:c0:e3:a7:
                    cd:87:20:9a:63:d7:0e:f3:62:dc:b1:9d:ee:1a:b7:
                    b7:76:d9:c5:57:da:6c:da:f1:2d:c3:aa:34:64:5a:
                    40:c9:69:18:e5:8d:6c:9e:0c:9b:20:bf:bc:7f:37:
                    6a:6f:56:e9:13:b3:86:00:12:e3:b3:bd:e5:0a:fe:
                    e3:91:e1:87:ee:67:fc:7a:6b:78:3a:cc:6d:1e:e5:
                    29:1f:49:08:f1:d7:e0:e6:b8:79:e8:1e:ba:c7:a0:
                    6f:01:6b:13:4f:69:31:5b:08:c6:60:05:27:08:f0:
                    dd:ae:22:14:0f:20:3a:28:af:e8:b7:e2:d5:1a:75:
                    25:ac:4d:6b:06:11:13:d9:dc:ac:6c:12:2f:00:31:
                    26:f8:d3:0a:20:55:cd:f5:f4:9e:b6:2d:fc:61:d4:
                    b2:3d:be:1a:2b:8b:c8:10:a9:51:66:a1:75:d7:d5:
                    f7:27:53:86:c6:eb:47:b5:6f:ac:aa:ba:5a:56:8a:
                    3e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E9:5C:88:78:7C:DE:88:4C:64:B1:22:82:5A:F5:EE:62:B1:F6:D4
            X509v3 Authority Key Identifier:
                keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/TelciHh83ohMZLEiglr17mKx9tQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.199.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:27:6d:00:cb:4c:83:cb:6c:54:62:52:5e:86:1d:59:6c:6a:
         e5:28:00:72:04:ba:14:e8:78:db:91:1d:bc:29:f4:81:3b:2d:
         3c:87:9c:2d:4c:00:43:03:81:d7:88:e8:f2:4c:ae:66:e8:32:
         09:2a:a1:68:0a:0c:0a:c8:52:e5:af:7f:7f:44:33:cb:33:dc:
         da:9c:a7:b0:e5:a0:1e:15:87:7e:97:cc:d6:f0:34:2f:24:4d:
         c7:3b:a1:ab:5a:0d:81:6e:0b:f1:a4:99:4a:f8:a1:af:10:24:
         a8:90:c9:a5:e6:28:37:5c:26:ea:b2:07:85:fe:60:80:9c:7d:
         6e:6a:42:c7:bc:ce:b9:5d:93:c2:6d:2f:35:97:0c:c9:8f:64:
         22:4a:9c:72:ad:2f:e9:c6:cd:24:80:f4:29:9e:bc:44:bf:b2:
         0c:22:f5:f4:27:12:2d:04:3d:4f:88:d7:2c:f2:1c:03:4b:e7:
         b6:4e:05:16:a1:12:40:d9:3f:c3:aa:04:8b:ca:00:59:bd:ff:
         fa:94:f1:49:c4:e0:87:29:65:4f:9a:ab:15:62:42:0c:18:0c:
         c5:01:09:f2:9a:28:2e:25:6d:d4:a2:ba:29:5e:1a:d8:af:4b:
         b2:25:85:2b:a6:e5:0a:ff:6f:8c:09:48:3c:b3:e6:71:ac:ba:
         48:1f:62:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:24 2025 by rpki-client on console.sobornost.net