Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/m3gokZ3oqrQAkT9aNHEn43WdviM.roa
File:                     m3gokZ3oqrQAkT9aNHEn43WdviM.roa (raw, json)
Hash identifier:          MQtM6YjLXyL+j/Sfr97BhpgH5ErvjAr3xvEfcREF22c=
Subject key identifier:   9B:78:28:91:9D:E8:AA:B4:00:91:3F:5A:34:71:27:E3:75:9D:BE:23
Certificate issuer:       /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial:       019420D65EC465F53BE60CFBB3F5BB3BE50D
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/m3gokZ3oqrQAkT9aNHEn43WdviM.roa
Signing time:             Wed 01 Jan 2025 07:48:27 +0000
ROA not before:           Wed 01 Jan 2025 07:48:27 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     197382
IP address blocks:        94.141.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:5e:c4:65:f5:3b:e6:0c:fb:b3:f5:bb:3b:e5:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
        Validity
            Not Before: Jan  1 07:48:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9b7828919de8aab400913f5a347127e3759dbe23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c1:8d:8e:01:5a:a9:ac:bc:05:0e:cb:a6:0f:
                    0d:9e:f1:e8:cc:5a:0b:10:3c:cd:06:f2:75:d3:fe:
                    08:95:55:51:f3:29:af:0d:d9:8d:c7:96:ff:f5:7c:
                    2a:cd:14:62:39:fb:e7:9d:be:9d:ff:60:13:9c:e1:
                    6a:e0:61:75:9a:3f:c5:8e:a2:bb:2f:08:32:52:43:
                    11:1c:d5:25:63:42:90:f5:c1:55:d6:3e:7c:f1:75:
                    f8:4e:42:28:6b:06:ae:82:6a:15:f1:d0:65:1f:ce:
                    d1:af:51:21:cf:3a:98:d9:d2:3f:a8:96:f1:29:e0:
                    0b:41:f7:00:39:08:37:a2:4c:5e:59:dd:70:40:25:
                    73:2f:f5:3b:37:a3:23:15:6e:28:c4:46:b9:ee:90:
                    41:1f:7d:15:cc:af:e6:0f:ec:5f:0d:ec:2f:2c:c3:
                    18:da:61:d4:15:95:51:e4:fd:fb:b5:3b:e9:bc:f2:
                    cf:84:39:27:62:fd:c9:cb:45:4e:55:88:59:36:f2:
                    f3:cb:32:74:f8:28:c0:2d:b4:28:8b:0e:bf:e8:d8:
                    29:34:d6:8e:ad:3e:0f:2a:e4:1e:eb:ed:29:f3:b0:
                    09:02:55:9b:ed:d9:88:c9:7d:04:9f:6a:c7:f8:a1:
                    1f:fe:d8:31:60:1f:9e:23:bb:dc:3d:77:0a:99:5f:
                    06:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:78:28:91:9D:E8:AA:B4:00:91:3F:5A:34:71:27:E3:75:9D:BE:23
            X509v3 Authority Key Identifier:
                keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/m3gokZ3oqrQAkT9aNHEn43WdviM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.141.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:74:cb:ef:f0:22:8e:73:60:24:b0:ae:7f:bd:4d:af:4d:d3:
         e5:09:a9:ae:8c:00:85:93:0c:13:0a:05:a0:b8:27:03:3a:53:
         a4:bb:92:53:1f:32:91:05:a3:6f:f9:13:41:a1:11:43:3e:29:
         69:6f:46:83:30:60:6e:22:4f:c7:0a:67:64:90:bf:c8:2b:96:
         d1:39:f8:c5:0f:c2:f5:fb:7a:cc:80:0d:4d:15:6b:da:56:e9:
         0e:5c:76:8c:9d:df:f6:a4:b9:34:34:08:59:79:e5:31:57:d9:
         a7:35:54:f0:cc:20:94:2a:08:ad:ec:05:59:61:4d:c0:4f:76:
         3d:f3:ea:35:f7:87:92:68:e7:c8:d2:18:be:af:87:c3:cc:e8:
         2c:bb:a4:46:c4:3d:a7:4f:23:1e:bc:e6:6f:a9:43:1e:e8:69:
         ae:5a:67:79:18:22:c5:39:61:d9:44:0a:ee:ca:0f:d9:54:a7:
         c9:c7:93:c7:03:25:65:59:6a:72:70:96:4a:5d:32:ef:ff:d4:
         02:4d:9b:1e:46:e6:5f:d0:aa:87:c2:97:97:1b:e9:74:91:44:
         02:5f:bb:a4:77:6f:b9:7c:fe:d6:7a:28:51:60:99:33:fd:f3:
         b0:6e:63:ff:eb:b8:08:77:4e:a2:05:ed:36:1a:da:83:55:8e:
         d2:99:fa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:27 2025 by rpki-client on console.sobornost.net