Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/6_SJnfO-m7MtpNL_B9ARxP9ViqI.roa
File:                     6_SJnfO-m7MtpNL_B9ARxP9ViqI.roa (raw, json)
Hash identifier:          LdcfP3HEkmr8KWBN+enohwNkL/0YyHSs6bxWVW/irJI=
Subject key identifier:   EB:F4:89:9D:F3:BE:9B:B3:2D:A4:D2:FF:07:D0:11:C4:FF:55:8A:A2
Certificate issuer:       /CN=548f757a56d17680d6d6690b19d9f39061980033
Certificate serial:       019423D6C17FB674A6A3FE673516D1BBFA5E
Authority key identifier: 54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/6_SJnfO-m7MtpNL_B9ARxP9ViqI.roa
Signing time:             Wed 01 Jan 2025 21:47:44 +0000
ROA not before:           Wed 01 Jan 2025 21:47:44 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49372
IP address blocks:        91.234.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:c1:7f:b6:74:a6:a3:fe:67:35:16:d1:bb:fa:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=548f757a56d17680d6d6690b19d9f39061980033
        Validity
            Not Before: Jan  1 21:47:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ebf4899df3be9bb32da4d2ff07d011c4ff558aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d6:13:d6:d6:13:1d:f7:95:e2:1f:b9:41:44:
                    a2:4a:d5:73:7c:62:9c:28:5d:23:8b:60:2d:2d:8f:
                    c3:ee:da:87:a0:e9:d6:27:1d:b2:3b:d3:d4:6f:d9:
                    14:50:ae:cc:04:16:8e:5d:02:7c:86:32:20:58:cb:
                    c0:29:b5:72:27:43:c5:ff:0c:50:da:1a:b9:30:5b:
                    b8:b5:72:cd:2e:f1:25:9b:64:aa:f4:2f:b5:d4:fe:
                    6e:ef:0f:a8:74:05:57:f2:f0:84:49:a0:aa:27:4d:
                    97:f2:81:b6:f3:7b:6c:9c:d1:59:bf:7f:c7:f8:46:
                    d7:48:55:dc:fd:f1:e7:eb:4b:12:f5:a1:ae:ff:26:
                    81:95:e9:c1:c5:4e:90:38:ae:0f:41:1c:47:42:e2:
                    18:bc:60:2b:0a:a5:24:ec:49:19:d9:ca:f5:b0:35:
                    4c:a7:a9:92:95:c5:f9:5e:20:fb:16:a6:d2:54:f6:
                    e3:f2:94:25:cd:d7:45:9b:1c:52:1d:17:64:ad:fb:
                    6c:47:1f:a3:c5:5a:0a:3b:57:28:a6:81:b1:ba:8f:
                    5f:60:34:0b:2d:09:a0:58:70:bb:20:bd:02:0f:92:
                    5e:ab:66:ac:e3:27:3a:ab:8a:1d:db:c9:40:75:73:
                    60:d8:84:41:13:41:4f:b2:3a:d8:ff:22:62:fa:87:
                    1a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F4:89:9D:F3:BE:9B:B3:2D:A4:D2:FF:07:D0:11:C4:FF:55:8A:A2
            X509v3 Authority Key Identifier:
                keyid:54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/6_SJnfO-m7MtpNL_B9ARxP9ViqI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.234.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:b1:9d:2d:1c:e6:bc:11:40:ca:35:0d:51:39:98:b8:94:b4:
         aa:57:c2:37:4c:2c:12:0a:00:13:d6:05:90:30:48:5d:c8:96:
         30:15:56:8c:15:d7:91:c3:c4:5d:83:1f:33:41:06:cb:bd:14:
         67:15:e7:d6:72:e6:b3:6c:4e:73:56:3d:44:e6:1d:a4:45:aa:
         bf:63:d6:1e:58:25:25:a5:71:8e:30:62:9c:0a:96:d5:43:d7:
         54:17:72:9e:d7:7a:b1:aa:d5:aa:16:c2:4f:25:30:ae:46:aa:
         35:fa:0c:84:7b:f3:92:d1:f5:84:dc:75:6b:3f:8d:84:2c:ba:
         99:9f:2b:97:ef:62:63:62:9b:df:a9:0a:58:12:f7:26:c3:ae:
         46:c4:b6:e9:81:26:06:c9:12:dd:e2:b0:94:c1:c1:b9:52:55:
         8f:e7:77:0d:89:bd:7f:b9:c7:6a:c2:9b:8c:50:f4:41:9c:fb:
         d2:6b:c3:f9:3f:25:f0:a2:d6:93:c1:95:85:1c:ff:9f:e8:e1:
         ae:6a:2b:c4:01:16:f3:a2:7b:3e:12:f8:42:7b:af:4a:d2:3d:
         b6:fc:f1:64:e1:81:2b:e3:bb:34:1a:68:ef:58:95:5b:e0:2c:
         3e:9b:a7:0d:59:5b:9e:25:fa:76:d1:eb:d7:54:b5:ea:50:75:
         a5:c4:10:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:54 2025 by rpki-client on console.sobornost.net