Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/BDRq07Y2Ic1D-Bm-FTXEa9UI32w.roa
File:                     BDRq07Y2Ic1D-Bm-FTXEa9UI32w.roa (raw, json)
Hash identifier:          GyOmTeK7tEqB19UhqOc1QRh1j0nV9QbQWD6z1N7zZ2I=
Subject key identifier:   04:34:6A:D3:B6:36:21:CD:43:F8:19:BE:15:35:C4:6B:D5:08:DF:6C
Certificate issuer:       /CN=fc9462fef495248fdbd973421fdebe21625cdf1e
Certificate serial:       0194266A040B105FD57031D2AA05AA1B914D
Authority key identifier: FC:94:62:FE:F4:95:24:8F:DB:D9:73:42:1F:DE:BE:21:62:5C:DF:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/BDRq07Y2Ic1D-Bm-FTXEa9UI32w.roa
Signing time:             Thu 02 Jan 2025 09:47:49 +0000
ROA not before:           Thu 02 Jan 2025 09:47:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     197015
IP address blocks:        83.242.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6a:04:0b:10:5f:d5:70:31:d2:aa:05:aa:1b:91:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9462fef495248fdbd973421fdebe21625cdf1e
        Validity
            Not Before: Jan  2 09:47:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=04346ad3b63621cd43f819be1535c46bd508df6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5f:33:ca:22:96:11:29:68:75:d7:41:a6:fb:
                    83:66:6d:68:1f:cc:7a:c7:57:08:57:50:3a:51:f2:
                    da:6c:f6:19:f6:51:50:c5:8f:af:01:0f:c6:c6:cd:
                    ad:13:86:02:91:64:79:40:f9:d0:05:9c:d1:71:ac:
                    86:76:fe:d6:7d:49:5b:88:54:3a:3d:d1:0d:ac:8f:
                    47:0c:c0:62:00:d8:0f:bc:cc:c6:13:01:58:d5:fb:
                    48:ae:f7:a3:96:0e:cb:c2:1a:24:9c:51:3a:87:7b:
                    64:27:84:22:ef:b0:a5:95:00:ac:c7:b4:ed:9a:04:
                    c1:0d:49:42:ef:c9:bd:85:dc:c5:6a:34:99:58:8a:
                    b5:c7:03:77:1b:e6:c0:fa:b4:b0:27:02:0b:11:a3:
                    20:04:8c:81:47:3e:b0:cb:41:4f:72:bb:c6:c9:ac:
                    66:f8:8e:d8:12:ff:13:53:56:0f:8c:69:df:c5:f9:
                    e3:ad:74:bc:fa:e9:ed:0e:15:94:69:52:d6:6e:01:
                    04:29:28:53:55:9e:4c:0b:c0:8e:09:ac:1b:bc:2b:
                    e9:ee:f6:3f:ac:4b:fd:41:df:a1:56:96:5b:d6:30:
                    5f:4e:3e:13:95:03:85:55:b9:c3:f5:26:65:ad:c0:
                    dd:4f:92:1c:d7:1e:0c:d4:65:39:73:16:8e:2a:c6:
                    3d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:34:6A:D3:B6:36:21:CD:43:F8:19:BE:15:35:C4:6B:D5:08:DF:6C
            X509v3 Authority Key Identifier:
                keyid:FC:94:62:FE:F4:95:24:8F:DB:D9:73:42:1F:DE:BE:21:62:5C:DF:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JRi_vSVJI_b2XNCH96-IWJc3x4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/BDRq07Y2Ic1D-Bm-FTXEa9UI32w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aba868-afd9-41e4-95ab-b97ba8b679ba/1/_JRi_vSVJI_b2XNCH96-IWJc3x4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.242.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:c7:9f:d4:e5:ba:dd:1c:1c:b6:bd:fb:47:d3:1e:3f:3d:55:
         c0:d4:61:c9:55:a9:42:b5:ef:34:20:89:fe:17:bb:06:7c:0d:
         90:b7:47:1c:1e:1d:f6:27:0f:50:08:bd:c4:23:ab:d0:39:5a:
         5a:fc:50:f2:67:aa:ec:40:be:25:5a:52:be:a7:12:d2:16:2f:
         8a:93:e9:ae:6f:ae:6f:f6:36:ea:3b:69:0a:f4:e8:1c:da:4a:
         0e:3c:c9:ed:9f:81:6d:9b:9b:a9:08:8a:08:61:14:6f:91:72:
         56:59:11:55:17:8c:73:88:d6:3f:d1:b6:ea:37:e5:18:9f:cc:
         0b:8d:4b:4c:00:72:75:6b:a4:5a:61:45:85:4b:41:96:19:bc:
         2a:c0:9b:a9:18:61:6f:a1:1e:db:0f:a9:bb:2f:a8:7f:d7:c9:
         35:9f:9c:85:1e:88:da:89:6d:2b:72:b6:d5:97:25:58:04:7c:
         28:7b:6e:c8:ec:2a:1a:37:e4:b3:91:da:3a:54:1d:0d:c2:0f:
         a2:6c:cb:d8:04:f0:19:57:6d:8f:8c:eb:27:9c:28:a8:76:e7:
         41:89:82:c5:e7:87:74:2a:b5:57:4c:13:e0:fd:3e:b1:59:39:
         89:3c:89:91:66:0a:77:21:64:18:6d:cc:4e:57:23:62:8d:14:
         60:41:22:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:59 2025 by rpki-client on console.sobornost.net