Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/9BckWYd3Zpv7VuHw83B3GgbSq2c.roa
File:                     9BckWYd3Zpv7VuHw83B3GgbSq2c.roa (raw, json)
Hash identifier:          1ciDlQb2CZ1qp4TAdUK8jkR1eFPaY1eqjyHYTIjMv0Y=
Subject key identifier:   F4:17:24:59:87:77:66:9B:FB:56:E1:F0:F3:70:77:1A:06:D2:AB:67
Certificate issuer:       /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial:       019426D9DDDA5280E9D912033F17220B84FF
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/9BckWYd3Zpv7VuHw83B3GgbSq2c.roa
Signing time:             Thu 02 Jan 2025 11:49:59 +0000
ROA not before:           Thu 02 Jan 2025 11:49:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212626
IP address blocks:        93.175.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:dd:da:52:80:e9:d9:12:03:3f:17:22:0b:84:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
        Validity
            Not Before: Jan  2 11:49:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f41724598777669bfb56e1f0f370771a06d2ab67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6c:37:fd:cc:76:b5:77:22:05:61:45:3d:d0:
                    72:e0:13:cc:8a:40:58:1b:90:19:0b:9e:66:44:3c:
                    a6:89:e8:8d:df:f6:4b:f7:ba:f7:97:9e:9f:8b:0c:
                    f4:5e:b5:33:ea:7a:ec:18:1a:54:8f:f6:3e:e7:9f:
                    04:2e:f2:ba:0c:56:9e:6e:2c:34:a7:68:62:d3:84:
                    de:48:ed:76:b8:45:37:19:49:9e:f4:63:c2:a7:72:
                    2b:f7:39:fc:d5:16:eb:2e:9a:55:8d:34:35:77:bf:
                    73:16:54:d6:a4:2f:13:06:58:33:0a:e5:ac:df:2b:
                    c6:9b:db:94:44:f2:18:2b:d0:2e:22:75:aa:c5:b6:
                    7f:91:30:e6:dd:85:36:8d:6b:62:15:01:a5:5b:15:
                    55:df:47:80:ea:14:20:16:9f:3a:c4:8d:df:67:1a:
                    6e:49:e7:54:c1:09:d1:a4:17:2b:29:b6:03:18:0c:
                    c1:e5:bc:ba:6a:45:b6:c6:3b:42:2c:79:64:c2:c8:
                    55:fd:d6:83:f1:b3:e8:9f:a2:44:a0:b3:dd:35:39:
                    2d:db:61:a8:a1:65:bf:61:ca:a0:af:9f:c5:3e:6f:
                    2e:71:6c:d6:56:c7:59:5b:be:eb:d5:b1:af:b4:cc:
                    cd:79:c8:09:de:ce:96:4d:a0:98:fa:0c:43:48:d5:
                    07:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:17:24:59:87:77:66:9B:FB:56:E1:F0:F3:70:77:1A:06:D2:AB:67
            X509v3 Authority Key Identifier:
                keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/9BckWYd3Zpv7VuHw83B3GgbSq2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.175.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:f6:64:be:96:f7:c1:ba:82:69:22:65:16:43:64:9f:4a:40:
         75:b6:9d:11:da:f8:f8:54:3f:d8:c2:b4:5b:72:75:f3:95:7a:
         66:a7:d5:9b:2d:ff:6a:40:4f:41:84:b6:62:85:9b:12:ea:5f:
         a7:b3:6f:19:64:7b:10:18:71:e8:a4:e7:68:da:ce:d1:e6:a0:
         b9:b3:3a:b8:63:35:3e:b6:2d:cb:e2:d9:35:a1:4a:a1:81:ea:
         4c:c5:99:f1:7a:99:26:fe:4e:5d:68:84:8f:2d:b6:14:18:9c:
         a1:ed:82:4d:27:6e:0c:4e:2f:86:b5:68:21:73:5a:c8:12:99:
         41:8d:7b:73:35:71:75:10:5d:13:f4:30:29:b4:6a:29:e4:31:
         b2:d3:3a:45:e2:ee:fc:20:2a:02:ed:3c:4d:9b:ac:60:23:a6:
         59:db:c3:99:35:97:ae:db:2b:d6:f1:17:19:44:fd:3c:bb:32:
         07:bd:92:86:57:2d:09:5b:a3:41:d4:95:b6:dd:53:89:53:1b:
         1b:69:d3:6b:33:69:32:10:0c:f0:84:c3:a3:95:ab:f5:8b:1a:
         f0:33:c6:62:1c:77:4c:b3:01:18:24:a0:a8:80:67:9f:94:d3:
         8e:07:93:16:36:cb:4d:3c:16:55:1a:81:90:5d:98:d0:8f:c5:
         e4:36:2e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:59 2025 by rpki-client on console.sobornost.net