Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/lAbVacJrgztu_NhHYXWokojqeEc.roa
File:                     lAbVacJrgztu_NhHYXWokojqeEc.roa (raw, json)
Hash identifier:          b5DQ5YmTJodarXLSdRJFMbK2K3dk6jpwFRrIoIXaqxE=
Subject key identifier:   94:06:D5:69:C2:6B:83:3B:6E:FC:D8:47:61:75:A8:92:88:EA:78:47
Certificate issuer:       /CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Certificate serial:       01942067C3EE25E60170D520928E3BCC4C8F
Authority key identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/lAbVacJrgztu_NhHYXWokojqeEc.roa
Signing time:             Wed 01 Jan 2025 05:47:38 +0000
ROA not before:           Wed 01 Jan 2025 05:47:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     559
IP address blocks:        193.5.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:c3:ee:25:e6:01:70:d5:20:92:8e:3b:cc:4c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
        Validity
            Not Before: Jan  1 05:47:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9406d569c26b833b6efcd8476175a89288ea7847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:40:3e:00:ac:a2:1a:9d:d0:f6:65:dc:03:27:
                    c8:6f:ae:90:c0:0f:30:b7:b7:9a:c5:03:61:93:dd:
                    42:da:02:cd:27:51:6b:ea:97:55:5f:cc:c4:43:8a:
                    71:86:40:e0:76:a8:0b:22:13:de:86:32:70:f0:62:
                    25:a9:2d:c7:de:bd:6b:a4:60:d0:03:c1:eb:bb:0f:
                    c0:4e:fe:58:e8:c9:5c:fd:ed:f0:63:2b:45:c8:7b:
                    07:05:0b:fe:14:6b:f7:45:8c:f0:d3:17:f0:c5:ff:
                    2f:e5:92:9d:ec:9d:fb:c0:af:3a:48:5f:88:e5:39:
                    46:33:be:ed:25:e2:44:77:20:5c:8c:88:37:57:58:
                    e2:7f:45:0e:e9:c7:74:d4:40:5a:68:d1:14:a1:c7:
                    83:7c:1e:a6:37:c2:8a:2d:ce:d7:7c:03:d9:5e:be:
                    0a:be:d6:7d:d5:c0:39:00:2d:d3:94:e3:43:93:a2:
                    ee:bc:6f:4a:2b:5f:fa:8a:5c:0e:9b:9d:b3:8d:c5:
                    17:bb:5e:2c:33:fe:99:23:32:ca:e5:c5:a6:c0:a2:
                    ac:d3:94:62:fe:08:22:e7:e2:18:b0:34:55:e0:d5:
                    e6:7b:6b:75:e9:62:85:5e:e9:8f:fb:92:72:7a:fe:
                    25:9f:9e:2a:67:eb:79:ae:d9:4b:ff:cc:bd:72:93:
                    3e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:06:D5:69:C2:6B:83:3B:6E:FC:D8:47:61:75:A8:92:88:EA:78:47
            X509v3 Authority Key Identifier:
                keyid:7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/lAbVacJrgztu_NhHYXWokojqeEc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.5.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:57:7c:65:96:24:9b:28:85:ea:29:41:4f:94:35:ea:c3:9c:
         5b:d8:cc:31:5c:de:b2:8b:0a:1e:30:18:00:03:8f:3a:f3:9c:
         47:d1:3c:39:85:6c:41:e9:5c:50:ff:6d:d0:42:eb:20:4a:e1:
         d2:c3:aa:46:37:d1:27:fe:54:f6:80:74:56:33:ad:b3:53:aa:
         40:45:7f:4d:23:79:f5:5d:5a:60:d2:19:06:db:77:30:10:1f:
         82:f8:2c:4a:68:7a:44:a8:a1:d2:0d:b9:da:8a:1c:d9:f0:42:
         20:6e:7f:24:c1:2d:85:c2:b1:df:02:42:e7:16:bb:cf:b2:31:
         f0:3a:bc:1d:aa:6b:cf:fe:8d:ff:bf:80:92:17:64:bb:a7:af:
         38:f0:a1:38:f7:53:58:48:d7:0c:b7:bc:aa:05:06:b3:2e:5e:
         13:13:0e:b9:23:5f:24:90:f1:da:6d:a7:14:a6:72:32:65:ed:
         6f:2f:dd:66:77:56:cb:b6:a7:91:d1:da:a0:78:e5:47:fc:71:
         bc:42:aa:58:a6:b7:ee:ef:b3:26:f3:23:8e:4d:93:cf:0a:62:
         26:6e:af:2a:75:b9:aa:9e:86:e9:63:11:d1:81:ed:ea:96:8d:
         f3:cb:9e:7e:a5:d6:4f:43:11:a4:df:96:9f:c8:86:87:e9:5e:
         2e:16:f0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:00 2025 by rpki-client on console.sobornost.net