Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/6JHOG8xlyXcJaJHj1p15ZnjcMvA.roa
File:                     6JHOG8xlyXcJaJHj1p15ZnjcMvA.roa (raw, json)
Hash identifier:          7H9LMcEBkurlEfniM3FZBv4N6xpse9Cfq1J2Hc4Zzrg=
Subject key identifier:   E8:91:CE:1B:CC:65:C9:77:09:68:91:E3:D6:9D:79:66:78:DC:32:F0
Certificate issuer:       /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
Certificate serial:       0194252144C27FE864A66DA67F603AFA442F
Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/6JHOG8xlyXcJaJHj1p15ZnjcMvA.roa
Signing time:             Thu 02 Jan 2025 03:48:44 +0000
ROA not before:           Thu 02 Jan 2025 03:48:44 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     52026
IP address blocks:        91.234.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:44:c2:7f:e8:64:a6:6d:a6:7f:60:3a:fa:44:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2
        Validity
            Not Before: Jan  2 03:48:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e891ce1bcc65c977096891e3d69d796678dc32f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c1:20:8e:b3:7c:16:65:60:63:f5:f8:c5:f8:
                    a4:24:4c:a6:5e:16:b7:53:02:80:e2:d3:88:8e:5e:
                    c2:70:8c:d2:d6:87:5d:a9:d1:b9:86:55:f2:ee:dc:
                    b1:4b:57:47:03:5c:23:97:95:10:0d:21:ee:a6:35:
                    a4:d2:eb:67:a3:c6:6c:30:d6:4b:52:5c:22:26:e8:
                    b7:ff:fa:4d:cc:0d:5d:e0:34:4c:47:85:f4:02:75:
                    ac:08:5f:19:22:fe:d0:d1:32:74:5d:63:b9:bb:be:
                    fc:14:31:d2:22:6f:64:0b:6d:82:92:00:1e:39:61:
                    a4:5b:c4:99:15:81:d6:35:30:0f:eb:d9:7d:f1:a6:
                    c5:9f:3f:64:14:26:57:39:86:8a:a2:c6:12:27:21:
                    6d:92:b1:51:bf:4e:db:46:d5:77:c4:86:f4:b8:34:
                    7e:c3:9f:d8:47:46:60:dd:2a:59:3e:83:8a:98:90:
                    fe:d5:ec:6c:09:8d:78:a6:0a:43:24:22:97:57:3a:
                    d7:8c:e1:27:77:85:73:ca:aa:a4:aa:50:12:84:16:
                    70:96:37:06:86:43:b3:b1:70:3e:65:2b:bc:5f:90:
                    e4:49:8b:3a:58:7a:55:07:17:68:18:85:fa:8c:81:
                    fa:fa:52:e6:c4:bf:87:85:f9:df:ea:f0:81:54:f2:
                    6d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:91:CE:1B:CC:65:C9:77:09:68:91:E3:D6:9D:79:66:78:DC:32:F0
            X509v3 Authority Key Identifier:
                keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/6JHOG8xlyXcJaJHj1p15ZnjcMvA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.234.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:cb:07:df:bd:c7:6d:fe:77:29:1d:63:af:49:c5:45:a9:79:
         11:e7:5d:d2:1d:60:7d:10:4b:e7:b5:30:ae:a3:97:48:cd:9a:
         c7:0b:7a:fb:02:3f:2c:99:9c:b0:be:8f:ef:69:ca:31:a2:76:
         fa:5a:44:f2:15:7d:88:27:1d:41:06:a8:71:dd:bf:48:5e:0d:
         13:f3:f7:08:f0:bc:be:1e:35:56:b8:c2:0a:e1:fd:a1:fc:2a:
         2f:26:d8:b5:0c:f1:a3:aa:ab:9c:fd:df:bd:0b:68:45:e7:f9:
         08:bf:f5:e6:58:0c:ea:73:28:83:f1:9c:de:1e:76:c8:74:00:
         b0:e8:da:79:d2:12:93:64:e8:b7:f1:21:ac:b5:4e:36:90:7b:
         e0:ec:a9:8b:62:a4:a1:05:7e:aa:9e:1d:17:0e:60:f7:06:ff:
         07:be:4b:d9:f0:8c:e2:d9:19:f4:3b:32:ed:67:05:b4:cf:ca:
         23:de:33:67:8e:5b:d3:4e:7b:88:4c:e0:cc:f5:b0:93:5c:fd:
         4b:2c:a9:b0:94:0c:52:36:3a:b2:52:ce:f4:db:6c:00:dd:91:
         82:8d:7a:5b:4e:65:8b:ac:b3:86:28:e6:ea:93:21:ae:79:ec:
         8a:b0:f0:c1:55:bc:95:3d:64:41:ab:16:0d:89:96:5e:e6:03:
         ae:ad:64:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:01 2025 by rpki-client on console.sobornost.net