Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/RO-InVXPYoHaB1ZpM-19yr94dQs.roa
File:                     RO-InVXPYoHaB1ZpM-19yr94dQs.roa (raw, json)
Hash identifier:          8Y6VcUcgO4alufdIJ4djN2KAnB4AyYetp1VZzDDuyNk=
Subject key identifier:   44:EF:88:9D:55:CF:62:81:DA:07:56:69:33:ED:7D:CA:BF:78:75:0B
Certificate issuer:       /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial:       01942521678128F5CE19023F0B0F0B967CE7
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/RO-InVXPYoHaB1ZpM-19yr94dQs.roa
Signing time:             Thu 02 Jan 2025 03:48:53 +0000
ROA not before:           Thu 02 Jan 2025 03:48:53 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     16013
IP address blocks:        193.92.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:67:81:28:f5:ce:19:02:3f:0b:0f:0b:96:7c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
        Validity
            Not Before: Jan  2 03:48:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=44ef889d55cf6281da07566933ed7dcabf78750b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9c:8a:c4:00:aa:f8:70:2c:b5:6f:bf:a9:28:
                    fa:ce:2f:ef:1a:81:ea:10:7e:e7:5f:05:4b:f7:e8:
                    62:40:5e:9d:99:b0:8e:a0:73:79:44:77:12:33:12:
                    1d:66:9d:1a:2d:e0:ba:95:31:de:05:c9:8c:6b:b2:
                    23:0a:6f:cb:b0:37:6d:5d:d8:53:41:3d:ba:c2:58:
                    0d:bc:9d:4f:c9:19:42:2d:90:2f:56:e7:97:44:e0:
                    e8:10:55:a9:99:8f:d0:94:3d:96:df:42:eb:01:2e:
                    2f:85:fb:ab:ae:94:4d:77:b5:fd:1a:6f:ce:73:5a:
                    4d:c6:1c:36:01:e6:01:1e:d8:a4:ef:b1:e8:77:87:
                    66:78:4f:dc:0c:96:99:60:23:2d:40:21:2e:05:73:
                    82:15:e0:9d:df:92:ab:85:59:02:28:58:65:dc:d1:
                    98:5a:75:b9:73:be:48:4f:fa:e5:f1:39:73:be:80:
                    8f:1d:ca:b3:9b:f6:b5:94:3b:2f:7a:fd:9c:8b:9e:
                    db:0d:03:6d:a5:ec:83:00:58:d3:6f:6d:36:ae:bc:
                    31:9a:10:81:42:5e:32:c6:54:ae:bf:6d:89:75:9b:
                    a8:7c:80:ae:85:f1:2b:ff:3e:1c:4f:71:7f:c2:15:
                    89:93:05:61:12:59:38:ba:61:18:6e:89:03:19:2f:
                    74:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EF:88:9D:55:CF:62:81:DA:07:56:69:33:ED:7D:CA:BF:78:75:0B
            X509v3 Authority Key Identifier:
                keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/RO-InVXPYoHaB1ZpM-19yr94dQs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.92.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:4a:78:6b:f0:34:4b:dc:5d:40:86:56:66:f9:dc:44:a0:df:
         f6:34:50:ab:f5:6b:c1:c3:ec:59:3a:99:c9:e6:6b:5e:3b:0f:
         94:56:8f:e7:e6:16:4e:f0:f9:85:3c:f8:d4:a9:8f:80:c8:7b:
         4a:da:37:17:bd:b8:8f:e5:ec:b7:ed:85:ce:c7:3f:2e:76:57:
         38:b8:7d:0a:6a:d5:91:4b:48:e2:e5:b1:c8:33:22:b0:21:13:
         8f:21:44:cf:2b:f9:ff:f5:1b:23:88:40:25:ff:ec:ea:98:1f:
         3e:3e:bf:78:82:9c:eb:43:10:19:64:70:ed:7d:83:64:a7:da:
         89:42:27:b4:b8:95:22:b2:6e:c9:eb:c7:33:84:7e:37:ed:eb:
         b1:34:00:e4:2a:ce:d7:3d:39:37:32:f3:fa:3d:a2:55:bb:67:
         4b:59:cf:d2:d9:49:c8:f9:e8:77:05:ac:67:77:c8:d4:f7:64:
         fe:ba:71:15:2b:17:c4:54:7e:64:22:e7:06:73:a1:fd:37:95:
         55:25:6f:f7:16:61:aa:f7:93:21:f5:5a:55:8a:be:55:39:85:
         01:e0:d1:19:9a:fa:eb:55:66:e5:da:bf:c9:38:f7:30:b9:2a:
         2b:ac:02:7e:9b:ff:dd:96:29:d6:c4:f3:bb:64:0e:6a:bc:72:
         d7:fc:ec:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net