Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/2Zm15nya-qIgvvpfAijKMsgEkJ4.roa
File:                     2Zm15nya-qIgvvpfAijKMsgEkJ4.roa (raw, json)
Hash identifier:          R6UtE66nKKM8V86y41wgOOrSUcLC3hcokGTEuECcZNA=
Subject key identifier:   D9:99:B5:E6:7C:9A:FA:A2:20:BE:FA:5F:02:28:CA:32:C8:04:90:9E
Certificate issuer:       /CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Certificate serial:       019421B1AED589A768D2FDCCEEDC9E56A508
Authority key identifier: 02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/2Zm15nya-qIgvvpfAijKMsgEkJ4.roa
Signing time:             Wed 01 Jan 2025 11:48:00 +0000
ROA not before:           Wed 01 Jan 2025 11:48:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     31274
IP address blocks:        193.25.124.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:ae:d5:89:a7:68:d2:fd:cc:ee:dc:9e:56:a5:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
        Validity
            Not Before: Jan  1 11:48:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d999b5e67c9afaa220befa5f0228ca32c804909e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:40:8e:cc:84:58:db:8c:1e:06:35:21:89:d0:
                    17:81:59:05:98:fc:ec:6e:48:a0:86:fa:bb:dd:bc:
                    28:9f:33:65:1a:51:67:28:81:3e:4a:ec:1a:66:28:
                    1c:d3:66:b9:80:0d:ac:b2:6e:ba:77:70:ad:3f:e6:
                    e1:2e:26:e0:10:be:74:64:a0:02:e2:29:f7:0e:db:
                    99:81:2c:ab:dd:78:c1:10:07:c1:e2:9b:ef:9c:eb:
                    cf:7f:c5:02:38:66:4b:a6:1a:0f:46:df:23:ba:e1:
                    27:d4:2b:f0:7e:a0:2d:f5:cc:53:47:a0:2a:b5:b0:
                    0a:02:f5:c9:f4:9d:9f:43:0d:a1:fc:4f:53:86:0a:
                    c3:1e:d5:45:f1:2f:58:fa:d1:ce:66:4b:78:f1:dd:
                    df:2b:66:66:7e:70:12:fe:cb:99:08:12:ed:f0:c9:
                    70:b9:7a:68:ce:ee:aa:a6:61:52:64:e7:32:7f:ea:
                    2f:62:88:f6:5d:df:05:6b:97:54:c9:d7:f2:c2:4f:
                    30:36:79:16:e6:8c:57:79:60:06:06:c0:ed:c3:e2:
                    77:c2:60:2c:25:20:7c:05:f3:6e:93:77:ef:24:80:
                    b3:ff:05:3e:d8:12:5c:30:81:5c:00:f3:30:c5:38:
                    7a:42:74:7c:5a:60:69:8b:35:9c:15:61:15:d9:06:
                    5c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:99:B5:E6:7C:9A:FA:A2:20:BE:FA:5F:02:28:CA:32:C8:04:90:9E
            X509v3 Authority Key Identifier:
                keyid:02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/2Zm15nya-qIgvvpfAijKMsgEkJ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.25.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:b9:9e:c6:f6:21:85:b7:f6:0c:f1:f9:f4:3e:f6:92:c1:59:
         9a:df:91:79:c9:9c:11:0d:f2:7f:84:8b:be:22:32:89:2b:ed:
         e6:74:fb:e3:db:6f:37:ed:45:ab:99:fe:40:b3:4f:82:54:8c:
         49:31:65:46:68:f1:20:26:5c:18:a2:17:fd:90:d7:71:a4:b5:
         09:ee:ff:0a:ef:0d:08:2c:53:3c:6f:77:22:6c:f9:03:57:00:
         c9:d8:4b:dd:34:ad:1c:22:f3:23:63:a5:56:49:85:03:21:2c:
         2d:ba:4c:b6:8c:68:a8:77:86:5f:d5:66:5d:5e:11:25:fa:65:
         fb:d2:3a:e0:27:86:3d:6c:92:82:86:9b:73:bf:b6:0c:32:f5:
         d5:e9:ac:74:da:74:ef:b5:5f:27:c7:90:e4:b5:80:d0:e3:fd:
         af:f4:2e:45:b8:97:98:2c:85:fb:5a:82:7f:2c:f5:77:b6:0a:
         e3:33:40:d3:db:f3:1c:83:1b:b6:97:74:70:f8:99:e3:31:5b:
         7d:34:e2:fa:c8:32:62:6a:29:e7:b4:1d:5a:93:b2:de:46:19:
         8c:51:6d:31:1c:44:75:0f:db:f9:ed:43:39:97:1c:cd:f0:db:
         46:10:1a:35:f6:d5:ac:0c:df:0d:c9:08:87:03:87:24:d0:2b:
         9a:b8:fc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net