Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/b6-Sb5UzMFdxmJFvCEV_WPrm6r8.roa
File:                     b6-Sb5UzMFdxmJFvCEV_WPrm6r8.roa (raw, json)
Hash identifier:          88EHhnurvKyD9kSOVYn+VITMVEPMjri+UrkfeAUzvxc=
Subject key identifier:   6F:AF:92:6F:95:33:30:57:71:98:91:6F:08:45:7F:58:FA:E6:EA:BF
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       01960C1821483BAE8559DA8485D4E41B4FAC
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/b6-Sb5UzMFdxmJFvCEV_WPrm6r8.roa
Signing time:             Sun 06 Apr 2025 17:13:50 +0000
ROA not before:           Sun 06 Apr 2025 17:13:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     64267
IP address blocks:        193.58.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0c:18:21:48:3b:ae:85:59:da:84:85:d4:e4:1b:4f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Apr  6 17:13:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6faf926f953330577198916f08457f58fae6eabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b3:fa:54:ce:e7:04:75:e8:a0:90:70:5c:dc:
                    31:1c:d8:87:2d:8e:81:47:12:b7:88:bf:49:da:c1:
                    11:88:83:f1:39:98:eb:ea:38:87:ca:52:5c:25:82:
                    b9:e1:20:38:69:f1:fc:f8:bb:15:fe:ee:fc:db:63:
                    27:3f:ef:53:5c:d1:df:b5:8f:e5:4e:d4:eb:31:94:
                    63:7f:a9:35:95:c0:8b:6d:df:8c:f5:a2:0a:75:1f:
                    88:7c:0c:0e:10:37:b8:cb:fd:10:04:63:cf:9d:63:
                    a2:42:7e:0c:0e:6a:78:ef:a9:bd:11:fd:1f:18:b5:
                    d2:d1:f2:ac:f4:76:88:1d:d2:a6:bb:2c:7a:47:8f:
                    00:82:f2:9b:8b:56:1a:27:73:a9:52:c4:ed:e4:0b:
                    80:ef:5c:ed:53:67:c8:43:6b:c9:e0:67:39:b6:92:
                    c2:00:52:3e:d3:74:70:8c:79:23:56:76:51:5b:cd:
                    70:5b:88:aa:65:2b:c9:8d:e2:b6:64:07:b8:b2:e2:
                    65:16:4c:cb:41:c2:8e:a7:ad:26:50:e0:d2:b9:fd:
                    4c:b0:1e:3b:25:da:8b:4e:5a:eb:52:e6:b2:0f:8b:
                    4e:77:54:65:74:78:6d:74:d2:73:55:01:68:83:aa:
                    10:fc:05:24:48:78:ec:e1:a1:87:1f:f4:f9:a1:c2:
                    09:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AF:92:6F:95:33:30:57:71:98:91:6F:08:45:7F:58:FA:E6:EA:BF
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/b6-Sb5UzMFdxmJFvCEV_WPrm6r8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.58.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:9e:27:27:e1:23:59:04:ba:8b:ec:02:b4:51:2f:8c:e0:2d:
         90:b7:fa:7f:00:47:48:7a:2a:fd:6c:c4:3c:6d:5b:6a:3e:65:
         df:f9:e5:73:24:97:4d:01:98:94:c9:41:ef:76:06:b2:06:35:
         aa:63:18:ad:9f:f5:91:6d:5f:5d:84:55:be:98:52:b7:47:59:
         79:5f:9d:49:af:55:a6:50:36:7d:1e:71:49:e7:2b:bf:c2:82:
         03:da:82:1b:e0:9f:38:40:43:1e:15:a1:34:cc:59:a6:0f:1a:
         24:b7:1a:48:41:18:17:20:90:c7:65:7f:ae:9a:a7:fd:c4:87:
         95:25:89:09:15:29:e6:0e:01:df:a0:fd:59:91:91:01:bf:ad:
         27:c1:36:ff:9e:f5:66:e3:56:d0:42:03:27:07:f7:60:a8:dd:
         c8:af:69:de:c5:46:16:f8:49:d2:31:99:de:4e:0f:71:f1:79:
         b0:94:9d:92:7d:8e:8b:72:5b:80:33:00:a0:c1:e9:b1:c3:43:
         15:c4:9f:63:fa:d5:85:ef:c6:b0:38:94:f4:16:51:12:2d:ba:
         e1:66:b2:ee:ab:27:fa:db:cf:b0:66:b4:49:99:6b:76:5e:10:
         e1:f8:ea:8a:d7:c0:8c:62:1f:0b:3d:44:05:d3:f2:e1:01:73:
         65:67:31:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:12 2025 by rpki-client on console.sobornost.net