Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/53_H80-AjcuM7a-7V7Ni8CDVxmc.roa
File:                     53_H80-AjcuM7a-7V7Ni8CDVxmc.roa (raw, json)
Hash identifier:          TnMZlgDSn2wGls3cni5JDswiMtfBk15EprIHZOUPW18=
Subject key identifier:   E7:7F:C7:F3:4F:80:8D:CB:8C:ED:AF:BB:57:B3:62:F0:20:D5:C6:67
Certificate issuer:       /CN=b2af3d658b494cb1715206c5cd76e792e7247ef7
Certificate serial:       019424B402972C3D5EA987B4403AF51A6282
Authority key identifier: B2:AF:3D:65:8B:49:4C:B1:71:52:06:C5:CD:76:E7:92:E7:24:7E:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/53_H80-AjcuM7a-7V7Ni8CDVxmc.roa
Signing time:             Thu 02 Jan 2025 01:49:24 +0000
ROA not before:           Thu 02 Jan 2025 01:49:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     43392
IP address blocks:        193.186.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b4:02:97:2c:3d:5e:a9:87:b4:40:3a:f5:1a:62:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2af3d658b494cb1715206c5cd76e792e7247ef7
        Validity
            Not Before: Jan  2 01:49:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e77fc7f34f808dcb8cedafbb57b362f020d5c667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f8:76:34:c7:c3:2d:85:49:73:2e:51:19:8f:
                    0d:af:35:9a:91:a9:56:f9:a1:ee:86:33:ff:d2:31:
                    9b:e3:a8:9d:26:72:71:f1:cc:01:09:57:43:be:ab:
                    62:77:45:46:66:7a:6d:44:05:15:a1:16:a1:18:68:
                    eb:2a:fc:b6:df:b5:44:ee:7f:ba:dd:8e:93:50:c8:
                    6e:9a:e6:60:a7:b8:41:84:10:60:e7:1e:7e:61:e4:
                    84:35:10:e1:9e:b7:7c:5a:35:de:e6:2e:bd:ee:ef:
                    b4:4f:88:f0:66:da:49:3d:b2:05:6f:70:f4:07:82:
                    a4:95:21:0e:c8:6e:15:8b:7d:84:ff:08:52:fc:6a:
                    0f:10:0e:51:ce:18:97:f7:d6:6d:a5:fb:7e:ab:80:
                    59:b0:42:78:dd:8c:ea:3e:00:e9:63:e2:e8:a6:63:
                    86:56:0d:d6:33:a5:99:53:b8:59:04:f4:67:a4:27:
                    df:6c:d0:15:9f:b9:86:cc:a0:d4:48:b3:5f:1f:49:
                    c4:fc:ce:5d:ef:f8:e6:b1:4a:20:20:77:43:bf:e5:
                    90:3a:64:6f:55:f2:bf:00:ba:76:08:cb:db:cc:8d:
                    ac:42:f3:aa:7c:49:18:82:6f:72:55:f1:c8:8f:1a:
                    f2:a9:83:11:9d:52:a0:62:68:d8:c7:ff:1f:06:ad:
                    d7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7F:C7:F3:4F:80:8D:CB:8C:ED:AF:BB:57:B3:62:F0:20:D5:C6:67
            X509v3 Authority Key Identifier:
                keyid:B2:AF:3D:65:8B:49:4C:B1:71:52:06:C5:CD:76:E7:92:E7:24:7E:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/53_H80-AjcuM7a-7V7Ni8CDVxmc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.186.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:40:73:2f:f2:91:25:65:92:2f:1f:b0:64:c5:0d:c7:4d:f1:
         e8:22:10:ac:a4:cd:97:c7:6c:14:5f:37:02:0c:55:8a:eb:e5:
         61:15:5f:ab:f5:ad:58:71:c8:64:25:1b:90:a0:ac:07:3c:7b:
         ee:b2:06:5b:3b:7f:26:95:96:29:d6:14:da:83:0e:8c:cc:1d:
         e4:ef:45:ce:94:e2:79:19:fc:5f:6e:4a:b5:f9:e6:79:6b:f9:
         69:29:6c:d4:1b:ad:04:59:09:5e:28:af:1f:0a:f7:48:c7:08:
         47:f1:f7:e9:90:16:84:28:89:5a:52:12:00:66:b8:a6:6d:b4:
         0a:6c:42:9a:2c:70:42:9e:56:b1:84:6a:c9:80:9c:a2:8d:ac:
         43:a3:f4:68:5b:e7:70:e9:0e:43:34:bc:12:51:a5:04:4f:14:
         02:21:09:fb:1f:0d:d5:ae:07:95:3a:3c:0c:89:ae:ff:aa:70:
         1b:90:7e:bc:07:74:78:35:ca:83:a1:28:38:a4:d0:4f:78:9a:
         52:25:88:ef:db:a3:4d:22:63:dc:62:f7:94:1c:8a:65:a2:47:
         c6:56:fb:4b:dd:a9:8e:4a:f4:9a:2a:6c:4e:61:d1:a0:14:60:
         a7:22:cb:d5:d5:d3:92:51:f7:09:4f:c6:19:dc:5f:22:75:76:
         bd:09:cc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net