Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/Dy7uS_jCBI44y6jloeeOW8CRgro.roa
File:                     Dy7uS_jCBI44y6jloeeOW8CRgro.roa (raw, json)
Hash identifier:          9bLicsB4K3qmhHE1+GLSpsmSuKZEP561vHIA6dZjfaE=
Subject key identifier:   0F:2E:EE:4B:F8:C2:04:8E:38:CB:A8:E5:A1:E7:8E:5B:C0:91:82:BA
Certificate issuer:       /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial:       019423D780D7E3258CC23B0381F5A3167A5C
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/Dy7uS_jCBI44y6jloeeOW8CRgro.roa
Signing time:             Wed 01 Jan 2025 21:48:33 +0000
ROA not before:           Wed 01 Jan 2025 21:48:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214625
IP address blocks:        92.242.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:80:d7:e3:25:8c:c2:3b:03:81:f5:a3:16:7a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
        Validity
            Not Before: Jan  1 21:48:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0f2eee4bf8c2048e38cba8e5a1e78e5bc09182ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:16:a3:07:dd:95:3c:bd:5b:73:2d:9a:e1:65:
                    3a:4c:dc:0e:b2:f6:c8:87:aa:fc:ea:1a:ce:8d:7d:
                    f5:51:fb:30:2d:5a:13:60:37:cf:00:23:df:9c:8a:
                    a7:3d:e9:29:27:90:17:1c:01:68:a9:42:f3:46:0e:
                    be:b8:38:e2:40:b6:3c:7a:31:26:65:90:05:93:ec:
                    d9:bd:ec:b3:2b:07:93:b1:d6:4f:db:ff:dc:31:0e:
                    f9:20:00:85:e5:d0:49:91:f4:c9:36:2c:d3:72:6e:
                    80:fc:87:b6:b6:24:be:a5:dc:fc:ad:2b:f0:09:f9:
                    1b:5a:83:17:6a:2a:e3:a2:58:a9:5f:5c:a1:bd:0c:
                    ea:90:c6:11:5e:58:b3:6f:a2:f4:f1:36:43:94:16:
                    f3:42:32:c2:f3:e8:b7:c5:4d:fc:81:64:e0:e2:22:
                    72:3d:e9:b3:41:fa:24:ca:21:ec:cb:fe:08:af:cb:
                    8e:e9:50:fc:16:5e:e8:23:b9:e0:1c:b4:00:db:d1:
                    e5:58:60:fe:2f:24:6c:ef:18:75:81:65:10:37:3b:
                    42:9b:e8:2a:12:f5:87:ce:61:eb:34:e4:8d:80:53:
                    a1:cc:f9:7e:0b:77:2e:04:e4:0f:2c:d2:87:c6:b1:
                    11:3a:3d:a0:ee:6c:4a:1c:22:a6:32:a4:c9:1f:1c:
                    fe:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2E:EE:4B:F8:C2:04:8E:38:CB:A8:E5:A1:E7:8E:5B:C0:91:82:BA
            X509v3 Authority Key Identifier:
                keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/Dy7uS_jCBI44y6jloeeOW8CRgro.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.242.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:15:9d:40:f6:df:88:1c:97:4d:ab:0a:b8:c2:4d:05:0f:5c:
         87:8b:f2:05:4e:21:7f:45:48:03:9e:c6:e3:7c:72:06:e9:fd:
         45:06:9c:ad:cc:bc:46:22:56:6e:46:1b:00:13:ff:95:c7:54:
         12:e7:fe:2c:75:ec:96:85:10:b7:b3:e4:f3:d3:51:05:8c:b3:
         28:20:5d:f7:91:e2:2d:e6:a6:e4:1e:af:d2:09:b6:91:c4:85:
         90:85:26:48:63:e0:96:4c:36:32:2c:e5:4e:56:aa:29:41:0b:
         be:ca:4a:96:a5:6f:f8:0c:f5:4a:5b:d1:e0:f9:ee:3f:1b:f5:
         e6:58:b6:cc:b8:eb:14:77:26:3c:0f:26:01:b0:18:0f:06:c9:
         fe:98:bb:11:db:75:ce:2c:5d:ab:da:ee:9c:e8:2c:4a:dc:95:
         d3:05:18:57:11:8f:9e:cc:49:3c:58:b8:d5:7d:c5:45:f9:38:
         b6:8c:70:a1:d1:99:d0:00:88:32:f6:2f:4c:a6:90:8f:9e:b9:
         c6:de:9f:e2:dc:83:ad:9b:52:70:1e:af:44:a7:eb:09:db:85:
         e1:56:1b:c7:85:08:dc:f9:e2:aa:19:e2:c0:c7:28:38:ef:f0:
         2b:29:7b:00:60:46:57:84:0b:6d:13:08:0a:e4:ba:a8:59:e8:
         bf:78:02:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:49 2025 by rpki-client on console.sobornost.net