Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/rcOJ2AuELLdtwoeDqyn8K_xqehk.roa
File:                     rcOJ2AuELLdtwoeDqyn8K_xqehk.roa (raw, json)
Hash identifier:          pf0qz81DCtNcz/gsmbeVPmhodneS5Iau+DFlNPFsnjA=
Subject key identifier:   AD:C3:89:D8:0B:84:2C:B7:6D:C2:87:83:AB:29:FC:2B:FC:6A:7A:19
Certificate issuer:       /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial:       0193DDCC744C7BC9F5D18CF2099108706137
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/rcOJ2AuELLdtwoeDqyn8K_xqehk.roa
Signing time:             Thu 19 Dec 2024 07:23:04 +0000
ROA not before:           Thu 19 Dec 2024 07:23:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2110904
IP address blocks:        92.114.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:dd:cc:74:4c:7b:c9:f5:d1:8c:f2:09:91:08:70:61:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
        Validity
            Not Before: Dec 19 07:23:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=adc389d80b842cb76dc28783ab29fc2bfc6a7a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:99:4c:c6:ad:84:d3:7f:08:0c:a8:6c:d2:
                    b7:76:5e:1a:cb:7b:c6:63:89:98:49:93:80:b8:96:
                    58:48:61:66:fa:45:4e:36:25:60:88:b3:d1:77:b3:
                    cc:3a:0b:cc:05:27:57:0e:bb:ad:ea:ed:30:a7:32:
                    72:29:c4:22:e3:5b:26:f2:88:52:43:b1:06:25:d3:
                    58:11:9c:05:fe:1a:f3:4b:1a:fc:74:b9:b3:d2:3d:
                    96:7d:63:4b:51:0e:dc:2a:87:0c:07:db:ab:d4:32:
                    67:20:84:d9:13:da:96:fb:69:2a:5d:14:4b:8f:1b:
                    76:99:af:5c:ba:46:c5:60:eb:a7:49:25:de:f1:3d:
                    97:8e:6c:da:80:99:3e:cc:b2:2f:cf:dd:fc:fa:15:
                    45:91:75:79:07:aa:15:4f:b8:bc:bb:38:5d:2a:44:
                    16:81:f1:96:55:fc:38:4f:c1:ac:4b:16:9a:9b:dc:
                    56:70:ce:70:a0:83:c9:4f:b5:d5:df:9b:0e:7f:f8:
                    46:d7:b1:50:90:9b:06:e7:a6:66:fb:2d:90:93:ef:
                    1d:f2:d7:d6:cf:6b:56:3c:3b:4c:12:2a:ea:86:9c:
                    66:6d:6f:c0:bc:44:b6:25:e4:ac:78:68:f5:3b:e8:
                    0a:40:4c:4e:c2:cc:d8:84:96:ff:9f:00:3f:11:23:
                    c0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C3:89:D8:0B:84:2C:B7:6D:C2:87:83:AB:29:FC:2B:FC:6A:7A:19
            X509v3 Authority Key Identifier:
                keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/rcOJ2AuELLdtwoeDqyn8K_xqehk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.114.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:d7:0c:8e:b8:32:1b:7e:71:74:e9:84:70:c9:c5:37:68:20:
         73:a8:ba:fa:b7:cd:d8:a8:2e:a4:16:85:be:26:83:7e:7a:a3:
         03:b4:01:6f:45:0b:8b:a9:e1:1c:31:36:27:7d:72:1c:8d:f9:
         0c:d8:05:55:c7:b3:2c:32:18:30:1d:6f:80:a1:c4:7f:a9:c9:
         80:38:93:6f:03:0c:43:57:d2:09:59:d8:b6:e0:97:ac:1a:f8:
         ac:58:88:a5:36:da:82:1e:0e:4f:db:a4:91:15:2d:8e:66:cb:
         62:be:67:52:1a:ec:aa:b2:42:ea:51:b6:0b:a5:69:d8:84:2c:
         00:8e:99:46:b5:fb:f1:d7:c3:4f:29:62:6d:96:fb:87:93:c8:
         17:fb:f7:81:38:d7:b0:c6:67:9c:36:ca:fa:8e:d9:b0:ce:d5:
         3c:cd:13:62:db:5b:d0:2c:0d:d9:67:05:10:12:ed:a8:02:35:
         fa:3d:21:fd:a3:f2:41:8e:bb:dd:89:05:6b:2b:fa:23:dc:7d:
         c7:80:fe:2d:b2:04:c1:d9:e4:45:ea:ba:2b:d8:60:fa:79:ed:
         5b:db:0a:97:75:9b:3b:b8:9d:e3:16:aa:ab:a0:0b:de:70:52:
         2a:3f:ef:ea:ed:b8:77:34:bd:00:70:cf:9c:71:77:ad:83:7a:
         55:7f:f8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 24 21:28:58 2024 by rpki-client on console.sobornost.net