Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/OMy-NMj_4HIKuan-FU4-4R9F2VI.roa
File:                     OMy-NMj_4HIKuan-FU4-4R9F2VI.roa (raw, json)
Hash identifier:          VHuQhVgSLMPab+0JI81gOVigOiNulGK5eNNR2LqAh78=
Subject key identifier:   38:CC:BE:34:C8:FF:E0:72:0A:B9:A9:FE:15:4E:3E:E1:1F:45:D9:52
Certificate issuer:       /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial:       0195F30906D6353183BA3AF7251235AC33D2
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/OMy-NMj_4HIKuan-FU4-4R9F2VI.roa
Signing time:             Tue 01 Apr 2025 20:26:49 +0000
ROA not before:           Tue 01 Apr 2025 20:26:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     21859
IP address blocks:        79.110.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:f3:09:06:d6:35:31:83:ba:3a:f7:25:12:35:ac:33:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
        Validity
            Not Before: Apr  1 20:26:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=38ccbe34c8ffe0720ab9a9fe154e3ee11f45d952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9c:7d:df:fb:2f:74:b7:64:98:fd:6e:12:ce:
                    ac:4b:6a:c8:da:dc:cd:c6:51:13:25:c9:70:7b:f5:
                    b6:51:fa:5a:9e:fc:fa:20:54:3e:b7:da:70:53:3b:
                    b3:09:3f:19:b8:7a:5c:30:f3:4f:80:e6:45:eb:9e:
                    b4:35:4c:78:6a:93:7c:a3:a9:e6:9c:c7:ac:ae:f8:
                    26:3b:97:b4:89:c8:ac:68:7a:d9:56:c1:0b:6c:94:
                    b4:ee:9c:a6:40:89:98:04:db:60:23:e4:6b:9c:24:
                    3b:e7:12:4d:26:fc:59:de:66:96:04:8a:e4:a4:71:
                    c9:04:6c:9c:ca:6d:55:4f:08:c9:0c:5d:33:8e:4e:
                    27:c6:aa:0a:7e:7b:50:04:03:22:5c:4c:91:dc:6c:
                    16:22:be:d0:cd:bf:9c:e4:4c:33:78:40:ff:e6:f1:
                    66:83:17:73:a2:22:3d:36:05:1c:a2:f4:51:31:d1:
                    aa:4f:ef:1e:27:1f:16:e6:dd:19:01:6e:ae:4e:68:
                    47:a4:71:21:08:5b:3f:f7:f9:7e:5c:1d:4e:43:e9:
                    c6:0d:0f:73:1b:0e:5e:8c:5e:36:6a:5c:1d:c2:17:
                    12:a3:e8:82:b6:cc:ba:48:a4:83:35:4e:4d:3b:4f:
                    cc:f7:eb:c0:7c:a5:a7:f6:92:5d:7e:3d:ec:a8:31:
                    5a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CC:BE:34:C8:FF:E0:72:0A:B9:A9:FE:15:4E:3E:E1:1F:45:D9:52
            X509v3 Authority Key Identifier:
                keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/OMy-NMj_4HIKuan-FU4-4R9F2VI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:79:3b:86:9a:bb:fe:a0:7e:83:49:d5:37:d1:12:c0:6d:46:
         e6:f4:54:9d:26:b4:3f:6e:33:8e:f3:80:39:72:ba:5d:18:b9:
         b0:dc:02:b3:68:2e:7a:2c:9b:c0:00:f1:b8:44:2f:e7:ab:87:
         76:63:2f:de:fa:a9:0f:82:97:dc:47:05:94:f7:db:ff:7c:7e:
         8d:98:98:76:63:08:5f:c2:55:59:d6:14:ea:ff:d0:05:d0:c9:
         b1:a0:dc:e8:a2:e3:2f:84:78:13:17:3b:a4:f4:a2:be:2d:bf:
         e6:a6:8d:24:f5:80:e6:18:e0:25:b6:49:95:1e:75:25:3a:ab:
         74:49:fa:37:23:5e:f1:f7:79:14:9f:c9:96:f1:70:e8:fd:18:
         e4:6d:bf:aa:77:25:36:21:4e:24:fd:e1:5f:47:15:d1:fe:b8:
         e6:22:a3:d3:4b:63:8c:9e:cc:00:a9:2c:5c:dd:94:80:b9:ef:
         51:de:3e:ea:4d:13:8c:46:9e:67:42:84:82:f5:c2:5d:52:d5:
         6b:62:26:56:f2:26:40:dd:2e:df:55:0f:4a:30:9a:97:f6:28:
         cc:bf:45:c7:d3:e6:dc:f7:61:68:8b:99:ec:d0:1f:49:17:1d:
         1a:07:a7:16:cb:9b:e6:78:d9:cd:4a:f1:c0:90:64:b0:8f:81:
         ef:b7:32:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:43 2025 by rpki-client on console.sobornost.net