Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/Nn9zvns-9MxxIXjn8JIbpmV34s8.roa
File:                     Nn9zvns-9MxxIXjn8JIbpmV34s8.roa (raw, json)
Hash identifier:          7A6j8hAQUIpmUDd+lagtKalWuiGm1he97we0iFCchhc=
Subject key identifier:   36:7F:73:BE:7B:3E:F4:CC:71:21:78:E7:F0:92:1B:A6:65:77:E2:CF
Certificate issuer:       /CN=e96efdd112da8d975cb593aad1fe8840d6f08ae3
Certificate serial:       0194DA793EBBDBA2EE71B22B1A8A217655A8
Authority key identifier: E9:6E:FD:D1:12:DA:8D:97:5C:B5:93:AA:D1:FE:88:40:D6:F0:8A:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/Nn9zvns-9MxxIXjn8JIbpmV34s8.roa
Signing time:             Thu 06 Feb 2025 08:56:06 +0000
ROA not before:           Thu 06 Feb 2025 08:56:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     50720
IP address blocks:        193.105.205.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:da:79:3e:bb:db:a2:ee:71:b2:2b:1a:8a:21:76:55:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96efdd112da8d975cb593aad1fe8840d6f08ae3
        Validity
            Not Before: Feb  6 08:56:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=367f73be7b3ef4cc712178e7f0921ba66577e2cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ba:3b:51:f5:de:f8:0f:d0:19:a8:70:43:94:
                    27:a5:6d:6b:87:af:77:4b:64:6e:a5:13:ad:67:c1:
                    5d:a2:34:8f:96:0d:25:10:cd:80:8e:85:c3:d7:27:
                    1f:bc:c1:ca:f0:42:ba:ef:ea:e1:28:ba:d8:e2:87:
                    ec:80:f1:61:65:b4:08:38:be:71:13:ae:6c:8b:af:
                    41:8f:2a:c2:79:81:e3:df:cd:8d:44:1f:f9:2c:da:
                    58:b3:a7:d1:b6:87:fe:5f:97:69:8c:d1:ea:92:26:
                    37:30:d5:cd:df:a8:68:86:f2:b2:5c:41:9c:a8:bf:
                    7f:1d:4a:71:55:65:69:e5:36:b1:73:66:8f:db:be:
                    f2:57:d7:95:99:54:fd:99:75:8b:4f:6c:9f:0b:7f:
                    b1:76:0d:0a:48:d4:cb:cf:d4:cb:59:46:ff:67:58:
                    42:00:a9:89:8a:c6:ac:b9:92:8f:07:81:b7:e2:e0:
                    00:f5:62:2f:13:38:6c:78:a0:79:ed:b5:3b:99:cc:
                    fe:27:b7:0d:d8:b6:c7:b4:1b:03:b0:7d:e5:35:b3:
                    66:1a:5c:52:be:9a:ed:b6:b9:ef:bc:5c:7a:20:12:
                    b5:9b:88:b4:9b:90:a5:ee:e1:59:fa:4a:a6:b7:4e:
                    f6:ab:ed:d2:94:03:13:bf:72:bc:c6:cc:10:aa:f4:
                    01:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7F:73:BE:7B:3E:F4:CC:71:21:78:E7:F0:92:1B:A6:65:77:E2:CF
            X509v3 Authority Key Identifier:
                keyid:E9:6E:FD:D1:12:DA:8D:97:5C:B5:93:AA:D1:FE:88:40:D6:F0:8A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W790RLajZdctZOq0f6IQNbwiuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/Nn9zvns-9MxxIXjn8JIbpmV34s8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0aa9b7-0073-4685-aa7b-70771b55c2ab/1/6W790RLajZdctZOq0f6IQNbwiuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:94:2a:d6:2c:9f:b3:fc:49:19:39:24:b7:85:c9:72:cb:dd:
         4b:3e:b5:42:bb:01:db:01:9c:ff:29:2d:9d:0e:7a:ea:7b:b6:
         b8:40:7a:b6:df:b6:33:a0:03:75:e8:dd:a7:b5:17:90:bc:d3:
         de:a5:8d:9b:61:ad:e5:9a:e7:6e:54:24:40:00:b1:fd:29:4e:
         59:69:80:2e:30:66:39:5f:d3:5d:f2:3b:4b:76:4a:d9:13:e4:
         60:a1:a3:2c:fe:0f:65:ad:f0:af:a0:af:39:93:56:4e:eb:55:
         05:0b:21:35:31:64:af:db:ff:d8:45:79:1d:ba:aa:97:70:88:
         c8:4c:d4:b2:8a:8d:6e:b3:fd:8b:99:a9:af:44:43:a8:40:15:
         5a:8d:d2:58:9d:02:1c:8b:25:c5:84:b5:ac:a5:54:0a:2e:c8:
         15:e7:cf:8a:9f:b6:d8:3f:49:2a:c7:7d:1a:3c:39:87:2a:f8:
         f2:66:af:62:fb:c3:2c:c6:01:df:9d:4a:07:0b:02:99:8f:d0:
         a6:f7:14:ba:77:56:8c:36:c0:d1:7f:f5:2c:a3:c3:44:11:10:
         ea:eb:9e:e9:85:eb:15:bf:56:68:11:2f:8e:20:8f:4f:4c:c6:
         fd:72:9a:31:97:13:29:47:d6:d3:0d:41:c5:16:56:86:b7:62:
         67:b6:ae:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:44 2025 by rpki-client on console.sobornost.net