Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/Vaj_SKghwhMr5GkrNo3CpxB4bEs.roa
File:                     Vaj_SKghwhMr5GkrNo3CpxB4bEs.roa (raw, json)
Hash identifier:          2ufypWC+H0u1FT85vML3Y3XXLbc7QafpFQUC4EhAO8E=
Subject key identifier:   55:A8:FF:48:A8:21:C2:13:2B:E4:69:2B:36:8D:C2:A7:10:78:6C:4B
Certificate issuer:       /CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Certificate serial:       0194228DAF426988F06060AA47489ABE6C73
Authority key identifier: 68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/Vaj_SKghwhMr5GkrNo3CpxB4bEs.roa
Signing time:             Wed 01 Jan 2025 15:48:18 +0000
ROA not before:           Wed 01 Jan 2025 15:48:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     21375
IP address blocks:        82.116.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:af:42:69:88:f0:60:60:aa:47:48:9a:be:6c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68639a21759796fe3a1d919f9b5737eb68d708e4
        Validity
            Not Before: Jan  1 15:48:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=55a8ff48a821c2132be4692b368dc2a710786c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:02:4e:83:4d:16:8d:10:05:d2:5a:a9:ae:fd:
                    6f:e9:9a:d5:76:b7:68:65:29:43:2e:f7:01:c3:2d:
                    09:c9:b8:3c:50:69:99:f1:fd:ef:1e:ca:be:db:bf:
                    07:7f:89:1f:87:94:21:e1:16:ad:92:eb:5a:4f:4f:
                    1f:26:e5:82:8b:d3:7f:66:b2:98:1b:46:b2:f2:a3:
                    e0:fe:78:a5:8e:7d:ab:27:2e:8e:ec:b7:0d:4e:ed:
                    82:b3:6a:29:bd:19:ac:25:3e:5c:a9:4b:92:92:c6:
                    5c:49:9b:01:b3:b4:3f:09:69:ad:02:f5:3b:39:5e:
                    d1:7e:37:99:45:c5:22:cb:7b:4e:cc:19:fe:fb:fa:
                    ee:9a:aa:4e:0b:e0:d3:13:82:aa:40:41:f7:fd:cb:
                    8f:f7:7c:c6:cc:9f:c2:2f:3a:2d:14:da:4a:c0:c3:
                    ce:f0:15:46:3f:d9:bf:8f:a6:c1:a3:ec:d5:99:43:
                    cb:02:e8:09:5e:92:20:50:92:e5:54:51:24:e7:d1:
                    89:a4:f2:eb:0b:74:c1:4e:61:ae:0d:02:20:e5:34:
                    ab:b6:1d:3b:f9:53:0c:a3:db:2c:37:3b:cc:89:6a:
                    b9:ea:87:38:cb:13:35:92:83:cc:f3:1c:4a:bb:45:
                    6c:dd:d7:d6:ba:59:25:fd:04:2c:e7:9f:44:b5:d6:
                    7b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A8:FF:48:A8:21:C2:13:2B:E4:69:2B:36:8D:C2:A7:10:78:6C:4B
            X509v3 Authority Key Identifier:
                keyid:68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/Vaj_SKghwhMr5GkrNo3CpxB4bEs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.116.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:19:69:8d:61:61:5f:71:4b:33:6d:83:e9:f3:24:ba:05:79:
         bf:fe:8e:23:60:63:b2:b7:f8:c8:d5:1d:6a:cd:b6:b8:3c:2e:
         2c:f0:ae:f0:cf:c3:0a:2c:c5:ec:f0:6f:c8:c7:92:36:68:25:
         cf:35:2e:b5:aa:6d:45:7b:dd:c2:b9:1b:c7:9d:40:af:a2:54:
         ad:1b:dc:94:52:21:c7:98:0e:af:fc:40:7c:95:87:f8:d0:ed:
         b4:cc:5e:94:0f:9e:e5:5f:a6:02:e2:16:b6:30:5b:85:ba:73:
         70:42:a4:a1:c3:9f:aa:7f:80:b5:a8:61:99:89:37:f1:21:8d:
         c6:83:4f:49:85:da:9e:66:f7:41:8d:92:7d:3b:05:80:33:77:
         5d:68:8d:8e:93:d4:32:fd:4c:cd:38:65:c7:a9:48:34:c0:25:
         aa:ca:b2:80:5b:90:4d:0d:5b:4f:fe:07:b0:a3:8f:39:43:2c:
         24:91:d3:34:9c:89:19:00:c7:ef:d1:1d:f2:2a:fe:43:df:89:
         69:00:67:29:cd:74:18:80:86:06:72:a4:6c:36:04:72:ac:de:
         e5:83:af:e1:fc:db:9e:ce:d7:63:ab:50:c2:d1:08:13:ad:09:
         5a:31:54:a3:fa:d8:79:b1:23:b3:10:0f:c1:7e:fd:34:02:ba:
         b6:63:dc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net