Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/nG4btH8hnfj9Xq5wDsBzy66KvCI.roa
File:                     nG4btH8hnfj9Xq5wDsBzy66KvCI.roa (raw, json)
Hash identifier:          aqERMHBB2BmuiOQ91Bb+OrBKwS60vrChPD7BlEGQeXA=
Subject key identifier:   9C:6E:1B:B4:7F:21:9D:F8:FD:5E:AE:70:0E:C0:73:CB:AE:8A:BC:22
Certificate issuer:       /CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Certificate serial:       0194266B40E2253EF5261AEA31F2BF56B072
Authority key identifier: E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/nG4btH8hnfj9Xq5wDsBzy66KvCI.roa
Signing time:             Thu 02 Jan 2025 09:49:10 +0000
ROA not before:           Thu 02 Jan 2025 09:49:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     205136
IP address blocks:        185.81.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:40:e2:25:3e:f5:26:1a:ea:31:f2:bf:56:b0:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
        Validity
            Not Before: Jan  2 09:49:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9c6e1bb47f219df8fd5eae700ec073cbae8abc22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ed:0c:e8:86:d5:08:f4:fa:24:6a:ad:67:11:
                    f6:2c:f4:80:53:4e:29:54:18:68:e6:46:43:58:93:
                    28:f2:dd:d6:64:e6:2e:93:39:71:1d:83:f6:fc:57:
                    89:75:c5:57:fc:c0:34:a9:90:cf:c4:b9:24:dc:e7:
                    22:44:e3:11:9d:69:43:ee:f4:a1:9d:20:90:98:34:
                    87:68:d6:6d:80:98:4a:07:08:58:22:4d:36:1e:cd:
                    01:93:27:55:fd:57:ec:cd:80:b4:fe:4c:ea:ff:2c:
                    81:7d:c2:ab:a3:f3:d5:2b:03:a8:00:db:02:c5:ed:
                    1c:0a:c8:cb:81:c0:13:e7:3c:0b:a3:33:20:87:bd:
                    09:35:c3:16:d6:be:f0:69:23:bd:cd:f8:20:c1:0e:
                    cb:69:0c:91:09:c1:dc:a1:aa:7f:41:30:bb:fd:cf:
                    fd:a7:1f:60:86:26:44:fa:24:ca:11:06:01:ca:18:
                    16:0d:4e:01:0e:d5:31:a4:77:8a:91:14:a7:83:69:
                    b6:6b:b2:41:38:bc:4d:9a:89:f9:ce:3c:5f:90:65:
                    1f:d7:6f:36:2f:d0:d7:88:e4:84:8b:32:0b:50:55:
                    b1:a0:eb:d7:39:25:fb:73:5d:be:77:e6:af:b3:bf:
                    94:74:2b:04:01:61:22:2c:69:88:fc:0d:a2:7f:bd:
                    cb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6E:1B:B4:7F:21:9D:F8:FD:5E:AE:70:0E:C0:73:CB:AE:8A:BC:22
            X509v3 Authority Key Identifier:
                keyid:E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/nG4btH8hnfj9Xq5wDsBzy66KvCI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:b1:27:32:f5:d9:0b:37:ee:42:35:5b:8a:19:c2:62:23:93:
         cd:77:33:05:b8:f6:92:e7:18:e5:b2:47:7f:9c:52:f3:6e:ac:
         95:14:47:7b:1b:4e:3c:95:2d:b5:b1:ea:be:7f:e6:7b:22:f8:
         b0:92:da:dc:11:26:cd:1e:c6:55:80:bf:2e:d1:4e:df:9d:b4:
         2d:29:0b:50:94:77:ef:a8:91:fc:36:9d:35:41:8e:d9:f3:2b:
         cd:c4:5e:c9:b1:ab:ba:12:df:0d:59:79:24:bc:01:5a:38:5c:
         6d:63:e7:7d:d1:e7:2c:4c:5c:fd:da:67:c8:f5:25:66:5a:db:
         41:3c:c0:60:fe:a6:1a:b7:b0:ac:d6:72:11:f1:77:83:da:c9:
         75:d0:eb:9d:7d:7d:99:63:16:78:ec:c9:46:06:41:4d:17:3d:
         3d:6b:1a:a0:9e:a7:0a:c1:eb:4c:9d:b0:04:06:9e:f8:3a:c7:
         30:d8:a2:33:17:bb:d2:f5:29:a3:fd:bb:b6:af:da:01:b7:66:
         b0:46:77:f9:41:1b:13:b9:ad:ab:0d:ac:11:3c:a1:41:f9:56:
         68:c1:0f:57:0e:0e:5f:c2:15:69:0b:59:ff:67:3c:63:f0:fe:
         90:61:91:ac:d6:23:af:14:96:c1:52:91:9a:1e:d2:02:b6:a7:
         e8:ee:63:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:48 2025 by rpki-client on console.sobornost.net