Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/pvaPM5j3-BPWJpSuaWFE01jgVBg.roa
File:                     pvaPM5j3-BPWJpSuaWFE01jgVBg.roa (raw, json)
Hash identifier:          vcFvxHEzp1YnutqV+Bq+p/f/FPwpa1xjzTG6Rie7rFY=
Subject key identifier:   A6:F6:8F:33:98:F7:F8:13:D6:26:94:AE:69:61:44:D3:58:E0:54:18
Certificate issuer:       /CN=96f809613877deab874a9401d156db14ff4d2814
Certificate serial:       0194258F6EF89AB413E55CE23702989B8B59
Authority key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/pvaPM5j3-BPWJpSuaWFE01jgVBg.roa
Signing time:             Thu 02 Jan 2025 05:49:04 +0000
ROA not before:           Thu 02 Jan 2025 05:49:04 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     31313
IP address blocks:        193.169.6.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:6e:f8:9a:b4:13:e5:5c:e2:37:02:98:9b:8b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f809613877deab874a9401d156db14ff4d2814
        Validity
            Not Before: Jan  2 05:49:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a6f68f3398f7f813d62694ae696144d358e05418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:12:46:ed:e0:02:a5:a1:c0:40:75:14:13:8f:
                    f7:b7:86:79:e3:9e:0e:c9:a4:67:36:53:6d:8e:01:
                    c9:a8:07:d0:68:87:48:14:f8:67:9a:54:10:72:54:
                    1c:9d:76:21:3f:1e:d6:e6:65:41:fe:80:7a:11:61:
                    15:db:df:e2:8a:dd:9d:ed:77:16:25:f9:94:a0:d3:
                    d6:1a:bb:63:00:09:f4:73:21:f2:53:29:ed:3f:c1:
                    37:ab:61:15:5a:93:18:29:9a:0d:26:2d:23:74:1c:
                    f0:7a:b1:43:5a:a5:51:e9:11:f7:40:5a:76:73:23:
                    ca:f2:00:7a:4e:8d:3b:35:1d:8c:92:e8:a7:23:89:
                    c3:1f:8e:c2:b3:28:c6:b6:06:65:dc:ac:e3:63:ef:
                    9c:d7:b4:ae:90:dc:e6:ff:a9:0f:e4:27:36:df:79:
                    d0:f3:0f:b4:d4:fc:f9:31:23:d7:76:77:14:6b:8f:
                    b9:42:11:c2:06:09:71:15:6d:75:d0:0c:34:19:21:
                    48:41:8c:db:31:6c:66:11:af:0e:34:e9:50:bb:4d:
                    b1:25:18:b5:5b:4c:2f:68:da:76:99:15:ea:3b:7c:
                    7a:38:e1:c4:39:fa:99:6e:a7:57:27:67:e8:aa:55:
                    54:fd:64:3a:1d:f2:63:28:2f:11:1a:41:c6:9b:9f:
                    05:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F6:8F:33:98:F7:F8:13:D6:26:94:AE:69:61:44:D3:58:E0:54:18
            X509v3 Authority Key Identifier:
                keyid:96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/pvaPM5j3-BPWJpSuaWFE01jgVBg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.169.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:3f:f4:13:cf:c8:11:cb:68:89:43:c0:3b:1b:bd:e2:3c:f3:
         f7:93:c6:0e:b9:7e:de:1f:7d:2c:8f:4f:30:cc:8f:1f:c2:99:
         18:2c:14:9c:53:f4:27:6d:0f:a6:ec:8b:fc:c6:1d:61:a7:93:
         b4:40:1f:4c:3f:39:87:38:68:9c:3d:2d:28:b4:55:1f:6c:b5:
         2c:53:e1:3a:ea:7f:13:94:a8:aa:7a:81:8e:91:fd:a2:64:74:
         be:59:bb:75:70:fa:14:61:38:c1:22:d7:bd:03:8f:f2:96:ef:
         c9:17:d7:3e:d2:53:e7:0c:02:c7:c1:2c:98:f0:8e:19:55:bb:
         dc:7e:e3:ad:fd:14:6c:bb:34:78:4e:9e:f4:49:bb:7a:0a:cc:
         86:29:f7:35:c9:27:19:91:ee:bd:86:6c:3c:50:e1:63:b9:be:
         e8:b6:2a:a1:c0:ac:25:9a:e0:dc:26:f3:25:6b:fb:9f:ed:83:
         2c:9f:52:db:60:fc:7d:76:a8:f2:c4:d9:80:ba:da:9e:ea:05:
         f3:f0:1b:0d:98:3d:27:64:77:82:77:4e:19:e9:36:a1:d1:b6:
         88:43:77:87:82:62:a7:c6:7d:ea:6e:a8:31:e9:f7:e2:94:00:
         c9:e1:aa:bd:9c:78:a9:af:1d:6b:ec:88:6b:c4:bd:b0:3b:23:
         55:10:9b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:06 2025 by rpki-client on console.sobornost.net