Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/owUTsdsWd_OhoU150B2XJGPwp78.roa
File:                     owUTsdsWd_OhoU150B2XJGPwp78.roa (raw, json)
Hash identifier:          iNIVTSXQXnqolECuZQlxYc3IVgdUumnOepnQerLGHJM=
Subject key identifier:   A3:05:13:B1:DB:16:77:F3:A1:A1:4D:79:D0:1D:97:24:63:F0:A7:BF
Certificate issuer:       /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial:       0194266C566084399B636F79F303E65B1B8C
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/owUTsdsWd_OhoU150B2XJGPwp78.roa
Signing time:             Thu 02 Jan 2025 09:50:21 +0000
ROA not before:           Thu 02 Jan 2025 09:50:21 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8848
IP address blocks:        176.211.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:56:60:84:39:9b:63:6f:79:f3:03:e6:5b:1b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
        Validity
            Not Before: Jan  2 09:50:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a30513b1db1677f3a1a14d79d01d972463f0a7bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bb:a5:4e:16:e4:c7:bc:b0:7b:6e:54:2c:b2:
                    f6:41:6a:23:90:bf:d6:d8:27:98:2b:28:29:bc:0f:
                    24:39:a5:4b:92:3b:d4:ec:57:ee:86:37:0a:8a:e3:
                    94:22:d4:c5:87:45:91:c1:0f:93:6d:2d:d2:ed:a5:
                    3f:0b:95:7b:6c:e3:6a:fe:60:39:38:7e:be:ee:b4:
                    a7:ba:be:e1:be:09:65:4d:2d:7b:2d:1d:8c:d5:40:
                    27:e1:54:b2:c8:7f:9f:8e:05:03:70:cd:39:ec:db:
                    47:b4:bf:73:27:33:17:c0:b7:c5:f2:72:4a:d2:ed:
                    3d:23:08:95:d7:03:f1:47:8d:1d:26:73:ce:77:2e:
                    75:b0:67:d9:30:2d:8d:99:76:95:73:d7:0d:77:90:
                    53:23:dd:69:69:fd:be:2c:ae:3f:41:53:4c:50:5a:
                    29:e6:ef:a5:e0:bd:a8:d7:08:0c:d4:5a:bf:1e:1a:
                    83:24:65:21:08:7d:29:2c:24:7c:4e:ce:65:5c:ae:
                    6f:0c:12:b5:d2:73:35:d0:be:e4:92:4c:62:57:c0:
                    62:0f:61:ec:5b:2d:57:a4:71:5c:bb:96:11:f5:66:
                    08:08:cb:59:7a:b5:a5:76:9c:ab:0e:fb:4b:da:8e:
                    0f:0c:b8:36:c6:db:91:12:13:e3:9d:ac:2a:a4:75:
                    4d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:05:13:B1:DB:16:77:F3:A1:A1:4D:79:D0:1D:97:24:63:F0:A7:BF
            X509v3 Authority Key Identifier:
                keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/owUTsdsWd_OhoU150B2XJGPwp78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.211.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:11:1b:62:81:09:0f:ad:5e:8b:d6:c8:7b:ea:d4:62:7b:19:
         42:d3:2e:72:da:f0:f3:13:09:ca:ab:71:99:01:6b:ae:ff:ba:
         56:4f:65:f0:a0:05:6d:28:f4:c5:11:df:54:fe:ad:b2:68:9e:
         0d:51:c1:93:71:d5:8e:89:50:6d:48:ba:0a:7c:ec:27:2e:be:
         2a:09:be:4e:96:ad:6c:21:12:8e:4b:e1:de:25:56:6e:f2:63:
         05:ba:d1:b6:6d:ee:43:99:b5:c5:89:4b:c5:8d:a3:50:a3:ea:
         2b:b8:2b:9c:13:4a:66:03:8f:e1:4a:2f:b4:65:dc:08:c5:15:
         4f:7a:a8:6c:98:6e:5c:72:86:85:da:ff:c4:a6:89:8c:12:12:
         aa:ea:b3:d5:c0:23:4a:38:e4:82:61:6b:a4:40:5e:f0:24:47:
         cb:a0:9c:ca:70:e5:2f:b7:97:0a:6c:41:b8:11:94:fe:34:dc:
         f0:fc:0c:65:d2:21:f0:f5:c6:ba:c9:23:92:a8:48:91:1e:dd:
         fe:10:4f:02:86:f8:cd:87:de:0c:8f:ad:9b:26:10:95:3d:b3:
         bb:9c:10:99:4e:b4:b9:30:09:75:bd:97:46:2e:89:c7:97:fe:
         86:61:35:e9:1e:63:df:53:c8:b3:e3:bf:c8:47:5d:84:4f:24:
         c5:15:89:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:07 2025 by rpki-client on console.sobornost.net