Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS61317.roa
File:                     AS61317.roa (raw, json)
Hash identifier:          yRs5D0XQ8zWKpGryapjyVo5SxBzXrfkMPaDrLKhGtEw=
Subject key identifier:   AD:E7:9B:C1:1E:D7:91:61:EE:6F:7F:CB:AF:3A:36:D6:41:68:98:78
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       19439782249A21AA336EF1CBF70B112D9FA1A6E7
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS61317.roa
Signing time:             Mon 10 Mar 2025 07:30:37 +0000
ROA not before:           Mon 10 Mar 2025 07:25:37 +0000
ROA not after:            Mon 09 Mar 2026 07:30:37 +0000
asID:                     61317
IP address blocks:        82.23.195.0/24 maxlen: 24
                          82.24.92.0/22 maxlen: 24
                          82.27.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:43:97:82:24:9a:21:aa:33:6e:f1:cb:f7:0b:11:2d:9f:a1:a6:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Mar 10 07:25:37 2025 GMT
            Not After : Mar  9 07:30:37 2026 GMT
        Subject: CN=ADE79BC11ED79161EE6F7FCBAF3A36D641689878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ab:00:7c:ef:31:1f:b5:b1:e5:2f:80:cf:69:
                    59:8c:96:2f:6a:cf:18:41:ef:84:49:6b:ed:a0:ea:
                    e2:04:f8:0f:cf:e0:ef:f3:8d:91:a8:32:bd:f0:a7:
                    3d:47:40:53:22:f5:39:43:e0:5c:bf:f4:9c:8f:c5:
                    6a:42:7f:4b:ea:4f:7e:8f:b8:7f:e0:c2:e3:e9:71:
                    60:eb:5c:2b:23:7c:5a:6d:bd:7c:7a:c2:cf:2e:ad:
                    c7:60:bb:48:57:dd:30:7d:30:78:9c:91:e4:db:a3:
                    fd:ea:a3:f4:91:66:a3:77:dc:e3:d8:1a:65:00:a2:
                    bd:33:41:de:30:ca:53:87:d4:9d:a3:91:e2:aa:b2:
                    cc:75:43:71:cc:c1:fa:60:ba:0c:bf:95:10:cb:1d:
                    60:c4:83:5d:34:61:15:13:ca:b5:78:72:0b:0c:6c:
                    06:a0:0d:1d:bf:1a:c0:92:9e:59:08:7c:be:3f:ef:
                    30:e4:c4:e8:14:11:9e:13:ad:d6:37:76:ed:87:26:
                    71:43:50:d1:14:ca:f2:00:5c:54:bd:da:62:45:1f:
                    12:30:29:bc:96:11:30:62:18:8e:40:d0:41:ed:15:
                    ab:03:0e:7f:70:5d:ce:b9:cf:a8:83:f0:b3:91:ab:
                    62:05:2f:79:36:a6:c9:22:55:75:19:e2:bd:e5:55:
                    db:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E7:9B:C1:1E:D7:91:61:EE:6F:7F:CB:AF:3A:36:D6:41:68:98:78
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS61317.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.23.195.0/24
                  82.24.92.0/22
                  82.27.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:f5:e7:10:37:c0:1e:94:4b:a3:7b:71:67:ee:47:07:96:e5:
         8e:3a:b4:0a:65:33:47:81:14:33:43:8b:cc:3f:12:f8:c1:b8:
         a0:c9:7b:0b:26:ae:92:be:c0:43:4e:ff:6b:e8:0c:3d:4e:4e:
         03:9a:58:96:4e:4c:ad:f4:f1:ab:bc:a3:0a:5c:d0:da:3a:59:
         4a:ab:8f:d4:cc:09:78:b2:82:b8:59:7b:71:6e:eb:48:7c:80:
         11:ca:0f:e9:d5:9e:d7:03:88:18:7a:e6:e5:44:fc:8d:5f:de:
         42:bf:30:21:77:01:96:98:d2:5a:65:bf:a6:52:47:62:c0:24:
         c8:23:0d:29:13:21:75:0e:dc:8c:aa:e9:35:49:55:09:62:e3:
         39:98:24:5f:42:b8:2d:60:7f:84:72:47:0c:27:ec:33:2d:ea:
         e1:33:64:6b:98:ae:34:9b:97:f1:0f:27:32:83:04:b2:b8:d4:
         09:28:aa:b3:44:e8:02:ba:4d:b5:80:72:f2:cd:12:ae:aa:d5:
         62:fc:4a:ae:f8:55:81:85:68:3a:42:3b:b2:74:95:7f:92:35:
         9b:98:02:0f:94:df:77:39:18:2e:74:59:c4:6a:12:bf:2a:28:
         fa:a4:07:6b:f0:29:5f:e4:59:7a:74:9e:77:55:b8:11:65:c5:
         a7:c0:2b:cd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:27 2025 by rpki-client on console.sobornost.net