Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32352e302f32342d3234203d3e20383334.roa
File:                     33312e362e32352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          1WfDbim3UlvKozLokyN0sVnz0ql2Fik5p/kKlYQRC2o=
Subject key identifier:   E6:9F:F2:5E:4A:6D:8D:78:85:3B:9E:75:75:13:2D:F3:73:BE:FB:C5
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       7962084EA48C2DCEFEAB2A0237F0FE89BA0CD32D
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32352e302f32342d3234203d3e20383334.roa
Signing time:             Wed 17 Jul 2024 00:00:27 +0000
ROA not before:           Tue 16 Jul 2024 23:55:27 +0000
ROA not after:            Wed 16 Jul 2025 00:00:27 +0000
asID:                     834
IP address blocks:        31.6.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:62:08:4e:a4:8c:2d:ce:fe:ab:2a:02:37:f0:fe:89:ba:0c:d3:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Jul 16 23:55:27 2024 GMT
            Not After : Jul 16 00:00:27 2025 GMT
        Subject: CN=E69FF25E4A6D8D78853B9E7575132DF373BEFBC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1c:db:5d:b9:a6:ae:bf:e4:5e:d0:ce:3d:13:
                    e3:5f:ce:e2:ac:76:4f:39:d4:b4:8f:f8:8f:21:72:
                    e3:5b:fa:ac:eb:46:ab:3c:bc:82:9c:fb:a4:94:ba:
                    b0:72:18:0a:f7:17:55:6e:46:ea:c3:bc:8b:aa:03:
                    4a:15:7b:f5:38:57:ec:44:88:c3:44:d9:84:6b:2c:
                    c1:6c:9e:f8:1e:a2:84:00:ac:ba:e4:5c:18:69:6f:
                    bb:5a:0e:84:3b:d3:f2:0c:8f:24:65:b6:90:12:dd:
                    71:b8:47:02:d5:c1:5e:cc:d2:fd:0c:07:3e:16:11:
                    22:93:d9:cc:06:e8:42:e4:65:5f:89:ef:d6:8a:cd:
                    e5:49:97:97:2f:2f:14:43:b3:f2:54:34:f5:19:fc:
                    60:44:ac:42:59:66:ef:75:e3:9a:54:7f:f0:cc:d5:
                    1d:67:f2:c1:54:82:01:90:03:67:9a:4e:af:af:08:
                    d3:56:bf:0d:e9:13:3a:03:60:06:a9:78:a2:b8:79:
                    3e:3a:b6:4b:7d:54:9b:ea:6e:9b:56:fa:73:c9:c3:
                    30:e1:6c:54:c7:c6:a3:0d:80:be:11:3f:9c:80:27:
                    ab:91:c0:89:92:c1:8f:40:4f:b9:60:29:6b:f2:78:
                    b5:77:30:1b:78:94:1f:64:3b:ff:1c:9d:63:d2:58:
                    c0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9F:F2:5E:4A:6D:8D:78:85:3B:9E:75:75:13:2D:F3:73:BE:FB:C5
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:c0:03:a0:89:e0:20:29:1f:36:76:31:f6:0c:bc:ad:63:e6:
         a2:38:d2:51:96:8d:77:46:3c:51:17:1d:7a:e6:06:00:50:96:
         1e:b0:1f:38:4f:03:1a:1e:ee:80:eb:09:36:94:02:db:a0:88:
         92:1a:b0:ea:4d:80:d0:70:81:13:a1:4f:69:8e:30:c8:51:6e:
         ba:b0:51:19:1e:fc:1b:71:0c:bb:31:d5:ae:d5:c7:0a:33:e5:
         76:96:86:4a:37:be:90:39:15:84:4b:5a:ce:5c:fb:e1:72:6c:
         53:7a:e1:8a:a4:1e:4c:a5:46:6d:4d:b2:f9:d7:59:88:fb:cf:
         bc:6a:f6:ae:76:8c:66:35:6f:c8:30:94:c3:94:6a:37:45:e4:
         75:6c:33:9f:fb:e6:4e:67:0c:fa:32:a2:4d:6e:d7:d4:95:92:
         c2:48:28:96:69:35:39:17:90:47:4c:70:e8:a5:e6:4b:05:af:
         1a:29:57:7a:af:98:df:28:aa:a7:f2:d0:07:53:10:a3:90:44:
         d2:a2:ab:77:ce:4c:2d:71:67:35:37:9a:b1:a7:89:65:c2:f4:
         62:dc:58:5e:4b:25:f9:aa:69:07:c5:06:b9:05:e6:4d:1f:39:
         83:89:59:f6:e9:7e:a1:98:6b:02:9a:c1:eb:ff:66:6c:9b:26:
         13:e8:94:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 04:51:24 2024 by rpki-client on console.sobornost.net