Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS42831.roa
File:                     AS42831.roa (raw, json)
Hash identifier:          ZqzfXaM/f2HnuEXmjW0f0kyXLtdtZVXIYYKt/tFoykg=
Subject key identifier:   9B:B6:AE:F8:7D:DE:B4:58:E3:9F:C4:70:59:D9:37:8D:F9:5D:B0:DF
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       52ABBABA1375AECEC36C8093F6EC7A0014CD09CB
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS42831.roa
Signing time:             Tue 11 Mar 2025 00:56:54 +0000
ROA not before:           Tue 11 Mar 2025 00:51:54 +0000
ROA not after:            Tue 10 Mar 2026 00:56:54 +0000
asID:                     42831
IP address blocks:        46.203.93.0/24 maxlen: 24
                          46.203.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ab:ba:ba:13:75:ae:ce:c3:6c:80:93:f6:ec:7a:00:14:cd:09:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Mar 11 00:51:54 2025 GMT
            Not After : Mar 10 00:56:54 2026 GMT
        Subject: CN=9BB6AEF87DDEB458E39FC47059D9378DF95DB0DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d8:db:80:a9:22:0f:6f:39:08:c1:fc:69:28:
                    eb:e7:62:23:33:8a:ad:02:23:da:0e:45:92:97:77:
                    c4:27:38:e3:dc:aa:d4:51:d8:25:dd:35:ea:de:54:
                    1f:f6:95:70:b4:2a:3c:b6:83:20:11:75:ca:8e:ae:
                    17:48:75:9c:4c:14:1a:4e:b6:9e:2e:d9:22:cc:21:
                    20:68:fd:bd:d0:21:41:de:e3:de:23:b9:0b:66:8b:
                    fd:2c:89:7c:c0:f5:58:01:33:fe:86:e4:e4:76:bc:
                    28:e3:46:56:9a:54:1f:b8:2f:2c:bc:42:a1:a8:06:
                    0b:42:17:21:80:d4:1c:1d:08:31:53:62:49:8a:77:
                    5a:12:ed:b7:cb:8c:fa:19:61:65:a9:3f:db:e4:13:
                    8a:bd:9e:26:0b:ef:7f:16:19:61:e8:9f:2c:c4:27:
                    70:58:aa:67:98:11:42:62:42:03:e2:0e:9d:5d:fe:
                    50:1c:e3:57:ee:8b:56:c2:61:bd:27:40:1f:25:ea:
                    ba:8a:11:c4:af:9b:c9:89:73:06:1f:27:03:50:22:
                    4b:1d:3f:b5:9c:2c:63:ed:91:c0:e1:f7:3e:8a:cf:
                    fc:fb:ce:1b:e3:91:b6:43:f9:da:40:c2:b6:9f:f2:
                    43:03:f2:59:63:f9:95:42:e5:1c:7f:5d:69:3f:e1:
                    ca:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B6:AE:F8:7D:DE:B4:58:E3:9F:C4:70:59:D9:37:8D:F9:5D:B0:DF
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS42831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.203.93.0/24
                  46.203.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:6a:7e:ea:3a:e6:33:89:00:1b:02:df:cc:8b:73:0e:27:1f:
         78:dd:37:07:97:69:e7:aa:72:29:71:f0:fb:d5:c8:e4:90:88:
         2c:ff:a8:fc:76:02:50:0a:21:49:2d:47:8b:19:6f:3f:7f:81:
         0e:fa:75:2c:a3:8b:6d:1a:9e:eb:b7:c5:17:16:4f:69:c5:5d:
         db:24:0f:5a:9f:65:ad:5e:d6:67:46:37:f2:2a:35:3f:16:91:
         e7:91:1e:0b:0b:b0:ab:17:d3:db:f8:1a:0e:84:4f:ce:56:91:
         81:f7:a8:a6:e1:ea:ec:58:e5:6d:00:b1:92:1b:4f:fd:98:b2:
         21:d2:de:e2:64:97:71:34:f3:39:b1:99:bc:a5:c0:5c:06:1b:
         ad:45:26:1d:4d:d5:66:ef:d9:5a:f2:9c:6a:ae:c7:b5:92:42:
         cf:f3:92:9b:42:e4:f8:62:bc:88:8b:bb:75:c0:2d:ed:5c:3d:
         3b:de:c1:ba:0f:3e:2c:64:57:09:88:25:1b:cc:ed:b6:1b:6e:
         e3:0a:0c:3a:82:40:ea:34:f7:c0:fa:b8:80:7e:81:b2:bf:35:
         f6:3c:6b:e6:82:80:05:18:c0:73:fe:14:ff:77:bc:f8:30:69:
         1a:b6:c7:16:b2:64:a6:8c:4a:2a:ec:70:ab:fd:fa:ab:26:91:
         11:64:c1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net