Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/4/3139342e34352e3130312e302f32342d3234203d3e20393137.roa
File:                     3139342e34352e3130312e302f32342d3234203d3e20393137.roa (raw, json)
Hash identifier:          3d7Xy5Y7+SjhGeVLNr94PZAiCg3sF4UedMgE06quXow=
Subject key identifier:   C6:0C:59:46:F7:40:AC:11:0C:52:C5:7F:8C:03:06:C0:B3:4C:CF:69
Certificate issuer:       /CN=d8901aff4a34f68701baa98545c2d390d7a4463a
Certificate serial:       3A978C253E07DCCAF9961AE00B476C34A7FEF4EA
Authority key identifier: D8:90:1A:FF:4A:34:F6:87:01:BA:A9:85:45:C2:D3:90:D7:A4:46:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JAa_0o09ocBuqmFRcLTkNekRjo.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/4/3139342e34352e3130312e302f32342d3234203d3e20393137.roa
Signing time:             Sun 03 Dec 2023 21:38:14 +0000
ROA not before:           Sun 03 Dec 2023 21:33:14 +0000
ROA not after:            Sun 01 Dec 2024 21:38:14 +0000
asID:                     917
IP address blocks:        194.45.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:97:8c:25:3e:07:dc:ca:f9:96:1a:e0:0b:47:6c:34:a7:fe:f4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8901aff4a34f68701baa98545c2d390d7a4463a
        Validity
            Not Before: Dec  3 21:33:14 2023 GMT
            Not After : Dec  1 21:38:14 2024 GMT
        Subject: CN=C60C5946F740AC110C52C57F8C0306C0B34CCF69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:68:43:92:8c:d5:a0:d6:90:25:fb:06:74:ce:
                    d6:58:5d:d0:44:0b:69:45:e6:75:c8:eb:b7:50:7f:
                    0a:f3:f4:50:74:80:60:04:7a:7c:5c:b4:61:2b:22:
                    63:2c:78:fd:e7:3c:ca:9f:ca:ea:18:6d:6f:69:9f:
                    d5:c4:77:2e:6a:64:28:7f:e0:e0:c0:1a:c3:c2:cc:
                    5d:24:4c:b4:86:47:83:00:9e:46:b4:61:50:b5:38:
                    35:06:32:49:f0:37:c5:0e:08:dc:6b:9a:d0:98:6b:
                    83:e2:b0:d3:d2:a9:b7:a0:2c:fc:1c:3c:48:02:0e:
                    a4:f3:b9:19:c8:45:20:16:f5:0f:36:66:ba:d7:ac:
                    a7:86:97:d9:c2:45:c8:74:21:fb:e4:f1:a7:11:80:
                    84:8f:ad:30:3b:e5:bd:d7:33:53:ac:bd:89:6f:64:
                    fb:d6:b5:dd:14:69:97:ed:bd:f9:12:ac:0a:79:c0:
                    05:1f:5a:0c:e5:9a:94:7e:7e:1f:62:ce:6a:fb:f9:
                    b7:41:99:7e:4c:7e:11:33:1d:af:d3:f1:40:51:dc:
                    c5:ce:dd:0f:ed:fa:a4:03:e9:82:7f:b1:5d:60:10:
                    ea:91:ff:1d:13:5d:7b:10:dd:8f:11:cf:35:31:93:
                    76:1d:39:d9:3b:cc:b8:ad:e6:3d:48:dd:e9:8a:fc:
                    ef:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0C:59:46:F7:40:AC:11:0C:52:C5:7F:8C:03:06:C0:B3:4C:CF:69
            X509v3 Authority Key Identifier:
                keyid:D8:90:1A:FF:4A:34:F6:87:01:BA:A9:85:45:C2:D3:90:D7:A4:46:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/4/D8901AFF4A34F68701BAA98545C2D390D7A4463A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JAa_0o09ocBuqmFRcLTkNekRjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/4/3139342e34352e3130312e302f32342d3234203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.45.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:06:24:ad:d6:1b:b5:a9:8c:15:16:89:17:21:d5:83:2f:e0:
         de:3e:f4:58:9a:b3:1b:d2:ab:0c:28:00:ab:b3:a5:f6:c5:98:
         c1:e3:2c:51:3a:b5:05:db:02:bf:59:27:e4:3d:ce:d6:04:60:
         2d:d8:8a:01:85:2a:3e:77:b2:10:55:b1:39:b2:58:83:6c:42:
         f4:4d:61:f4:2b:c5:d8:c0:2f:60:6a:6a:0c:92:2f:1e:df:c3:
         3d:70:ba:ab:4e:5c:f9:88:64:a0:6f:f6:e0:7d:a4:88:42:2b:
         51:6b:5b:82:e0:a4:f3:ab:06:e8:d5:37:be:97:f4:7d:f6:22:
         52:07:8f:be:0a:46:9b:7c:0b:26:ff:9a:a4:4d:9d:bf:92:ee:
         8a:0a:bc:86:83:a5:ee:9f:2b:2e:a5:87:ff:ff:da:9c:0b:44:
         74:af:30:f9:6c:18:21:cb:73:70:e1:16:5a:9c:f0:f0:7f:cb:
         d6:5f:41:50:a5:f7:31:b7:68:82:58:bb:22:68:4c:31:c7:b5:
         55:89:b2:cb:3a:4a:c9:b5:c3:13:c6:de:82:79:75:fb:2b:2b:
         76:e4:c3:2e:8c:5c:0d:2f:0f:6f:1d:fa:14:c0:d0:cb:5c:7e:
         85:97:9f:8e:40:3e:3e:e3:a2:dd:fe:45:36:79:b5:53:a5:b1:
         3c:7b:64:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:11 2025 by rpki-client