Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/Vf-4CzJnj-smUTzjUooDn_4kp38.roa
File:                     Vf-4CzJnj-smUTzjUooDn_4kp38.roa (raw, json)
Hash identifier:          wRrMrbdEgCzD+5xjbPsOA1jPdBf/YtdoCbQDeiSm5vU=
Subject key identifier:   55:FF:B8:0B:32:67:8F:EB:26:51:3C:E3:52:8A:03:9F:FE:24:A7:7F
Certificate issuer:       /CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Certificate serial:       01961F0C25D0025200871CB572E82C729290
Authority key identifier: 44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/Vf-4CzJnj-smUTzjUooDn_4kp38.roa
Signing time:             Thu 10 Apr 2025 09:33:31 +0000
ROA not before:           Thu 10 Apr 2025 09:33:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     208516
IP address blocks:        45.131.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1f:0c:25:d0:02:52:00:87:1c:b5:72:e8:2c:72:92:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4413bdf4dc7435faf51ba934d65570f71c21731a
        Validity
            Not Before: Apr 10 09:33:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=55ffb80b32678feb26513ce3528a039ffe24a77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b9:49:39:3d:5f:62:26:5d:60:c5:e2:2b:41:
                    8f:9c:2f:35:ad:20:6e:f8:a7:9c:7c:de:f1:94:f7:
                    a9:a4:d0:71:29:2a:43:6b:f4:b4:59:cc:ea:c8:43:
                    ae:88:8a:83:d6:ec:fb:c5:af:31:fb:fa:47:eb:86:
                    a2:e1:70:6a:05:b5:c6:0d:a7:91:d4:d8:f6:ac:6a:
                    62:7a:d4:19:65:ad:5c:d7:f7:42:de:20:86:d1:6d:
                    7f:df:92:d0:c9:5d:b2:f1:04:a2:6c:3b:02:64:d3:
                    58:80:3c:a4:00:25:c5:dc:43:30:0f:bb:39:d0:ec:
                    87:eb:6b:84:34:cd:a7:1f:c1:ca:10:ad:90:0b:56:
                    2f:70:c3:fc:e8:9f:62:c5:3f:5d:12:9a:3e:a0:d4:
                    c4:03:27:ec:49:b7:39:8d:96:cf:29:b8:73:d1:e5:
                    6c:e1:47:ca:61:09:b7:eb:1a:15:71:4b:47:87:a9:
                    21:b1:e6:6f:24:96:5f:7f:9a:97:4c:60:ec:c8:81:
                    1f:90:2e:6c:da:dc:1d:82:38:e3:68:be:38:5d:c1:
                    3f:a4:3e:75:fd:0a:08:3b:7e:86:56:35:99:35:81:
                    f2:5a:54:28:b4:83:f4:46:91:1d:92:00:98:73:67:
                    fd:d2:a2:d2:4f:cb:14:7e:df:0c:9c:8c:b7:5c:7a:
                    f6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FF:B8:0B:32:67:8F:EB:26:51:3C:E3:52:8A:03:9F:FE:24:A7:7F
            X509v3 Authority Key Identifier:
                keyid:44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/Vf-4CzJnj-smUTzjUooDn_4kp38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.131.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:53:ac:2b:4c:34:48:51:08:5e:8c:6a:5b:a8:02:ee:12:f0:
         db:a0:63:30:94:c2:5f:10:43:2d:9a:8e:6c:6d:c3:1e:7a:75:
         6b:e3:70:18:df:18:9d:da:f4:49:a3:55:b4:ec:7e:21:2b:54:
         bd:86:d0:72:68:13:da:ed:5c:14:db:a8:ff:85:1e:b6:3a:cf:
         f5:9f:94:1b:83:c1:ea:60:a6:06:f1:33:ac:98:66:23:fa:01:
         54:b3:c2:01:ec:0f:ee:d1:57:72:91:4b:72:82:89:7b:78:0d:
         76:7d:a7:18:4a:e2:d1:af:f1:b4:ae:e1:ca:a9:bb:b3:ee:81:
         1d:15:31:c0:db:a6:36:f4:30:57:4a:1e:f0:ca:fb:fa:09:2d:
         1b:db:c9:8a:58:b4:1c:76:13:38:05:60:27:ca:a7:1f:d0:63:
         97:e7:c1:02:d1:c9:28:07:e7:51:b9:71:53:9b:9d:ed:8b:f1:
         20:24:bb:81:73:35:62:dc:3c:9c:4c:4f:d5:63:46:62:d2:54:
         d6:40:56:93:cc:ff:84:8f:f0:d6:8e:ef:a1:3a:69:09:84:a2:
         b4:45:8f:2f:04:81:c9:e2:6d:17:61:76:24:ec:c5:ed:df:c8:
         94:86:44:46:2b:ef:22:d2:db:0e:bf:ac:38:2c:7e:4a:24:aa:
         eb:a5:fa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:33 2025 by rpki-client on console.sobornost.net