Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FeizJhWCZy8g8toX1pNnW7Jkrx4.roa
File:                     FeizJhWCZy8g8toX1pNnW7Jkrx4.roa (raw, json)
Hash identifier:          WMk4GzLsRPv7Yn8vl5AiARwOXwzphtKEibgjeuShVW4=
Subject key identifier:   15:E8:B3:26:15:82:67:2F:20:F2:DA:17:D6:93:67:5B:B2:64:AF:1E
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       019609FEB78FAF3B4FB47B3AA8AA7C1EB036
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FeizJhWCZy8g8toX1pNnW7Jkrx4.roa
Signing time:             Sun 06 Apr 2025 07:26:50 +0000
ROA not before:           Sun 06 Apr 2025 07:26:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8003
IP address blocks:        45.8.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:09:fe:b7:8f:af:3b:4f:b4:7b:3a:a8:aa:7c:1e:b0:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Apr  6 07:26:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=15e8b3261582672f20f2da17d693675bb264af1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e3:63:04:26:09:f5:c8:8c:c9:10:ac:2e:ef:
                    03:27:0b:35:fb:c6:98:9e:6c:3d:4d:93:b0:bd:4b:
                    43:f8:ca:26:8a:84:c1:dc:85:e4:d0:71:ce:e8:c0:
                    e3:5b:77:0d:5c:8e:41:ce:4a:86:cf:8f:99:63:06:
                    68:38:c1:bb:52:51:55:15:1e:af:b5:b1:71:d4:6d:
                    6b:90:9a:b6:b9:52:cb:2b:38:42:50:b2:a1:50:4c:
                    ce:fa:f3:e2:ab:bf:83:f6:92:8a:a3:9f:8c:b3:df:
                    d4:6a:b9:dd:4c:04:b8:cb:4a:75:df:a2:60:7b:b3:
                    92:2b:77:18:2c:15:fd:2f:b0:a8:31:e9:b5:52:64:
                    f5:d4:90:8c:cb:ba:fb:86:11:7e:b4:2a:aa:f8:3b:
                    a1:16:89:bf:0c:78:93:87:79:06:e7:59:33:ca:46:
                    01:e0:fb:9c:55:31:a4:21:58:9e:09:a1:7d:79:62:
                    b1:33:b0:b9:49:37:33:88:b4:92:8c:53:3c:25:14:
                    f0:98:d7:cd:00:26:8b:22:bf:4e:d6:ed:8e:6d:43:
                    4c:e6:c5:4f:10:c1:7a:60:02:e8:00:8e:65:0a:c5:
                    b0:86:d7:e9:b8:70:0d:13:0d:73:d1:22:41:6a:aa:
                    09:3a:b9:18:bb:a0:87:59:64:66:05:cc:c7:f4:12:
                    62:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E8:B3:26:15:82:67:2F:20:F2:DA:17:D6:93:67:5B:B2:64:AF:1E
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FeizJhWCZy8g8toX1pNnW7Jkrx4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:4e:02:0d:51:be:56:bb:d9:de:e3:8f:d5:0a:11:ce:48:f5:
         bc:23:91:16:00:60:e8:0e:e6:16:38:a7:cf:a6:69:1a:a0:76:
         8f:9d:d0:56:98:76:88:e0:61:a1:aa:14:c2:cc:b6:6d:21:d5:
         b9:6c:20:3e:fe:72:3e:bf:6e:0c:7d:25:2b:1a:a7:47:0c:08:
         fc:0c:e6:b5:a4:3d:32:8d:06:d3:d5:9c:2d:4c:e0:0b:b1:92:
         14:14:91:af:48:06:27:9f:60:7f:f0:d0:ba:9e:8a:c0:2d:4d:
         d2:51:df:d4:db:05:65:1b:cc:99:19:af:12:61:1d:2e:39:84:
         9a:be:43:c4:36:b2:26:72:f5:90:e3:f1:ca:ed:b8:d6:08:2b:
         11:94:fd:b4:0e:ff:46:52:84:19:84:09:0a:81:ac:ca:02:6d:
         00:19:20:d5:e9:0f:81:2f:8a:50:d6:7a:9c:f6:2a:32:61:e1:
         ec:a9:26:d6:93:22:e8:03:b6:19:65:01:74:21:8b:02:34:b4:
         a0:19:b8:91:0f:ed:04:d3:d1:92:bf:da:17:b9:7f:c4:a8:f1:
         7c:59:bc:da:74:f2:52:f1:62:76:c8:3c:46:7a:c6:7c:32:36:
         02:ad:ad:e2:f8:14:57:d8:fc:06:1c:ae:9c:b2:b3:e4:ae:3e:
         92:a7:77:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:43 2025 by rpki-client on console.sobornost.net