Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/EADtwJ5y-VjWcy83_mVH2SKUAPo.roa
File:                     EADtwJ5y-VjWcy83_mVH2SKUAPo.roa (raw, json)
Hash identifier:          R8INT7bheSvFgtGeR+Ql091pm76iqBbhKkxxFZZqBPc=
Subject key identifier:   10:00:ED:C0:9E:72:F9:58:D6:73:2F:37:FE:65:47:D9:22:94:00:FA
Certificate issuer:       /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial:       0195392D4489CCCA49AEBDD77F6DC81BDCDE
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/EADtwJ5y-VjWcy83_mVH2SKUAPo.roa
Signing time:             Mon 24 Feb 2025 18:17:02 +0000
ROA not before:           Mon 24 Feb 2025 18:17:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49198
IP address blocks:        185.47.208.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:39:2d:44:89:cc:ca:49:ae:bd:d7:7f:6d:c8:1b:dc:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
        Validity
            Not Before: Feb 24 18:17:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1000edc09e72f958d6732f37fe6547d9229400fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:eb:32:61:8e:b1:5d:61:72:82:d0:a0:c9:
                    f0:59:ab:bb:ae:cf:14:2a:c6:39:a8:93:21:df:e4:
                    a6:94:2b:91:c8:a9:d3:96:19:8c:90:51:35:50:25:
                    c7:87:3f:fb:a8:11:45:40:84:1e:c1:5f:a7:84:0b:
                    19:d2:a9:84:36:d4:a1:35:ef:5b:48:55:9c:63:39:
                    ce:80:a9:ee:70:a3:2b:75:4a:d5:c5:85:4e:ff:fa:
                    ef:53:3c:1b:fd:f4:f7:f9:71:cd:de:75:de:eb:a2:
                    bf:2f:cd:f3:40:2b:ca:7c:94:3d:e1:c4:0b:96:90:
                    ba:eb:e9:d1:8c:0f:14:f8:27:29:62:59:db:11:62:
                    41:b8:60:a4:4b:f4:2a:b2:7a:eb:40:cc:df:39:de:
                    04:86:c2:bf:fd:4d:8b:06:a6:db:00:79:d5:26:27:
                    14:dc:c2:cd:b6:9b:ed:0d:86:36:26:b5:c0:05:24:
                    86:68:77:73:20:b2:00:b4:f7:52:58:db:3f:8c:5b:
                    ac:f0:0e:90:74:79:56:c5:65:f5:25:b4:1b:b0:be:
                    ff:a6:47:75:87:05:1c:27:dd:e5:16:26:24:4b:a9:
                    fa:8d:7d:7e:e8:a2:57:82:e0:00:75:b3:d4:4b:9c:
                    97:38:ce:37:27:2c:bf:d4:bb:2b:e3:c4:45:6c:40:
                    f7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:00:ED:C0:9E:72:F9:58:D6:73:2F:37:FE:65:47:D9:22:94:00:FA
            X509v3 Authority Key Identifier:
                keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/EADtwJ5y-VjWcy83_mVH2SKUAPo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.47.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:71:dc:da:4e:95:95:ef:50:54:34:19:0e:04:3e:ac:af:58:
         4c:59:35:ea:b8:09:11:6e:fe:ad:2f:63:13:80:f8:03:a0:bb:
         18:8d:57:d9:6d:55:90:11:fd:37:92:bf:93:6d:2c:2b:4b:d6:
         5e:ba:4d:93:c7:e5:e5:b7:18:2c:0d:a5:9a:60:14:3e:a9:1f:
         b3:4b:7a:da:b8:75:73:9b:23:cf:3c:7f:2c:ed:42:87:46:9e:
         65:33:8e:14:a5:97:db:e3:77:50:d1:c5:11:13:39:cc:b2:c6:
         12:bd:78:41:5e:69:3b:3d:a2:f0:bb:0a:47:17:34:6a:e9:06:
         b3:2a:58:3c:db:37:af:33:14:8e:e3:9c:1f:b4:65:db:55:ae:
         96:ea:20:08:2f:d6:d9:a6:8a:3d:0e:6c:29:9b:5c:a6:6c:d5:
         11:82:76:7d:db:bd:1d:87:16:69:ba:63:fd:d5:0e:4f:d4:df:
         9a:3f:4b:d6:b3:07:ed:ab:5c:27:44:e2:46:e0:bf:7c:1e:ee:
         b6:07:22:5e:bb:0e:71:a5:99:a3:3f:a5:23:d7:1d:d0:25:aa:
         d0:a8:ca:26:21:fa:b3:d2:fc:b3:b1:44:62:f2:ef:7c:ba:e8:
         a9:44:73:b8:2a:ad:fc:fc:44:22:b8:f1:73:f6:31:f0:a6:52:
         2c:5d:8e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net