Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/PinfW_YHyw5uymC7Qg5_e_ihs1A.roa
File:                     PinfW_YHyw5uymC7Qg5_e_ihs1A.roa (raw, json)
Hash identifier:          pxez1kR2olajgq0bPf5GWwA/2mx0CN85t2SDcizNJFk=
Subject key identifier:   3E:29:DF:5B:F6:07:CB:0E:6E:CA:60:BB:42:0E:7F:7B:F8:A1:B3:50
Certificate issuer:       /CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Certificate serial:       0195B318BFB53AC3933F2A62CD1069846FA6
Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/PinfW_YHyw5uymC7Qg5_e_ihs1A.roa
Signing time:             Thu 20 Mar 2025 10:28:18 +0000
ROA not before:           Thu 20 Mar 2025 10:28:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     200359
IP address blocks:        46.232.172.0/24 maxlen: 24
                          46.232.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:b3:18:bf:b5:3a:c3:93:3f:2a:62:cd:10:69:84:6f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
        Validity
            Not Before: Mar 20 10:28:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3e29df5bf607cb0e6eca60bb420e7f7bf8a1b350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e3:86:66:43:7b:19:c2:c2:a9:c2:7e:1d:5f:
                    96:d0:e6:1b:67:74:8d:f3:ea:ce:d8:98:54:dc:b8:
                    bb:c5:30:0f:07:fe:8c:79:a0:8b:13:ac:85:71:31:
                    54:dc:73:a5:b0:02:51:54:38:e7:f8:01:da:08:99:
                    68:43:22:67:a4:03:9f:58:98:7d:73:db:99:97:50:
                    09:db:e0:56:47:5a:e1:21:23:c2:77:f2:63:48:d3:
                    2c:c5:c6:60:6f:34:49:b6:da:86:8d:6a:1d:1b:46:
                    3c:53:bd:d0:92:46:04:48:6c:82:84:c6:d6:9e:50:
                    e0:59:98:28:99:f6:1f:27:4e:75:fc:10:7c:40:b8:
                    3b:d7:5d:49:0a:d6:ef:f7:8a:73:3d:47:a1:94:e7:
                    e1:00:1c:3e:1f:8f:bd:de:40:b6:5f:6f:9d:ac:75:
                    76:c5:c1:c4:11:a4:5c:18:a8:0b:88:e1:4b:ca:c2:
                    a4:e0:da:21:25:78:83:41:6e:fa:aa:c9:15:7c:6d:
                    88:ce:16:01:ab:a7:e3:30:a9:bc:d0:03:57:18:18:
                    07:30:82:7b:81:04:c5:fe:69:52:4a:a5:b0:e7:31:
                    c9:7d:70:27:39:e0:3f:af:cc:56:2a:51:bb:46:97:
                    88:7f:36:81:40:c7:81:81:77:40:a6:ea:6a:eb:3a:
                    5d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:29:DF:5B:F6:07:CB:0E:6E:CA:60:BB:42:0E:7F:7B:F8:A1:B3:50
            X509v3 Authority Key Identifier:
                keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/PinfW_YHyw5uymC7Qg5_e_ihs1A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.232.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:70:d7:23:f0:a9:be:ef:e7:f5:35:30:15:02:01:e6:af:8f:
         43:d0:98:0a:5d:5c:85:70:31:d2:73:1d:34:39:64:bd:82:63:
         70:4b:b5:6f:d3:ca:b0:ed:bf:84:97:a2:1b:ce:a6:1c:99:ae:
         90:68:3a:dc:09:4c:b6:c5:68:07:e9:f8:a6:01:22:65:6b:4c:
         38:5f:26:7c:72:d6:93:b2:c6:64:bf:84:87:e6:15:c3:c4:ae:
         d6:d8:28:f0:5c:a0:32:c5:70:b9:ff:a8:89:17:bf:7e:d2:49:
         86:4d:56:b4:47:43:8e:32:d6:e3:63:38:9d:37:d5:69:94:2a:
         35:47:2c:a8:ef:e6:f3:f1:05:68:2f:59:e1:72:5d:63:5d:88:
         24:37:d2:c7:58:f1:79:84:1b:98:55:48:8f:c5:3a:54:78:ef:
         1a:47:64:75:ee:da:f5:29:82:9e:42:3c:a4:35:4d:9c:90:15:
         be:15:73:07:6e:63:6f:09:3e:32:ca:af:33:ca:74:9b:2b:97:
         3c:12:a5:50:b8:25:60:cd:87:24:0d:ed:f5:58:c5:f9:a8:16:
         4c:2e:68:fd:ef:ae:72:88:aa:83:03:72:70:df:ce:ca:03:22:
         68:a8:2a:19:26:05:28:fb:0a:e9:cd:9c:96:2f:cd:db:81:e9:
         cf:4f:7c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net