Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/EEGZcBqsJai0qQqLe2F9AaWLFpk.roa
File:                     EEGZcBqsJai0qQqLe2F9AaWLFpk.roa (raw, json)
Hash identifier:          FRcwu/tuv02SNpOdxXx1YsnWA5ggNN2a8+sJiuIasIw=
Subject key identifier:   10:41:99:70:1A:AC:25:A8:B4:A9:0A:8B:7B:61:7D:01:A5:8B:16:99
Certificate issuer:       /CN=5941a406fdffee25938496be5ac9a53e1bb9c659
Certificate serial:       01942144335983E6B81C51C44F92D0E1518A
Authority key identifier: 59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/EEGZcBqsJai0qQqLe2F9AaWLFpk.roa
Signing time:             Wed 01 Jan 2025 09:48:25 +0000
ROA not before:           Wed 01 Jan 2025 09:48:25 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     210394
IP address blocks:        193.201.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:33:59:83:e6:b8:1c:51:c4:4f:92:d0:e1:51:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5941a406fdffee25938496be5ac9a53e1bb9c659
        Validity
            Not Before: Jan  1 09:48:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=104199701aac25a8b4a90a8b7b617d01a58b1699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:64:63:2f:ab:aa:f0:b6:8a:79:c8:79:c7:ae:
                    9f:88:90:d9:86:43:d1:8f:5a:43:ee:be:bf:2e:28:
                    66:d2:4e:ad:8b:05:cd:e2:5b:a0:45:46:18:ca:0e:
                    a3:7c:0a:72:09:9e:65:c2:c7:c0:dd:33:c8:57:1a:
                    3e:f5:92:a4:c8:d8:ca:48:53:67:f9:6b:ea:60:cc:
                    65:2c:3f:8b:c6:c9:8b:a3:0c:32:ed:94:6b:53:0b:
                    47:ca:39:bc:9c:80:d2:29:4d:3b:d0:3f:cb:cc:fd:
                    aa:37:12:1a:06:74:c8:78:af:82:91:c2:3b:27:87:
                    1d:b9:1a:f3:d5:34:a6:d6:3a:38:72:c8:d2:b1:d3:
                    46:ce:51:2f:33:18:5d:36:6d:f4:a0:af:50:eb:4b:
                    a3:47:54:c8:7b:7d:87:ba:48:f5:fc:76:83:e2:7d:
                    81:63:1b:79:81:d5:07:76:4c:5b:54:0b:11:79:17:
                    d1:2c:99:84:e4:f1:07:2c:11:c7:0b:a0:e5:6e:a1:
                    ab:31:af:24:51:b0:68:87:87:26:20:0d:40:63:ff:
                    70:34:d7:8c:f4:35:6f:be:86:13:b8:c3:6b:30:50:
                    da:68:7e:5a:7b:cb:0b:22:2e:72:93:c0:15:3a:16:
                    44:e9:64:72:6a:01:88:55:9c:69:78:cf:75:45:dd:
                    3f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:41:99:70:1A:AC:25:A8:B4:A9:0A:8B:7B:61:7D:01:A5:8B:16:99
            X509v3 Authority Key Identifier:
                keyid:59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/EEGZcBqsJai0qQqLe2F9AaWLFpk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.201.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:c7:82:93:ea:79:4b:6e:dd:ea:49:70:bf:2a:22:f0:6f:16:
         28:13:93:30:31:41:01:57:99:98:66:2d:73:c3:6b:3a:d8:60:
         42:d3:70:5e:7a:9f:09:c8:d2:8c:3a:c2:c1:e3:51:69:32:92:
         73:9e:cf:d8:7e:0d:2a:9d:17:3e:39:1a:dc:14:c9:63:1e:52:
         6b:fc:20:d4:79:ca:2b:19:67:d4:4d:51:aa:57:9d:5d:ac:89:
         5f:95:66:6f:24:9b:cd:a9:e5:90:07:6c:c4:83:70:1e:e6:25:
         b5:49:44:74:85:1e:78:9d:50:72:88:00:76:c7:6d:0c:71:a7:
         aa:c8:0a:b4:79:67:09:75:39:35:7d:f3:5b:ad:da:a8:61:77:
         59:2b:c1:3c:3c:1f:73:ee:a4:6c:a1:ed:74:00:f2:2a:54:76:
         9a:8e:83:e6:cc:94:d7:76:e2:ae:2c:13:54:17:ca:43:ec:d1:
         b0:13:21:59:9d:98:37:04:d5:11:04:9f:65:ad:31:c2:f5:46:
         24:b7:4b:c8:09:d9:f6:6f:e8:d5:6b:9d:cf:01:e1:72:e8:75:
         73:9d:dd:21:37:c5:d5:72:f8:35:65:ae:89:6b:4a:b9:a9:c8:
         6c:e1:34:ef:2f:32:be:8c:d6:63:64:68:d8:48:75:fd:61:67:
         ee:c5:11:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:15 2025 by rpki-client on console.sobornost.net