Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/83jnw3_iQXavgLNpPArd0mjD8v0.roa
File:                     83jnw3_iQXavgLNpPArd0mjD8v0.roa (raw, json)
Hash identifier:          SHfszJ5S+RcUzQDWjfFykPyoXsOFj+P+O7U1p7lsd+k=
Subject key identifier:   F3:78:E7:C3:7F:E2:41:76:AF:80:B3:69:3C:0A:DD:D2:68:C3:F2:FD
Certificate issuer:       /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial:       019426D901B76BE6D4B3248C1C44EBFB1721
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/83jnw3_iQXavgLNpPArd0mjD8v0.roa
Signing time:             Thu 02 Jan 2025 11:49:03 +0000
ROA not before:           Thu 02 Jan 2025 11:49:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209347
IP address blocks:        45.12.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:01:b7:6b:e6:d4:b3:24:8c:1c:44:eb:fb:17:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
        Validity
            Not Before: Jan  2 11:49:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f378e7c37fe24176af80b3693c0addd268c3f2fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:93:4c:01:e2:36:36:bf:ac:0a:62:3d:42:86:
                    ec:af:9d:71:cf:f1:9d:ea:5d:ea:5a:24:37:2e:ea:
                    f1:73:5d:57:a0:d5:fd:0a:45:b1:0c:1a:d9:47:90:
                    d1:cd:c2:55:56:e4:54:22:fb:39:73:19:8c:8a:dd:
                    97:7c:c5:e0:bd:ba:aa:d9:04:05:c6:76:31:77:8e:
                    58:c6:af:bc:76:89:09:87:9b:e5:94:04:fb:8c:4c:
                    00:ce:de:ae:91:f6:7b:39:4d:68:82:c8:a3:dd:31:
                    85:ad:fc:e9:d6:cb:ff:66:d9:53:09:88:64:59:32:
                    d2:6b:ea:b9:31:e5:e5:52:44:c6:3a:45:6f:5d:a0:
                    40:92:2b:e0:08:9d:90:c5:ea:53:2b:31:34:3c:b0:
                    84:17:62:f2:e6:70:a0:eb:d7:00:aa:c3:16:b9:c3:
                    d7:cd:ce:92:90:e1:3a:71:fb:82:ac:62:fe:93:c3:
                    01:97:6c:47:02:b9:56:a3:c6:28:1a:53:58:58:54:
                    2f:61:c1:cf:ad:54:77:d1:52:0f:ce:33:12:22:fa:
                    b0:f9:96:99:28:a9:8f:64:c7:bc:1a:f7:27:0f:e5:
                    d6:c8:5a:c1:38:19:85:c0:66:17:bc:ba:99:e4:1c:
                    9f:f7:4c:2c:ff:5d:4f:00:f4:18:3c:06:01:65:40:
                    79:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:78:E7:C3:7F:E2:41:76:AF:80:B3:69:3C:0A:DD:D2:68:C3:F2:FD
            X509v3 Authority Key Identifier:
                keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/83jnw3_iQXavgLNpPArd0mjD8v0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:62:e0:1f:bb:a8:9e:7f:be:52:e3:25:ef:34:b0:b8:8d:08:
         f3:cd:a3:c1:13:ed:80:8f:4b:85:5d:33:75:ab:e1:4f:a2:4d:
         ac:a9:b3:82:75:f3:f0:ca:0f:f6:65:32:ba:4e:53:78:58:11:
         18:52:86:7b:58:09:60:81:70:84:0b:e3:04:a6:ff:7a:87:65:
         cc:8c:a4:e8:ad:3b:df:b1:40:2f:9a:cc:eb:18:1b:72:8f:e6:
         de:9b:96:92:c1:ae:9c:50:7a:3d:aa:a6:d5:bd:1a:14:19:6b:
         4b:92:9a:2a:bb:07:2d:13:44:f3:8b:3c:af:8c:b7:bd:1b:d2:
         ba:00:56:a8:18:04:f3:8b:0a:6d:f4:f6:ac:4e:4e:91:18:a1:
         e0:27:50:95:7b:85:cd:4b:3c:22:b6:22:74:a1:43:81:e2:16:
         93:1e:75:13:10:cf:b0:09:0e:68:5b:c4:f6:cf:eb:90:90:0d:
         7c:9f:d5:8f:aa:72:a6:fa:51:8f:91:34:38:c4:cb:02:20:8d:
         32:ae:78:b0:59:07:4e:10:06:74:51:9d:3d:55:97:f6:e7:01:
         5c:52:a0:3c:78:ee:88:b6:e5:f8:d2:31:2a:f5:67:44:ca:e1:
         12:46:35:50:5c:79:6b:a2:a8:d8:50:cc:8d:86:be:0b:21:23:
         ce:5f:3a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:21 2025 by rpki-client on console.sobornost.net