Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/Y8zzieez_mdBu3g9ytJW3F1qtcM.roa
File:                     Y8zzieez_mdBu3g9ytJW3F1qtcM.roa (raw, json)
Hash identifier:          IBQYnJmIJpRbjM/GjJNvEs/gT4e0NBRUv4AwTGSAB8I=
Subject key identifier:   63:CC:F3:89:E7:B3:FE:67:41:BB:78:3D:CA:D2:56:DC:5D:6A:B5:C3
Certificate issuer:       /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial:       01957F833564C9C93C1CF547E9E43A209A2E
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/Y8zzieez_mdBu3g9ytJW3F1qtcM.roa
Signing time:             Mon 10 Mar 2025 10:04:20 +0000
ROA not before:           Mon 10 Mar 2025 10:04:20 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214271
IP address blocks:        185.121.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:7f:83:35:64:c9:c9:3c:1c:f5:47:e9:e4:3a:20:9a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
        Validity
            Not Before: Mar 10 10:04:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=63ccf389e7b3fe6741bb783dcad256dc5d6ab5c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2a:f7:cf:cf:be:f9:0c:0b:bf:b5:68:c9:3e:
                    9e:6c:52:a1:e1:14:02:f8:32:91:49:d8:a5:9b:64:
                    c1:7c:82:45:72:95:c8:8f:e6:9e:7b:44:23:38:0e:
                    dd:cc:0f:10:59:0a:9d:e8:69:d3:76:b2:87:5a:a1:
                    d8:af:79:c0:d3:3c:fb:9e:d6:de:c7:f3:7e:22:9a:
                    2e:8a:90:5b:db:74:61:d2:f4:2a:34:22:60:3f:cc:
                    45:f0:5a:69:47:5d:23:b1:ec:c1:11:09:41:3c:9d:
                    05:b6:d0:1e:28:68:04:b0:6b:9b:03:84:58:48:f8:
                    fa:52:c9:34:38:4f:0e:b7:41:46:7b:26:26:a0:d5:
                    18:f6:85:9f:16:1f:7b:30:3e:bc:ef:57:d2:06:03:
                    03:1f:05:f1:97:1c:a8:82:89:8c:a4:7a:35:46:5d:
                    27:50:79:93:0d:ed:c9:55:4f:60:55:95:bb:69:34:
                    1e:1b:8a:2f:fd:b6:38:75:45:af:cc:0b:b6:28:ea:
                    a8:af:58:0c:f0:80:9d:08:74:31:f6:f6:8e:58:58:
                    9b:70:42:e3:ef:4e:03:0a:d3:5c:08:20:d3:46:63:
                    ab:ff:2f:d3:a9:29:83:2d:d5:41:3c:2e:de:94:28:
                    5c:b2:2c:40:bd:77:f3:71:71:92:bc:a9:82:b8:4d:
                    8b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CC:F3:89:E7:B3:FE:67:41:BB:78:3D:CA:D2:56:DC:5D:6A:B5:C3
            X509v3 Authority Key Identifier:
                keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/Y8zzieez_mdBu3g9ytJW3F1qtcM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.121.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:d1:8b:6b:10:27:b5:39:0c:16:8f:f0:3e:89:27:49:5c:85:
         d1:35:e3:ad:b2:38:5d:03:b4:ac:c2:cd:8f:4d:01:a8:91:47:
         d5:36:45:4b:07:b5:c7:f0:b0:ba:5d:4a:6d:a8:63:1b:7a:44:
         95:9f:74:a6:47:7c:50:5b:dd:4e:31:20:93:2c:b2:b4:62:7e:
         08:0c:d0:3f:a8:80:dc:41:83:9a:7c:c2:14:5b:91:bf:a1:28:
         dd:0d:17:4d:76:cf:bd:b3:90:4a:d2:7f:8d:90:f8:8b:5c:7a:
         d7:13:39:70:1f:82:ab:ef:9d:32:b0:90:56:1c:f1:8f:58:9c:
         0c:4c:a9:c5:ba:22:71:48:d2:5c:9d:e3:f5:2d:cb:8f:d6:5c:
         23:6d:1b:b4:7d:18:1b:06:e5:ad:fd:67:c1:d8:a9:6a:89:ab:
         01:09:eb:1f:9b:f7:63:15:96:92:4b:ad:69:88:9d:68:68:3f:
         88:34:85:e1:e0:c2:55:f1:f2:b0:0f:06:94:dc:d6:b4:89:2f:
         a9:88:0e:f0:53:01:75:bf:ed:1e:ca:fc:42:2f:e1:d3:59:60:
         57:cf:89:f5:07:9f:75:c6:ac:ce:9a:28:e7:8f:20:97:64:d3:
         58:cc:95:cc:44:17:b9:cc:2a:b1:98:7c:c4:48:01:0c:50:d3:
         43:4e:63:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:21 2025 by rpki-client on console.sobornost.net