Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/GzSJNC8rXvHPR5ECqFrqBc47EjY.roa
File:                     GzSJNC8rXvHPR5ECqFrqBc47EjY.roa (raw, json)
Hash identifier:          DpRxP+N8EisPg5SdQn8IRQde36mD1fsRwPBj23IbYe0=
Subject key identifier:   1B:34:89:34:2F:2B:5E:F1:CF:47:91:02:A8:5A:EA:05:CE:3B:12:36
Certificate issuer:       /CN=938c88decc88f76aff13bc0858db387834be1711
Certificate serial:       019422FB5110E7A7D8F468BFFACE07D3F445
Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/GzSJNC8rXvHPR5ECqFrqBc47EjY.roa
Signing time:             Wed 01 Jan 2025 17:48:03 +0000
ROA not before:           Wed 01 Jan 2025 17:48:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     201430
IP address blocks:        185.80.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:51:10:e7:a7:d8:f4:68:bf:fa:ce:07:d3:f4:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938c88decc88f76aff13bc0858db387834be1711
        Validity
            Not Before: Jan  1 17:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1b3489342f2b5ef1cf479102a85aea05ce3b1236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:9a:19:82:d3:70:83:e2:42:6c:35:d9:61:
                    85:28:08:fb:1a:c7:28:cc:17:b5:f0:f7:75:10:21:
                    04:6d:a3:af:dc:b3:25:31:4f:88:eb:fd:0c:25:01:
                    64:8c:4c:08:5f:4f:d7:69:f5:09:23:cc:e7:d5:7f:
                    33:cb:59:65:4f:73:4e:ec:fb:13:91:60:17:ec:7e:
                    32:2c:49:a7:8e:93:34:b7:0b:c5:a4:ec:0e:2c:c9:
                    52:97:e1:e4:40:eb:9f:97:76:15:1c:94:01:e1:42:
                    f2:c9:0e:db:1b:2a:38:3b:38:94:6e:75:15:90:4d:
                    ea:c0:d3:0f:f9:6d:42:1e:af:f4:8f:76:d4:cc:2f:
                    5e:04:95:96:6e:41:ce:68:08:aa:98:1d:0e:7a:59:
                    30:20:e4:8b:e6:2e:b4:5d:5e:02:dd:48:90:21:03:
                    74:3b:17:ec:07:12:ea:bc:36:ca:0d:37:7e:8e:e2:
                    ab:8c:b8:de:78:71:fa:e3:db:3a:29:be:32:f7:1c:
                    ef:6f:2f:c4:fa:b0:d9:80:9c:62:c7:3c:fb:26:8c:
                    b6:b3:2a:f1:20:5b:50:5a:ad:e5:09:e0:2e:83:18:
                    d4:07:73:c2:98:4e:15:0e:01:99:6e:da:44:9c:05:
                    3e:56:4d:e5:7d:00:99:e8:52:b4:3b:ac:63:79:d2:
                    28:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:34:89:34:2F:2B:5E:F1:CF:47:91:02:A8:5A:EA:05:CE:3B:12:36
            X509v3 Authority Key Identifier:
                keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/GzSJNC8rXvHPR5ECqFrqBc47EjY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.80.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:18:5d:bd:12:77:22:80:88:59:0b:15:d0:74:75:c2:2e:a8:
         f6:52:94:78:1c:b6:e7:9b:8b:32:6e:51:9c:8f:bc:63:99:18:
         7a:69:a2:25:9e:c6:5a:dc:f1:e5:b3:46:bd:f0:c9:31:83:bb:
         fd:ec:08:8c:49:0a:ad:d5:b7:00:fe:4f:eb:b5:e1:74:f3:d2:
         3a:f4:cd:71:90:a6:d0:f7:93:0d:54:16:8c:c0:24:36:dc:0e:
         24:b4:98:f6:c7:19:67:cb:65:54:82:9d:70:ba:1a:b9:99:66:
         58:1c:be:eb:24:92:52:3f:dd:d6:5e:fa:70:9b:c0:f3:84:fe:
         e6:17:bc:90:0e:36:7b:24:9f:87:ab:74:1f:cd:a8:d5:65:5d:
         4a:cd:8d:f8:b8:68:5a:a6:31:7b:76:49:45:2c:37:f7:1c:82:
         2b:17:ce:77:52:6c:54:53:7d:87:1c:d6:43:82:54:e7:b4:94:
         d5:8c:1b:ba:de:b5:81:f7:61:e9:18:73:cb:1a:14:88:64:97:
         44:51:dc:34:f3:55:bc:65:26:2b:11:15:fd:49:e1:ee:b6:57:
         2d:ca:bf:d3:f7:0a:56:6d:d9:15:6b:c6:2c:05:4a:c3:a9:81:
         af:24:47:53:04:99:44:3a:35:b7:de:99:24:06:00:57:f4:fc:
         57:66:b1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:22 2025 by rpki-client on console.sobornost.net