Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/UAWIgik98ovvIJWv4yjj5lBqzOo.roa
File:                     UAWIgik98ovvIJWv4yjj5lBqzOo.roa (raw, json)
Hash identifier:          jrAxhhr23FpKpzjy0AGBEFjJeK035eZKHkroGqfSgNo=
Subject key identifier:   50:05:88:82:29:3D:F2:8B:EF:20:95:AF:E3:28:E3:E6:50:6A:CC:EA
Certificate issuer:       /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial:       019420D661A3D4AEE63665FED19E7CE092AB
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/UAWIgik98ovvIJWv4yjj5lBqzOo.roa
Signing time:             Wed 01 Jan 2025 07:48:28 +0000
ROA not before:           Wed 01 Jan 2025 07:48:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     48260
IP address blocks:        185.77.197.0/24 maxlen: 24
                          185.77.198.0/24 maxlen: 24
                          185.77.199.0/24 maxlen: 24
                          2a03:1980::/40 maxlen: 40
                          2a03:1980:d0ff::/48 maxlen: 48
                          2a03:1980:d1ff::/48 maxlen: 48
                          2a03:1980:d200::/40 maxlen: 40
                          2a03:1980:d400::/40 maxlen: 40
                          2a03:1980:d4ff::/48 maxlen: 48
                          2a03:1981::/32 maxlen: 32
                          2a03:1984::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:61:a3:d4:ae:e6:36:65:fe:d1:9e:7c:e0:92:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
        Validity
            Not Before: Jan  1 07:48:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=50058882293df28bef2095afe328e3e6506accea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c9:00:23:d4:25:05:4b:f2:33:8c:08:a1:ae:
                    68:31:71:61:d9:4e:f6:61:b8:65:54:d1:4c:32:bf:
                    d4:f0:d5:9c:51:c1:e8:bc:ce:78:56:2a:00:9d:50:
                    76:19:34:b9:37:ca:2b:f6:b1:ad:69:b1:5a:1c:8b:
                    87:77:58:39:0d:87:3c:2d:7f:1d:e4:f5:0b:c0:d9:
                    9c:b4:ed:9f:0d:c0:0a:21:52:c9:69:2d:c5:28:4c:
                    b2:51:32:da:f0:56:04:3f:1c:09:2a:d1:16:75:eb:
                    52:e5:a3:cb:4b:f3:0b:c7:36:da:d5:87:9e:7c:02:
                    b2:b2:86:c4:e4:f6:bf:d1:1f:75:ed:a8:80:69:56:
                    f6:3b:a7:b9:66:50:e6:a3:08:5e:62:9e:38:64:6c:
                    27:a6:4b:26:d8:74:a1:0b:c8:b9:93:a6:8e:bf:8e:
                    43:01:d8:c7:3e:24:35:50:9d:7f:7f:3c:f8:5a:0e:
                    86:b9:f1:be:89:27:6f:e7:b4:7c:df:11:87:ef:0a:
                    5e:4c:d9:8f:a0:63:13:02:c0:f6:63:2b:68:bf:6a:
                    cb:0f:73:60:df:17:8d:a4:73:1d:5c:fe:73:c9:bc:
                    dc:b9:dd:a7:3f:9e:e3:0d:56:ba:dc:e8:2d:f8:e0:
                    66:55:07:b4:f2:5e:70:e1:b2:4c:76:32:8a:9b:48:
                    22:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:05:88:82:29:3D:F2:8B:EF:20:95:AF:E3:28:E3:E6:50:6A:CC:EA
            X509v3 Authority Key Identifier:
                keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/UAWIgik98ovvIJWv4yjj5lBqzOo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.77.197.0-185.77.199.255
                IPv6:
                  2a03:1980::/40
                  2a03:1980:d0ff::/48
                  2a03:1980:d1ff::-2a03:1980:d2ff:ffff:ffff:ffff:ffff:ffff
                  2a03:1980:d400::/40
                  2a03:1981::/32
                  2a03:1984::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:84:4e:90:0b:ff:d7:a4:84:46:2c:31:46:33:69:86:c2:e1:
         ca:0d:35:4a:49:54:d7:ff:40:ad:84:ab:f3:f8:e0:70:9a:58:
         80:82:ce:0c:6f:fa:3d:42:5a:32:9b:9b:ea:6b:df:6b:30:0f:
         aa:1f:06:f3:58:31:c2:47:c3:32:20:fc:e0:61:93:11:b6:1d:
         c5:5c:82:13:cb:83:40:84:ce:39:6c:aa:27:df:65:86:01:4d:
         fd:e9:a7:eb:06:3e:1d:79:e3:58:57:10:3c:e8:d5:b8:da:1a:
         55:2c:7d:a6:39:e0:9e:04:53:3d:7f:cd:54:79:b1:a6:61:01:
         36:39:f4:b0:2b:7c:0d:1b:f9:34:72:46:93:f0:c7:06:2a:b4:
         45:42:7a:c0:72:1e:5c:99:82:a7:e7:1c:80:e8:f9:ce:6d:3d:
         42:ce:83:4c:72:59:c4:5c:de:4c:8b:4b:58:57:5c:06:a1:10:
         97:cb:77:85:be:30:33:8f:fb:2d:1d:2a:45:a3:02:14:f0:99:
         ff:52:01:96:76:40:51:f0:fb:f1:65:58:16:cd:91:52:dd:77:
         5a:e7:85:f5:bb:f2:50:c3:d8:53:cb:53:f3:b7:6d:c3:f1:47:
         cf:36:c0:70:07:3b:61:b7:c3:22:96:5a:4e:2d:25:42:7c:05:
         80:a7:cb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:23 2025 by rpki-client on console.sobornost.net