Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/iXVDb19kvukiKPCGR7Xk4m4waFo.roa
File:                     iXVDb19kvukiKPCGR7Xk4m4waFo.roa (raw, json)
Hash identifier:          doLRr6Uuft22RZholuz/UG1fqLztwMyrNWgGHx261cM=
Subject key identifier:   89:75:43:6F:5F:64:BE:E9:22:28:F0:86:47:B5:E4:E2:6E:30:68:5A
Certificate issuer:       /CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Certificate serial:       019425FBF9516FA1944E37F2BB62DB3ABAD0
Authority key identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/iXVDb19kvukiKPCGR7Xk4m4waFo.roa
Signing time:             Thu 02 Jan 2025 07:47:37 +0000
ROA not before:           Thu 02 Jan 2025 07:47:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     60845
IP address blocks:        80.190.115.0/24 maxlen: 24
                          80.190.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fb:f9:51:6f:a1:94:4e:37:f2:bb:62:db:3a:ba:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
        Validity
            Not Before: Jan  2 07:47:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8975436f5f64bee92228f08647b5e4e26e30685a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:24:6d:c2:7c:08:5a:4b:98:48:42:42:4e:
                    a5:70:7c:c0:23:b1:d1:fc:97:8c:19:d9:fd:42:59:
                    36:1c:26:92:c0:fa:1a:51:64:06:c4:91:55:a4:13:
                    79:67:f4:61:be:25:0f:7d:3d:8c:d7:86:9f:d0:a2:
                    be:0c:35:78:0c:2e:04:15:57:65:51:12:58:f0:34:
                    49:ef:7c:72:00:a0:d4:c4:20:bb:54:d4:35:25:c5:
                    82:a7:ef:65:a2:c9:ce:09:b2:bc:c3:2c:2f:be:35:
                    9c:8a:40:5c:05:41:c7:23:f9:26:02:ec:fa:b3:51:
                    ef:c5:70:55:e5:d7:84:20:a9:95:ca:bc:02:d0:08:
                    9a:f8:0e:c6:fd:03:8c:fa:85:68:6a:fa:c3:67:f6:
                    c4:04:17:eb:d6:09:65:65:70:c5:a6:aa:0c:42:33:
                    d7:0e:52:f7:2e:2f:7a:ee:0e:13:6d:bb:57:7c:95:
                    56:a5:b9:1a:da:f6:87:07:0f:03:a8:78:52:07:20:
                    e0:69:26:0c:98:22:fe:dc:29:5f:d8:ca:5e:44:d6:
                    40:05:72:0d:ba:3b:53:4d:41:78:66:39:52:f0:d6:
                    39:46:e8:c4:d4:fc:d2:8c:03:09:20:3f:d3:42:f6:
                    01:31:fd:2f:6c:30:33:4f:c9:03:1a:ec:88:be:17:
                    c9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:75:43:6F:5F:64:BE:E9:22:28:F0:86:47:B5:E4:E2:6E:30:68:5A
            X509v3 Authority Key Identifier:
                keyid:EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/iXVDb19kvukiKPCGR7Xk4m4waFo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.190.115.0/24
                  80.190.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:cb:69:e5:dc:8b:21:0e:74:a1:d1:aa:e6:b6:a0:16:09:91:
         2b:80:91:09:bf:c7:6e:3b:6d:58:f9:9d:52:45:23:b1:23:c4:
         88:c2:dd:32:ec:56:5c:67:7e:f6:dd:16:5c:2f:ec:41:e2:c2:
         14:0a:da:31:69:e9:df:75:34:03:92:1c:26:0a:c0:bd:7f:84:
         8a:36:75:f3:76:0c:1d:5a:02:f5:16:2b:04:6d:e5:09:84:d6:
         7c:d2:44:6b:f7:39:95:db:ef:66:e9:3f:1a:49:6c:04:66:6e:
         17:9d:46:85:00:38:67:da:04:7a:f8:d3:fd:b5:f0:ec:dd:b6:
         ac:39:fe:40:51:61:0f:e1:98:15:5c:f5:2c:63:be:b1:4e:b5:
         ae:77:d1:5d:7b:24:98:c2:78:5b:11:00:6c:97:5a:ba:f3:ec:
         87:49:a1:73:7f:1b:b4:88:87:0c:88:d2:1a:ea:d5:36:6e:2a:
         53:98:ae:6b:8a:07:3d:ac:a3:ad:a5:e3:89:aa:e6:c1:50:66:
         39:6f:00:36:f9:29:9b:87:87:4f:36:56:1c:56:9d:8d:e6:ce:
         95:1a:5b:27:f8:fb:29:ac:17:0b:7d:82:39:a7:36:75:48:ac:
         52:b3:5c:ba:49:6d:c1:96:21:63:a4:39:43:3f:bf:d2:81:7f:
         60:bd:cd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net