Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/GLHmVae2R6jaakZk3moUBxJAeJc.roa
File:                     GLHmVae2R6jaakZk3moUBxJAeJc.roa (raw, json)
Hash identifier:          mSQfdgEmq2Rkg+sk7NnMjuCo2d41gGG9w7/ovXQBtes=
Subject key identifier:   18:B1:E6:55:A7:B6:47:A8:DA:6A:46:64:DE:6A:14:07:12:40:78:97
Certificate issuer:       /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial:       01942143D9FCFF9D1D2A2FA754673A38EE0F
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/GLHmVae2R6jaakZk3moUBxJAeJc.roa
Signing time:             Wed 01 Jan 2025 09:48:02 +0000
ROA not before:           Wed 01 Jan 2025 09:48:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     210015
IP address blocks:        45.80.248.0/23 maxlen: 23
                          193.151.160.0/23 maxlen: 23
                          193.151.162.0/24 maxlen: 24
                          2a0d:e7c7:ffff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:d9:fc:ff:9d:1d:2a:2f:a7:54:67:3a:38:ee:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
        Validity
            Not Before: Jan  1 09:48:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=18b1e655a7b647a8da6a4664de6a140712407897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:38:b5:45:ff:b4:d5:45:6b:9e:5e:60:7f:
                    08:20:5d:4e:17:9a:d3:c3:23:17:3e:b5:19:1c:8c:
                    cf:b1:54:d7:a6:9d:9e:12:90:01:db:4c:27:72:13:
                    70:be:d8:ba:36:3b:c2:f9:25:18:35:d8:cb:0c:35:
                    dd:59:24:a5:6a:44:16:fc:9e:a6:c8:1f:33:ee:f8:
                    4a:6f:f3:3c:a3:87:5a:2f:b3:e0:4a:dc:d8:31:02:
                    cd:68:d9:1e:31:c4:e8:7d:b7:76:e7:b7:93:89:f8:
                    fc:c3:80:82:a6:b0:96:3e:5c:d0:85:5d:df:e8:9a:
                    f0:a9:fe:58:da:e2:24:03:3f:57:f0:05:8f:2d:1b:
                    7c:84:68:b9:97:78:99:a2:c9:52:47:7e:61:cf:0e:
                    a9:a3:e4:52:d3:65:3a:f4:88:99:7d:dc:a1:73:7f:
                    6d:24:71:e2:93:59:47:cd:6f:af:88:7a:0e:dc:23:
                    d2:42:f8:3c:9d:d4:43:dd:3c:f2:76:08:fa:5e:6b:
                    52:10:45:e3:ea:f7:7a:f4:39:2f:a6:de:8b:b6:17:
                    99:87:2b:8b:db:46:ab:c3:94:a9:88:6c:9d:a5:64:
                    8c:59:da:7c:79:0c:fe:9f:55:a8:a8:15:16:02:65:
                    ea:a6:d1:90:95:b4:25:b9:95:45:19:41:30:a3:61:
                    b9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B1:E6:55:A7:B6:47:A8:DA:6A:46:64:DE:6A:14:07:12:40:78:97
            X509v3 Authority Key Identifier:
                keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/GLHmVae2R6jaakZk3moUBxJAeJc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.248.0/23
                  193.151.160.0-193.151.162.255
                IPv6:
                  2a0d:e7c7:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:52:15:a3:de:75:70:82:c2:39:a0:ee:ed:a8:db:ca:36:e1:
         3e:60:bd:9a:75:10:96:32:e5:5c:62:8d:61:a3:5e:b9:e9:29:
         a0:c2:79:0f:17:d7:b2:74:0b:45:3e:42:6f:bf:77:7f:c6:50:
         aa:3e:e3:d9:ad:21:ce:fa:c4:bd:6e:ea:12:01:e4:2d:35:99:
         91:ab:3d:54:ac:6c:dc:5b:10:1e:83:3f:0b:9d:48:38:1e:99:
         17:d0:fc:b6:23:fc:d4:bb:61:4f:20:1f:9f:f1:59:f0:ae:d3:
         bf:bb:8c:68:3a:a8:90:ad:19:31:91:c3:65:34:be:d7:63:28:
         b5:05:8f:da:bf:40:b4:0e:22:f9:a4:8e:af:31:3f:89:e4:ee:
         b7:21:ca:91:b2:18:d7:6d:5a:ca:66:41:94:08:52:c5:f4:48:
         f3:08:eb:7f:de:ad:25:d5:69:69:6f:9d:c2:70:aa:cc:08:eb:
         5e:50:1f:1d:fd:5d:26:78:c7:06:f8:af:dd:f3:dc:0d:4d:c5:
         96:22:cb:23:2c:58:a7:a7:03:99:e7:1d:57:d5:7b:0d:2c:7a:
         c5:13:d7:60:2a:8e:3b:94:be:06:6d:69:90:10:30:45:22:95:
         da:71:e9:b2:70:8f:30:9b:49:df:9b:a7:73:a6:ce:ec:ed:47:
         6e:56:cd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:36 2025 by rpki-client on console.sobornost.net