Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/xWk3TJ8xAGPDUZQKY3kASUL6dzM.roa
File:                     xWk3TJ8xAGPDUZQKY3kASUL6dzM.roa (raw, json)
Hash identifier:          /z7ZjPJ/gv/pCsZNSb1u2GohazjLks0+0ejnDw3SaX0=
Subject key identifier:   C5:69:37:4C:9F:31:00:63:C3:51:94:0A:63:79:00:49:42:FA:77:33
Certificate issuer:       /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial:       0194252198B759039C09829ACB2F41343BF7
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/xWk3TJ8xAGPDUZQKY3kASUL6dzM.roa
Signing time:             Thu 02 Jan 2025 03:49:06 +0000
ROA not before:           Thu 02 Jan 2025 03:49:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     203576
IP address blocks:        194.110.169.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:98:b7:59:03:9c:09:82:9a:cb:2f:41:34:3b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
        Validity
            Not Before: Jan  2 03:49:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c569374c9f310063c351940a6379004942fa7733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:10:62:72:32:67:af:89:f6:71:8e:8a:e8:83:
                    6f:00:a9:a5:a5:03:6f:1b:4e:bc:d4:43:1e:7c:45:
                    c6:e2:e7:fc:42:b6:04:78:1a:16:67:64:b5:61:e6:
                    2a:26:6b:7a:db:50:44:0f:e3:5b:93:71:ae:f1:fc:
                    3f:c6:c4:a0:5e:45:dd:2b:50:d0:d6:db:a3:ef:77:
                    88:c3:87:7e:13:1a:e5:94:c2:ef:6d:91:cd:57:f2:
                    e1:41:36:44:a2:0a:bb:a7:d7:79:f7:34:b3:0c:ce:
                    d9:b1:0f:0d:d8:2f:fc:b4:43:08:3b:fa:8c:4c:78:
                    89:78:56:7a:9a:e7:3e:48:ae:78:a7:fe:c6:7e:d7:
                    ab:05:c1:d9:1e:f3:7b:a0:1d:d6:ff:68:2c:94:11:
                    09:01:70:df:77:95:c5:72:21:ac:4f:4e:fc:57:1e:
                    36:bf:bb:c9:56:05:ad:7f:86:f9:97:54:6c:bc:63:
                    db:01:3e:fd:d3:2d:4c:7b:75:ec:c4:99:84:f9:07:
                    4c:b7:7d:d3:d3:2c:e5:01:d8:38:20:f8:9b:b7:d6:
                    b6:bb:c7:0f:c0:44:a9:d0:1e:7c:f2:c9:d7:f9:82:
                    31:c7:93:d7:0d:0e:0f:76:06:cd:33:d8:27:cd:7d:
                    7e:66:8a:82:11:c1:92:95:38:bd:12:cc:c6:57:13:
                    a1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:69:37:4C:9F:31:00:63:C3:51:94:0A:63:79:00:49:42:FA:77:33
            X509v3 Authority Key Identifier:
                keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/xWk3TJ8xAGPDUZQKY3kASUL6dzM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:de:60:d3:e2:3b:35:d0:34:ab:ba:de:a2:9a:1a:77:c2:0e:
         0f:f4:5f:2f:5b:c1:ee:da:14:c3:c3:6e:18:f3:21:31:3b:9b:
         cf:83:03:01:82:1f:f1:d4:03:62:9f:01:c9:a8:f5:c2:a8:d4:
         52:f8:95:30:45:5e:5e:19:7d:e2:72:59:e2:fa:52:7d:49:a8:
         74:00:71:18:c5:f5:c3:a1:42:c9:ec:30:d2:d0:f8:5c:59:dc:
         19:eb:7c:fb:c0:8a:fc:26:f6:0e:56:4d:5a:88:7d:59:5c:92:
         8c:d3:6e:38:54:a1:f9:64:d0:74:6f:16:b4:2e:15:3b:48:07:
         3b:cf:11:03:e3:75:88:4d:12:1f:41:86:9b:b9:47:2e:73:0b:
         8b:d1:09:27:06:20:bd:81:a5:c4:1c:4e:be:a9:91:57:ef:a8:
         e6:eb:b9:93:6c:a1:d7:64:0b:fd:40:ef:8f:0b:f3:2e:48:7c:
         61:35:3e:3d:f6:45:57:fc:ed:4e:1a:c5:bb:f7:16:93:20:78:
         5a:c5:a2:04:4d:5c:ad:3d:78:a3:33:b6:25:1a:7d:da:22:ab:
         62:2a:79:33:1b:12:0a:72:65:38:80:4b:5c:3a:c4:c9:c8:06:
         82:40:8a:16:2c:c8:45:1a:e3:3b:3c:c5:8e:46:c9:6d:73:80:
         40:17:2a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:48 2025 by rpki-client on console.sobornost.net