Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/Sev5X02oiIv7Gv_3mq5yAVy5Txs.roa
File:                     Sev5X02oiIv7Gv_3mq5yAVy5Txs.roa (raw, json)
Hash identifier:          0c/Q4ud2dbzbznUS25t1/df9lnnZpZNmLVMc8gJSoDQ=
Subject key identifier:   49:EB:F9:5F:4D:A8:88:8B:FB:1A:FF:F7:9A:AE:72:01:5C:B9:4F:1B
Certificate issuer:       /CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Certificate serial:       019614B4B6EF719A52545C29D71DBB732195
Authority key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/Sev5X02oiIv7Gv_3mq5yAVy5Txs.roa
Signing time:             Tue 08 Apr 2025 09:21:49 +0000
ROA not before:           Tue 08 Apr 2025 09:21:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     396982
IP address blocks:        185.223.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:14:b4:b6:ef:71:9a:52:54:5c:29:d7:1d:bb:73:21:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
        Validity
            Not Before: Apr  8 09:21:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=49ebf95f4da8888bfb1afff79aae72015cb94f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3e:ee:6d:3a:3f:c2:2d:00:19:d1:b7:a2:a5:
                    a4:c0:5e:7d:6f:80:8b:10:da:00:01:75:77:cd:d2:
                    0d:1f:b3:c7:d0:2d:d7:48:c7:b5:32:91:70:9b:5a:
                    72:03:dc:8c:37:c4:5f:40:12:6d:55:c1:63:84:59:
                    81:67:a9:a3:1d:36:a1:10:32:61:6c:e0:1b:60:10:
                    06:4c:cb:ec:26:82:10:e4:76:65:6f:94:fc:69:5a:
                    68:fc:37:4e:57:bf:50:37:e9:05:b1:c5:81:d2:a8:
                    f0:61:ab:96:39:d8:46:a5:7e:78:19:f7:d7:f8:2c:
                    e6:b6:97:25:15:c1:0a:ce:91:95:2c:98:50:66:29:
                    cd:dc:c1:72:3b:ba:6d:31:a7:eb:65:61:a5:70:91:
                    99:0c:5a:19:47:43:ee:aa:a4:3b:e7:7b:ef:d1:11:
                    f4:47:fa:98:9d:d6:4d:37:b4:7f:84:3a:af:d6:9f:
                    70:3d:f7:37:0e:7e:15:2c:c6:28:8c:95:dc:87:99:
                    8a:02:9f:6f:ad:52:e3:ec:c9:3d:74:1c:4b:48:09:
                    e1:65:79:e4:f5:73:5c:81:31:44:8e:f8:95:75:53:
                    6d:42:80:92:48:12:50:4f:25:5b:5e:dc:8c:e4:71:
                    7e:ac:85:48:cd:39:12:9a:dd:d4:80:6e:3c:0d:59:
                    7c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EB:F9:5F:4D:A8:88:8B:FB:1A:FF:F7:9A:AE:72:01:5C:B9:4F:1B
            X509v3 Authority Key Identifier:
                keyid:F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/Sev5X02oiIv7Gv_3mq5yAVy5Txs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.223.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:a7:17:bf:04:ea:86:08:f4:bd:ed:d8:59:99:31:8c:47:a5:
         53:6b:c9:3a:df:65:34:33:a3:39:99:ad:d2:53:f6:d9:6e:4c:
         57:b5:3c:07:a6:70:cc:48:fb:51:8d:97:3a:4a:4e:f2:5f:7f:
         ed:db:fb:51:5a:85:c7:66:33:88:f3:af:29:df:db:e1:a0:a7:
         76:9c:7c:f6:e7:76:cb:a4:6e:7c:81:b9:a4:23:74:51:be:1e:
         92:06:d1:a9:9d:e6:e4:71:34:05:ed:50:3d:ff:de:c7:42:26:
         88:7c:20:2b:5d:e7:fe:9c:77:c5:10:ca:53:26:bd:15:41:0a:
         23:c5:24:11:85:6e:22:98:e9:49:85:98:c6:a3:54:77:18:30:
         63:66:0e:41:f6:5b:5e:4b:62:5e:bd:03:da:49:88:b3:52:7e:
         a5:17:b4:ad:68:25:e9:eb:86:8b:46:89:26:38:52:53:c1:b4:
         c8:8d:69:6e:f6:ab:1b:d5:7b:32:a7:8c:1d:d7:cb:c0:a1:81:
         99:04:0d:f4:54:c2:6d:94:20:d3:53:8f:d4:33:83:8f:72:fd:
         8e:61:f0:1d:b3:46:a6:9b:ca:63:4f:b7:ab:4c:00:bf:33:82:
         5c:d8:29:f4:06:ff:30:34:d2:1b:e2:4c:04:11:95:ea:2a:93:
         74:25:38:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net