Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/V4u5rSLjbOaDQXVdqSxPdXhvwuk.roa
File:                     V4u5rSLjbOaDQXVdqSxPdXhvwuk.roa (raw, json)
Hash identifier:          WAasJD4vjDPzicaQnRHt7jsAhdCvqScDULpr9cuHpJ8=
Subject key identifier:   57:8B:B9:AD:22:E3:6C:E6:83:41:75:5D:A9:2C:4F:75:78:6F:C2:E9
Certificate issuer:       /CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
Certificate serial:       01942445356B9525F6ADE59503BF223C18D9
Authority key identifier: EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/V4u5rSLjbOaDQXVdqSxPdXhvwuk.roa
Signing time:             Wed 01 Jan 2025 23:48:22 +0000
ROA not before:           Wed 01 Jan 2025 23:48:22 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     20624
IP address blocks:        193.178.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:35:6b:95:25:f6:ad:e5:95:03:bf:22:3c:18:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
        Validity
            Not Before: Jan  1 23:48:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=578bb9ad22e36ce68341755da92c4f75786fc2e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7a:40:d9:3d:12:25:b2:a6:16:6b:01:21:b1:
                    14:65:f1:f8:9b:d9:cb:45:87:1d:ea:0d:0c:42:7d:
                    43:50:bc:33:01:9e:61:53:4e:72:94:14:df:7c:d1:
                    b8:c0:ea:52:f5:c0:09:ba:65:45:bc:05:f4:48:b5:
                    dc:d0:e1:bf:17:6e:9f:58:ca:cb:f2:93:59:b7:cd:
                    2c:1a:a2:ce:69:0a:00:bc:c7:90:7d:9f:3b:52:ba:
                    8f:ab:75:bb:96:b5:58:30:11:ec:f6:ca:7a:08:8a:
                    ff:c8:69:a3:8a:6f:dc:da:0e:af:a4:1d:fa:0c:ee:
                    77:e8:39:2d:92:bb:65:71:26:71:8f:33:35:55:11:
                    66:eb:d5:19:a9:82:43:b3:8e:60:67:89:e7:92:bc:
                    48:ff:40:b5:c1:a2:bb:23:c9:05:e3:f0:39:6e:84:
                    bc:84:20:7a:85:c9:9b:34:72:13:9d:d1:d4:4b:52:
                    de:c6:21:2d:18:b7:92:aa:a2:8e:ad:22:80:26:b6:
                    7d:ef:8f:59:8e:1e:66:a7:9b:cf:ed:e8:b1:7e:be:
                    9a:13:ce:4c:a2:9e:53:a8:85:3f:38:f8:08:94:f4:
                    3f:90:a8:1d:8d:8b:02:76:c4:ac:1f:bd:7a:06:af:
                    65:fc:f1:e6:5c:64:1a:e8:40:4a:ee:a7:de:e3:ae:
                    8b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8B:B9:AD:22:E3:6C:E6:83:41:75:5D:A9:2C:4F:75:78:6F:C2:E9
            X509v3 Authority Key Identifier:
                keyid:EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/V4u5rSLjbOaDQXVdqSxPdXhvwuk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:dd:76:2a:3c:4b:67:71:2d:4c:2b:1a:1e:be:b4:ff:1b:be:
         15:df:75:7c:ba:1c:a0:bc:47:29:a5:40:38:4a:39:c4:b2:ec:
         b7:08:a0:01:22:c8:47:50:61:bb:1a:d2:0e:51:b8:59:7a:0a:
         72:5e:19:b2:3a:30:7e:24:7d:a4:d5:4f:31:a5:10:ce:4d:e9:
         05:1d:07:c0:36:84:21:bc:76:c0:57:45:2f:25:48:8c:a3:55:
         ad:fb:51:5a:25:8e:ea:8b:ea:83:4f:d6:80:e7:ad:e4:96:b7:
         dd:e2:da:14:6e:fd:95:88:92:2e:dc:bf:5b:47:6e:60:df:c2:
         a7:98:1a:ea:cd:c6:ed:ca:b3:60:c9:48:c9:33:d2:26:2a:81:
         d9:10:38:b0:20:a0:0d:9a:bc:a6:0a:04:f4:d0:4e:f5:ce:ef:
         9c:12:c6:2f:91:50:4e:e6:d1:a8:62:07:ba:49:4e:3f:aa:1f:
         a1:95:b8:9a:74:1b:0a:5c:df:4f:24:ef:b6:dd:79:1e:1a:d9:
         10:b9:99:a0:7d:c0:1d:61:dd:03:3a:30:ec:bd:36:af:08:16:
         21:3f:bc:7b:13:a0:f4:0d:49:d4:35:80:9a:37:c2:fb:a6:31:
         02:0c:f7:4a:c9:ee:59:6f:38:a8:68:33:63:c3:29:9e:ce:32:
         6d:8a:3d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:57 2025 by rpki-client on console.sobornost.net