Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/Vcv5tAuCRI51Ne4wIervYzxaMQs.roa
File:                     Vcv5tAuCRI51Ne4wIervYzxaMQs.roa (raw, json)
Hash identifier:          VGZj619xEznuknB6YSHghG7OJlFhjtH0eQlPnIUmbOI=
Subject key identifier:   55:CB:F9:B4:0B:82:44:8E:75:35:EE:30:21:EA:EF:63:3C:5A:31:0B
Certificate issuer:       /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial:       019126C0A3CA90C33FB0F86898897CB3A15A
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/Vcv5tAuCRI51Ne4wIervYzxaMQs.roa
Signing time:             Tue 06 Aug 2024 08:14:04 +0000
ROA not before:           Tue 06 Aug 2024 08:14:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48861
IP address blocks:        46.182.175.0/24 maxlen: 24
                          195.88.66.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:26:c0:a3:ca:90:c3:3f:b0:f8:68:98:89:7c:b3:a1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
        Validity
            Not Before: Aug  6 08:14:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=55cbf9b40b82448e7535ee3021eaef633c5a310b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:36:a0:af:bf:76:07:97:c1:f3:f7:45:0f:bb:
                    99:54:eb:77:11:02:99:07:0c:02:23:eb:f8:8e:93:
                    eb:1a:2b:71:d0:bc:ca:87:43:e3:ad:b4:38:55:ad:
                    94:a5:49:49:f9:e6:d4:ce:a4:95:1d:3d:ea:91:80:
                    15:d6:12:69:89:de:5f:bb:b6:9d:04:a5:ed:9e:78:
                    74:e9:20:db:31:25:61:d6:31:9c:10:02:11:42:dc:
                    7f:23:3c:3c:11:1e:2c:33:a2:6b:d9:e0:7b:c4:17:
                    ca:c5:99:b2:cd:4b:7f:7f:d9:07:3f:58:ee:32:94:
                    a5:66:7f:20:e2:20:7c:83:b1:2c:44:63:fd:0b:37:
                    a5:f4:3d:38:29:85:90:05:db:ac:da:de:f9:e8:e3:
                    6c:a7:d2:de:c8:e4:84:cd:9c:52:f9:9e:9a:2c:27:
                    b2:c2:ca:fd:93:7a:50:1b:25:ce:7c:64:5f:da:48:
                    18:e8:ee:d6:82:29:df:0c:62:2f:fb:a6:7e:4d:88:
                    3b:ba:6b:bb:99:b9:df:30:46:f1:33:ef:f3:d5:8c:
                    56:9a:86:d6:92:99:39:d8:e2:c7:8e:35:ef:3c:07:
                    f4:f6:93:65:7d:71:83:f0:7a:80:f4:ed:c3:da:19:
                    be:e7:14:ae:7c:c5:80:61:2e:23:18:f8:b2:2f:48:
                    7f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CB:F9:B4:0B:82:44:8E:75:35:EE:30:21:EA:EF:63:3C:5A:31:0B
            X509v3 Authority Key Identifier:
                keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/Vcv5tAuCRI51Ne4wIervYzxaMQs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.182.175.0/24
                  195.88.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:3c:0b:29:f5:b6:af:23:26:be:29:03:9e:fd:d2:a1:cc:ce:
         c5:ab:7b:1f:f7:9c:4d:02:b5:fd:4d:2a:89:9c:a7:af:99:ef:
         0c:e8:ee:f6:2c:1e:32:80:03:e5:70:03:4a:5d:9f:14:fb:08:
         69:b3:0d:74:35:e5:e0:9d:0b:8a:f4:69:d1:c9:16:cf:84:30:
         d4:44:fc:53:c9:a5:e5:40:9e:2e:d4:88:bd:09:3f:d0:27:a1:
         f9:2f:6b:74:ed:0b:c0:72:11:14:c4:01:ca:84:0b:2c:89:05:
         7e:24:8b:5d:b3:00:b9:36:21:c1:1c:82:87:be:b9:46:ac:7e:
         f1:88:d7:b2:76:49:fc:48:9f:33:77:f1:3a:69:90:54:5a:d0:
         73:c4:36:49:2f:dd:78:ac:70:b7:f4:be:0e:e9:f4:9b:16:2d:
         11:fa:35:00:b6:ce:6d:02:5e:43:c2:8c:84:0e:5b:a8:45:3e:
         7f:be:c3:19:1f:ad:8a:62:1f:6c:ed:67:11:98:17:49:64:96:
         68:ed:ba:e2:70:ed:19:3d:91:0f:8e:6c:06:02:c0:46:98:17:
         32:36:19:6d:1b:a1:ae:fd:02:3d:41:27:eb:3f:11:a7:d2:29:
         db:97:b8:07:6f:d3:55:0c:76:c0:7a:c4:ea:38:9e:07:8f:d8:
         da:9b:da:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:25 2024 by rpki-client on console.sobornost.net