Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/X-07-5u6oCd2SvDZbkWxwLBbSVQ.roa
File:                     X-07-5u6oCd2SvDZbkWxwLBbSVQ.roa (raw, json)
Hash identifier:          MOCeiHcP6TYSCG1Ld4857c1Ef90IAnvsKB9nUxOBnR8=
Subject key identifier:   5F:ED:3B:FB:9B:BA:A0:27:76:4A:F0:D9:6E:45:B1:C0:B0:5B:49:54
Certificate issuer:       /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial:       01962473EF825A581D78B24FE2F531949CE2
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/X-07-5u6oCd2SvDZbkWxwLBbSVQ.roa
Signing time:             Fri 11 Apr 2025 10:44:59 +0000
ROA not before:           Fri 11 Apr 2025 10:44:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     48678
IP address blocks:        31.210.48.0/24 maxlen: 24
                          31.210.50.0/24 maxlen: 24
                          77.92.143.0/24 maxlen: 24
                          77.92.145.0/24 maxlen: 24
                          77.92.146.0/24 maxlen: 24
                          78.135.66.0/24 maxlen: 24
                          78.135.92.0/24 maxlen: 24
                          78.135.93.0/24 maxlen: 24
                          78.135.100.0/24 maxlen: 24
                          78.135.104.0/24 maxlen: 24
                          185.17.139.0/24 maxlen: 24
                          188.132.129.0/24 maxlen: 24
                          188.132.130.0/24 maxlen: 24
                          188.132.153.0/24 maxlen: 24
                          188.132.165.0/24 maxlen: 24
                          188.132.168.0/24 maxlen: 24
                          188.132.183.0/24 maxlen: 24
                          188.132.184.0/24 maxlen: 24
                          188.132.185.0/24 maxlen: 24
                          188.132.186.0/24 maxlen: 24
                          188.132.189.0/24 maxlen: 24
                          188.132.199.0/24 maxlen: 24
                          188.132.201.0/24 maxlen: 24
                          188.132.202.0/24 maxlen: 24
                          188.132.209.0/24 maxlen: 24
                          188.132.234.0/24 maxlen: 24
                          188.132.235.0/24 maxlen: 24
                          212.68.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:24:73:ef:82:5a:58:1d:78:b2:4f:e2:f5:31:94:9c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
        Validity
            Not Before: Apr 11 10:44:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5fed3bfb9bbaa027764af0d96e45b1c0b05b4954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d4:5c:d5:2a:27:de:0b:39:bf:66:45:fe:5d:
                    32:8e:bc:87:87:65:47:5d:ce:87:e9:ec:b9:64:6c:
                    98:6c:c5:87:f4:9e:4c:39:3d:bd:9c:8b:e9:1d:31:
                    fc:d6:4d:0d:01:85:47:5b:07:45:2a:6b:9d:e7:58:
                    e8:2f:26:c4:c6:28:74:a4:11:1d:b6:21:94:21:80:
                    be:48:cf:ae:2c:49:44:eb:d5:b2:ae:16:33:2f:1d:
                    80:e1:08:51:b0:e1:75:f6:f7:0b:14:0b:4e:e3:f0:
                    1c:58:d6:a0:24:dc:ae:4d:67:2a:4d:4f:ce:86:6c:
                    6b:4b:6e:81:17:0d:75:0a:fe:81:73:5b:9b:d4:8b:
                    b5:c2:e7:45:27:92:ba:e8:c4:6d:72:27:b9:33:9d:
                    d6:61:c4:ef:83:5e:cd:6f:30:11:e0:d6:c2:9e:fb:
                    1d:dd:f6:47:7e:85:d7:fa:95:af:01:ab:94:aa:a8:
                    c8:82:65:fc:b7:de:a2:77:5c:8c:e9:17:33:1b:72:
                    f1:24:ec:85:fa:6d:03:ea:e0:72:64:56:1d:a2:53:
                    84:2e:01:ba:dd:5f:ab:31:83:e6:31:a4:a8:f7:71:
                    c1:d9:90:0c:0d:5c:e9:ae:a3:57:7b:4b:eb:c8:71:
                    3d:2a:8d:ea:ea:c7:ae:34:50:e9:51:29:d2:02:c7:
                    a4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:ED:3B:FB:9B:BA:A0:27:76:4A:F0:D9:6E:45:B1:C0:B0:5B:49:54
            X509v3 Authority Key Identifier:
                keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/X-07-5u6oCd2SvDZbkWxwLBbSVQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.210.48.0/24
                  31.210.50.0/24
                  77.92.143.0/24
                  77.92.145.0-77.92.146.255
                  78.135.66.0/24
                  78.135.92.0/23
                  78.135.100.0/24
                  78.135.104.0/24
                  185.17.139.0/24
                  188.132.129.0-188.132.130.255
                  188.132.153.0/24
                  188.132.165.0/24
                  188.132.168.0/24
                  188.132.183.0-188.132.186.255
                  188.132.189.0/24
                  188.132.199.0/24
                  188.132.201.0-188.132.202.255
                  188.132.209.0/24
                  188.132.234.0/23
                  212.68.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:7a:eb:ea:eb:a4:03:f1:ea:55:ad:69:fc:b4:79:03:56:09:
         a3:a3:4b:5c:29:0b:0c:ab:ca:2a:c3:b5:44:3d:ca:73:97:77:
         43:5c:84:10:c1:e9:b3:38:32:38:0a:7b:1f:2c:24:0a:8c:9e:
         29:09:98:0c:df:6c:9f:48:4c:e6:5f:73:53:19:9d:54:9b:f5:
         ff:ac:71:06:47:ec:5b:8c:d8:09:e6:c3:ee:8f:7b:c3:44:b0:
         3d:e2:fe:82:23:8b:1f:22:2f:28:71:8a:dd:5f:f1:94:bc:f7:
         35:b3:12:da:7b:3f:df:b3:c7:33:e6:2c:e1:0b:48:00:95:95:
         3c:58:f8:a6:c2:be:d4:e9:37:51:17:4e:4c:d2:00:c8:bc:ef:
         1a:d7:83:b5:fa:9c:3f:3d:01:cb:c6:f2:4d:d9:2e:75:de:3f:
         16:dd:a9:0b:df:1f:a6:db:f1:f8:60:92:ec:fe:7e:f7:32:d2:
         ea:8b:09:0d:73:46:91:28:59:20:ea:ec:84:2b:0c:a7:9e:53:
         af:68:2c:0b:2e:ca:b3:82:b9:ec:77:b7:56:18:2b:ea:37:db:
         60:04:05:58:2a:be:f2:58:c4:c4:bf:bb:6a:ba:ad:10:64:74:
         42:2e:20:54:fc:58:67:e1:6e:99:36:89:aa:aa:ed:cb:9b:01:
         29:7e:bb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:06 2025 by rpki-client on console.sobornost.net