Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/g00WlqoayNMboio4aQJxi5oYUAs.roa
File:                     g00WlqoayNMboio4aQJxi5oYUAs.roa (raw, json)
Hash identifier:          Hyc0gnAg44yWXRt2jBl8ZFxFJUhWTRX2EA3Xr0Vxj/g=
Subject key identifier:   83:4D:16:96:AA:1A:C8:D3:1B:A2:2A:38:69:02:71:8B:9A:18:50:0B
Certificate issuer:       /CN=215a409d27b9a69346324004694da11beae02dbb
Certificate serial:       019425FC89180A9E178F8872BE9F240641C2
Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/g00WlqoayNMboio4aQJxi5oYUAs.roa
Signing time:             Thu 02 Jan 2025 07:48:14 +0000
ROA not before:           Thu 02 Jan 2025 07:48:14 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     199557
IP address blocks:        185.134.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:89:18:0a:9e:17:8f:88:72:be:9f:24:06:41:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215a409d27b9a69346324004694da11beae02dbb
        Validity
            Not Before: Jan  2 07:48:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=834d1696aa1ac8d31ba22a386902718b9a18500b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:43:33:8e:3e:50:07:38:a1:e8:e2:b2:3b:
                    12:33:5a:80:13:ef:eb:19:6d:a2:2e:38:a5:43:c7:
                    2f:3b:f4:86:4d:62:03:75:96:5f:f1:f4:bf:21:d4:
                    28:7e:de:18:d9:2f:d9:5d:9c:0d:17:2a:74:b8:d2:
                    91:eb:a7:3c:65:92:84:d3:e8:99:a8:03:74:d0:07:
                    9d:c1:0d:2a:82:b5:03:ae:2b:7c:52:b5:6c:19:43:
                    b6:66:9a:72:f8:6a:e1:a4:ba:84:1c:a8:a6:12:3c:
                    8c:4b:e6:fb:57:89:c1:ed:40:3a:71:8f:3d:82:27:
                    5f:c3:47:df:f8:a7:35:7c:01:e6:60:b4:08:77:ee:
                    ce:ea:f6:8e:e2:38:b7:0f:5a:e1:c3:af:76:8c:a5:
                    b6:58:8e:18:f8:ad:89:0d:f9:de:bb:ed:13:85:b7:
                    bb:10:5c:4d:56:ad:a8:8c:3f:12:d8:d5:5a:71:51:
                    a3:33:3a:8e:b5:6a:ce:8d:8d:d5:1e:a4:23:29:06:
                    a6:38:e7:70:24:ef:64:cb:2c:42:3b:c8:45:42:8a:
                    14:da:2d:95:b1:8f:20:8a:85:ca:38:8c:04:ff:1f:
                    c7:b8:b8:02:7b:ab:b6:79:6e:f9:e4:e5:84:69:76:
                    a3:87:60:31:ed:2e:ac:bb:d6:dc:9b:89:15:1c:38:
                    6f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4D:16:96:AA:1A:C8:D3:1B:A2:2A:38:69:02:71:8B:9A:18:50:0B
            X509v3 Authority Key Identifier:
                keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/g00WlqoayNMboio4aQJxi5oYUAs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.134.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:d2:85:b3:18:16:a3:dd:b3:8e:0f:64:fc:5a:21:66:62:f8:
         15:79:c6:42:e4:db:66:8e:3e:86:a9:14:57:8b:1f:65:b8:87:
         d7:3b:42:60:b4:97:45:c7:ff:45:9a:2e:a5:40:d9:55:a3:bd:
         85:82:51:00:bb:bc:0d:a8:a4:0c:47:ff:85:88:2a:49:20:57:
         8c:ba:a6:a9:d4:9a:85:5a:53:72:e4:e8:c6:c5:21:b2:2d:8a:
         bd:19:d6:3f:3f:37:9b:07:45:b3:a5:1a:d6:4e:c7:51:1d:f1:
         c5:12:23:a1:a5:7b:5d:69:4a:2d:b8:0d:0e:c0:e8:a4:c2:79:
         c3:80:dd:3b:7d:b6:b6:af:6b:3b:ff:1a:ef:b5:97:90:0d:18:
         21:03:97:55:7e:5b:27:06:80:e6:dc:5f:f3:27:c8:71:ad:84:
         3b:7a:a8:98:d2:30:18:30:f2:b4:cd:eb:51:a7:88:c8:8d:87:
         99:2f:72:a4:ad:a8:e9:51:18:5f:99:f8:cc:75:b9:b4:87:0c:
         2d:02:b0:6d:e7:b7:5c:32:93:92:76:96:57:0e:5d:c2:ef:6b:
         fc:11:00:fa:f5:f0:a0:45:bc:c9:89:75:3e:c0:41:a6:d4:39:
         5d:32:71:f2:29:0f:df:0c:61:33:fc:02:f9:ec:f9:02:65:92:
         e3:e4:96:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net