Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/6-BNn1ahWtft0g-GuZtIXl4l5Qo.roa
File:                     6-BNn1ahWtft0g-GuZtIXl4l5Qo.roa (raw, json)
Hash identifier:          mnVCxlV7vM9sKmc4seeqVJ1+v+wCWGn9k8XntKlO+8E=
Subject key identifier:   EB:E0:4D:9F:56:A1:5A:D7:ED:D2:0F:86:B9:9B:48:5E:5E:25:E5:0A
Certificate issuer:       /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial:       01942747BEEEF1EC355524A06575052A4B62
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/6-BNn1ahWtft0g-GuZtIXl4l5Qo.roa
Signing time:             Thu 02 Jan 2025 13:50:00 +0000
ROA not before:           Thu 02 Jan 2025 13:50:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     39392
IP address blocks:        185.203.84.0/24 maxlen: 24
                          185.203.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:be:ee:f1:ec:35:55:24:a0:65:75:05:2a:4b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
        Validity
            Not Before: Jan  2 13:50:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ebe04d9f56a15ad7edd20f86b99b485e5e25e50a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1a:f8:78:48:5e:c3:9a:9c:fd:8c:91:82:4b:
                    72:ea:5c:4d:99:dc:96:4e:78:95:d4:38:22:77:0a:
                    4f:d7:7b:e6:dc:23:b5:f2:5a:db:31:58:f6:25:a0:
                    2a:0c:34:68:b5:bb:bb:15:3d:5e:28:bb:a5:28:5f:
                    c4:a3:b6:8e:d9:6f:cc:58:09:fb:32:11:b5:a1:bf:
                    68:ae:b6:2a:ba:20:06:37:fd:3e:60:e1:a8:d7:53:
                    12:0e:15:0c:3d:c2:34:9e:80:49:90:eb:a3:bc:34:
                    37:34:51:84:4b:54:f5:2e:3c:51:15:df:bf:8e:4a:
                    5e:68:a1:7e:9c:16:52:a7:fb:e6:d3:93:73:c5:91:
                    f7:19:6d:29:0e:95:ac:40:fd:f5:7d:03:dd:df:89:
                    30:fd:2f:09:aa:c2:a5:70:10:82:fb:af:0c:7c:84:
                    b3:24:8c:69:30:bf:fc:9d:ac:d1:a4:40:1f:f2:4f:
                    38:ec:ef:12:a7:78:f8:b7:59:3a:b5:f8:69:59:d9:
                    f8:4e:60:8f:ce:76:c6:59:b7:53:0b:b0:15:18:00:
                    16:83:68:7e:71:f6:0a:15:13:6f:f1:1b:67:f8:18:
                    fd:e8:4e:91:f5:7b:fc:af:e4:32:ed:cd:b3:d3:ee:
                    00:7a:66:5e:38:99:a9:e9:ce:ea:ec:5e:9d:78:27:
                    2d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E0:4D:9F:56:A1:5A:D7:ED:D2:0F:86:B9:9B:48:5E:5E:25:E5:0A
            X509v3 Authority Key Identifier:
                keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/6-BNn1ahWtft0g-GuZtIXl4l5Qo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.203.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:46:09:68:b8:37:1c:5a:cc:29:36:78:51:a0:46:25:27:94:
         5a:a8:c8:15:2a:a1:ca:bb:89:4d:cd:03:db:83:63:2f:41:bb:
         35:eb:fa:8f:93:da:98:e9:ec:e1:8a:29:83:27:72:7b:d2:97:
         ee:58:75:37:04:b8:ae:fd:1d:46:c1:d6:4e:00:7c:3c:b2:ae:
         af:e4:1a:b3:c0:9e:65:2c:e5:e1:a9:88:eb:9b:72:c8:bf:e2:
         3a:46:66:b0:b5:3a:4d:c4:82:04:ac:e4:b9:e1:d1:81:4e:b7:
         8c:bf:2e:7b:11:b8:73:42:42:53:2f:99:07:f5:98:1e:bb:4e:
         28:88:40:26:8b:72:04:14:55:80:82:cc:b0:48:80:88:fb:33:
         d6:58:75:08:88:d6:30:f5:bf:c3:9a:96:e6:ee:58:52:21:4f:
         ef:be:48:5d:1c:ab:bf:72:30:fd:1e:e5:60:29:0c:59:68:a0:
         7f:f5:58:19:17:2a:72:98:81:f2:4c:4d:e9:e1:eb:9d:90:f2:
         22:57:ed:ff:5a:06:f1:a1:0f:ce:ea:ca:6e:75:15:37:83:b6:
         58:7f:c9:40:71:b6:bb:49:e7:17:1c:75:76:f6:ec:23:62:26:
         a9:4c:8f:fb:11:0d:49:b0:60:6b:0e:5d:14:9b:a5:f3:d7:ff:
         e6:b2:bd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:27 2025 by rpki-client on console.sobornost.net