Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/GuOIxFqZDjJWMmpNKqOTWb0JMsY.roa
File:                     GuOIxFqZDjJWMmpNKqOTWb0JMsY.roa (raw, json)
Hash identifier:          1QR1/RbAiZ1lW79NNCBhM0lbuAxkY8DyYTvj/RZllfY=
Subject key identifier:   1A:E3:88:C4:5A:99:0E:32:56:32:6A:4D:2A:A3:93:59:BD:09:32:C6
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       0194698E626F39ECA14EA6FF763194D76E18
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/GuOIxFqZDjJWMmpNKqOTWb0JMsY.roa
Signing time:             Wed 15 Jan 2025 10:42:06 +0000
ROA not before:           Wed 15 Jan 2025 10:42:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8903
IP address blocks:        45.83.50.0/23 maxlen: 23
                          45.83.50.0/24 maxlen: 24
                          45.83.51.0/24 maxlen: 24
                          80.66.112.0/23 maxlen: 23
                          80.66.114.0/24 maxlen: 24
                          80.66.115.0/24 maxlen: 24
                          80.66.117.0/24 maxlen: 24
                          80.66.118.0/24 maxlen: 24
                          80.66.119.0/24 maxlen: 24
                          80.66.120.0/23 maxlen: 23
                          80.66.120.0/24 maxlen: 24
                          80.66.121.0/24 maxlen: 24
                          80.66.122.0/24 maxlen: 24
                          80.66.123.0/24 maxlen: 24
                          80.66.124.0/24 maxlen: 24
                          80.66.125.0/24 maxlen: 24
                          80.66.126.0/24 maxlen: 24
                          80.66.127.0/24 maxlen: 24
                          85.209.72.0/22 maxlen: 22
                          89.42.70.0/24 maxlen: 24
                          89.44.150.0/24 maxlen: 24
                          89.44.151.0/24 maxlen: 24
                          89.45.208.0/24 maxlen: 24
                          91.132.31.0/24 maxlen: 24
                          94.198.47.0/24 maxlen: 24
                          178.19.34.0/24 maxlen: 24
                          178.19.35.0/24 maxlen: 24
                          178.19.44.0/24 maxlen: 24
                          178.19.45.0/24 maxlen: 24
                          178.19.46.0/23 maxlen: 23
                          178.19.47.0/24 maxlen: 24
                          185.71.28.0/24 maxlen: 24
                          185.203.21.0/24 maxlen: 24
                          185.203.22.0/24 maxlen: 24
                          185.203.23.0/24 maxlen: 24
                          185.242.175.0/24 maxlen: 24
                          193.178.212.0/24 maxlen: 24
                          193.178.218.0/24 maxlen: 24
                          193.186.1.0/24 maxlen: 24
                          193.186.11.0/24 maxlen: 24
                          194.15.140.0/24 maxlen: 24
                          194.15.146.0/24 maxlen: 24
                          194.15.182.0/24 maxlen: 24
                          194.15.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:69:8e:62:6f:39:ec:a1:4e:a6:ff:76:31:94:d7:6e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jan 15 10:42:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1ae388c45a990e3256326a4d2aa39359bd0932c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1f:d8:30:b1:11:f5:1f:75:f6:7d:d4:59:a9:
                    f0:da:91:3d:42:70:37:5b:03:f9:18:a6:c6:82:b4:
                    ce:15:c4:16:1b:ab:a5:6d:a3:e4:0c:b6:18:6c:2e:
                    f2:ce:81:f8:9b:0c:df:65:5d:35:6d:92:4e:86:0f:
                    40:78:b1:90:aa:b1:cc:fd:63:18:3f:8a:09:79:8f:
                    61:c5:88:47:91:25:56:1a:f9:54:8a:8d:4e:70:b0:
                    35:46:8d:6e:41:6b:4e:5f:ba:5a:be:f6:52:b2:5e:
                    47:a8:ea:fa:43:d9:e5:9b:e8:3c:de:9a:63:b0:93:
                    ad:52:86:53:b1:85:50:e9:16:9b:83:3e:f5:20:1c:
                    f4:e3:76:45:3d:f9:0e:c2:b8:5f:ae:5a:0f:1f:8c:
                    6d:fb:8e:78:f7:e3:9f:54:0e:5c:96:29:80:8b:d2:
                    aa:db:a6:db:95:51:2e:14:20:9c:37:c7:ed:89:76:
                    61:9c:36:4c:3a:79:cd:63:a7:d9:26:9b:83:11:e6:
                    50:76:58:f2:2a:c2:d2:99:3e:7d:9c:39:11:fc:7f:
                    46:dc:e2:db:b8:24:10:11:e5:4d:c5:37:05:69:40:
                    40:3a:5d:7a:44:92:2f:8b:4a:22:a9:08:fb:a0:d1:
                    28:37:c6:04:5a:20:e2:f5:1a:b8:30:e0:3f:5c:fa:
                    a6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E3:88:C4:5A:99:0E:32:56:32:6A:4D:2A:A3:93:59:BD:09:32:C6
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/GuOIxFqZDjJWMmpNKqOTWb0JMsY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.83.50.0/23
                  80.66.112.0/22
                  80.66.117.0-80.66.127.255
                  85.209.72.0/22
                  89.42.70.0/24
                  89.44.150.0/23
                  89.45.208.0/24
                  91.132.31.0/24
                  94.198.47.0/24
                  178.19.34.0/23
                  178.19.44.0/22
                  185.71.28.0/24
                  185.203.21.0-185.203.23.255
                  185.242.175.0/24
                  193.178.212.0/24
                  193.178.218.0/24
                  193.186.1.0/24
                  193.186.11.0/24
                  194.15.140.0/24
                  194.15.146.0/24
                  194.15.182.0/24
                  194.15.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:c9:b7:97:09:b0:f6:b3:5a:2d:8b:21:74:71:2d:0f:50:a4:
         ac:60:10:62:7e:f2:54:b2:06:0e:a9:f5:14:a2:76:3d:5f:2e:
         d4:32:0d:ff:3a:71:50:98:9d:56:b9:5f:82:ca:74:e4:a2:4d:
         b5:60:2c:f1:a9:81:be:c0:46:0c:d3:ae:91:2f:4c:ba:00:59:
         e7:9f:21:50:07:a3:a0:ec:ac:32:31:9c:f1:ae:94:b1:6a:64:
         a3:b0:83:0b:f9:03:da:cd:4b:6a:34:fd:c2:c7:89:b4:3d:b6:
         1d:40:9b:ac:53:0d:a7:53:43:8e:e8:93:a0:df:5c:6a:0c:e8:
         e2:3f:c8:94:df:b0:f9:09:4f:82:98:ed:1a:79:2f:1f:a8:c1:
         d6:db:fc:dc:6d:c2:28:cf:31:56:5f:32:fa:a1:53:7b:69:14:
         9c:72:1a:82:0d:0a:c8:1f:4c:9e:1d:a9:81:1f:fc:36:24:d6:
         3d:d5:50:9a:75:a5:4c:3f:ea:05:96:76:d6:bc:3b:7a:63:ff:
         eb:31:10:ff:8d:a9:68:e9:0a:bc:96:de:77:24:37:81:00:b8:
         c3:b2:09:da:44:5b:79:bb:34:54:7d:9d:02:41:85:db:a5:08:
         24:8b:82:52:8e:1f:07:e2:f5:61:db:45:00:a0:0b:6a:5a:f8:
         90:0e:33:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:49:25 2025 by rpki-client on console.sobornost.net