Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/W33ER_t_OtnjzNNqIgZQWcWECbY.roa
File:                     W33ER_t_OtnjzNNqIgZQWcWECbY.roa (raw, json)
Hash identifier:          NP4mG/NtGze2h/hJtgAeMT0cwcXJALcvAYf5fOgL68g=
Subject key identifier:   5B:7D:C4:47:FB:7F:3A:D9:E3:CC:D3:6A:22:06:50:59:C5:84:09:B6
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       019427484AB454DA8B8E12ECDEFE282AFF47
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/W33ER_t_OtnjzNNqIgZQWcWECbY.roa
Signing time:             Thu 02 Jan 2025 13:50:36 +0000
ROA not before:           Thu 02 Jan 2025 13:50:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207136
IP address blocks:        94.198.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:4a:b4:54:da:8b:8e:12:ec:de:fe:28:2a:ff:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jan  2 13:50:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5b7dc447fb7f3ad9e3ccd36a22065059c58409b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:08:42:28:1d:bb:ae:0d:48:00:02:ff:be:46:
                    d7:1e:21:f1:41:09:24:20:0d:cc:9c:da:24:bf:2e:
                    eb:d2:31:68:bc:2b:ed:29:7a:8d:c0:fa:d3:ca:14:
                    7d:8f:95:74:88:88:44:01:4f:11:1e:a1:83:23:08:
                    3c:cc:6d:8e:eb:f5:1f:44:db:4d:ab:d9:94:a9:1d:
                    ad:83:5f:89:dd:98:ea:58:61:29:6f:5e:ee:f2:df:
                    88:ea:b9:19:37:d8:75:22:1d:7f:c1:2b:2c:b3:b8:
                    ac:52:9e:10:f9:55:9c:98:eb:6e:72:7c:09:79:35:
                    90:83:dd:15:70:8f:54:ff:8d:dc:3b:ae:fa:92:82:
                    4d:f2:f7:35:57:1d:78:cc:d6:a0:28:1e:f1:9d:ba:
                    bc:be:e4:ac:da:4d:f4:9f:67:2c:b9:c9:8c:b7:55:
                    08:82:cf:2e:fc:80:d9:9c:6a:2a:96:36:bd:18:9e:
                    e3:46:66:29:a0:0e:4b:bb:8d:c1:b9:c7:fb:15:1b:
                    eb:ea:ee:11:d8:c7:12:fb:af:9e:88:66:44:02:0a:
                    76:c1:da:66:38:c5:5f:c9:4a:54:1c:51:e5:10:68:
                    7d:71:26:8a:fd:c8:98:51:06:74:2e:39:51:64:0c:
                    d8:5c:d1:c0:89:8f:4b:84:70:96:30:78:87:99:d0:
                    7a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7D:C4:47:FB:7F:3A:D9:E3:CC:D3:6A:22:06:50:59:C5:84:09:B6
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/W33ER_t_OtnjzNNqIgZQWcWECbY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.198.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:29:a9:b6:db:10:e1:79:0b:5d:f2:28:c7:da:05:4c:60:e1:
         68:3b:af:72:88:7f:34:3a:25:9f:40:20:5e:59:b8:1c:37:be:
         7c:86:3a:ff:d7:05:ae:5e:64:a3:95:49:4b:62:8b:d1:40:d6:
         d0:00:dd:7a:53:7f:78:5b:8e:52:6a:f6:14:c0:1f:bf:ca:ff:
         ec:c8:96:7a:c5:79:ca:7b:f7:9f:04:d9:29:65:2b:b1:bd:f0:
         b4:54:b9:e7:b1:33:13:1d:59:6c:41:7e:e0:9d:2d:b1:b4:df:
         ab:85:43:81:25:d3:99:d0:9f:cd:be:95:c8:8d:f8:79:1f:d5:
         1f:55:d8:82:42:be:5a:0f:5e:2b:02:23:89:43:fa:00:36:2d:
         e9:85:a9:3f:54:ea:91:97:1f:c6:ab:8a:a8:06:65:79:0b:38:
         90:0c:d5:d1:98:c8:d4:1b:3b:97:57:e9:c9:e6:e7:30:22:4d:
         e9:0c:42:48:50:df:67:59:5c:33:3b:ab:57:8d:6f:37:ed:d2:
         3f:33:29:0a:df:15:ed:8c:c3:70:88:08:e9:dc:3e:fa:c9:aa:
         5d:3c:30:94:27:f0:ed:34:67:77:08:c0:52:ec:ba:f4:66:cf:
         86:81:12:83:d9:4b:bd:95:c6:b8:55:1f:ea:8b:15:f7:75:fd:
         41:c9:fe:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:49:25 2025 by rpki-client on console.sobornost.net