Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/eEIU-7XZaVcC-f6y_l8FbyGXkYs.roa
File:                     eEIU-7XZaVcC-f6y_l8FbyGXkYs.roa (raw, json)
Hash identifier:          ccjF0pRALTvlsj4nghUXMFhD4eJgmm2vuAU1GU9bybw=
Subject key identifier:   78:42:14:FB:B5:D9:69:57:02:F9:FE:B2:FE:5F:05:6F:21:97:91:8B
Certificate issuer:       /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial:       019421B22CFA5D455958A496B5F28EC85A45
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/eEIU-7XZaVcC-f6y_l8FbyGXkYs.roa
Signing time:             Wed 01 Jan 2025 11:48:32 +0000
ROA not before:           Wed 01 Jan 2025 11:48:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     44118
IP address blocks:        95.169.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:2c:fa:5d:45:59:58:a4:96:b5:f2:8e:c8:5a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
        Validity
            Not Before: Jan  1 11:48:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=784214fbb5d9695702f9feb2fe5f056f2197918b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d0:dc:c7:7a:8a:41:85:79:66:d4:6f:21:5f:
                    7e:ee:f7:3c:06:10:29:2b:5b:87:d2:8d:13:cb:26:
                    19:62:19:84:d8:7b:e5:ce:8e:8b:fc:04:cc:1c:84:
                    c6:e6:17:e3:7b:f0:2f:17:26:ed:a5:f8:8a:35:27:
                    c0:d9:77:f3:c8:bb:80:b6:2e:a6:44:c4:db:24:c4:
                    8d:55:ba:71:93:b2:07:3e:a4:74:1d:b5:59:65:21:
                    65:5c:8f:b6:89:e8:80:ee:b3:e2:3f:62:12:06:2e:
                    5f:4b:4a:06:7d:0d:78:01:c8:ba:3c:54:a8:d8:b8:
                    e9:5b:0d:d1:6c:fc:d8:dd:6c:78:1c:f7:a3:fe:51:
                    d4:65:d7:6d:1e:4f:53:66:06:13:26:ef:66:c8:3b:
                    1d:ea:b5:63:64:a3:f3:aa:0e:f8:f1:c9:42:0d:8f:
                    34:1a:20:10:3f:ad:c4:21:ba:be:29:4e:d5:66:58:
                    f8:7c:7d:5d:1b:9b:91:1d:20:35:e7:e2:78:83:b5:
                    69:fb:53:de:bd:ba:88:18:a5:59:e0:d9:af:60:d9:
                    dc:59:3d:23:4f:04:7e:71:84:c9:74:62:42:ef:c6:
                    27:9b:fc:e5:44:8d:47:10:8f:94:eb:36:6c:e7:57:
                    c4:ad:90:9b:4d:18:17:ff:10:2b:26:02:cd:08:8f:
                    2d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:42:14:FB:B5:D9:69:57:02:F9:FE:B2:FE:5F:05:6F:21:97:91:8B
            X509v3 Authority Key Identifier:
                keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/eEIU-7XZaVcC-f6y_l8FbyGXkYs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.169.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:ed:35:66:b4:d2:9c:5b:07:7e:d8:82:04:79:f5:cf:c8:93:
         82:6f:d2:79:cc:d7:a2:5c:21:ea:cf:10:ad:56:c5:52:2f:4e:
         6f:05:b5:da:ee:06:d9:e9:31:f0:d7:81:ac:1e:a1:92:39:f2:
         42:46:84:b6:8f:b3:ff:02:cf:46:08:d0:56:69:47:c1:1d:b2:
         f3:e1:c0:69:af:c8:21:87:25:f1:ad:08:91:dc:5e:7d:78:e3:
         2b:ce:6d:72:9a:87:83:62:55:e5:1c:8d:83:3b:42:d0:70:2d:
         5a:ff:41:ff:82:95:9f:f4:16:4a:61:1d:4d:33:1d:98:65:69:
         5e:b1:24:0a:0b:c3:29:15:de:6b:29:63:57:96:ad:d0:fb:e0:
         63:ef:31:cc:52:eb:46:88:3b:eb:a3:8f:ad:85:94:68:35:b3:
         39:bd:c0:96:b8:56:1d:54:a0:73:92:d9:8b:cf:53:5b:2e:d0:
         bf:47:c0:a3:fa:1e:75:8b:a0:5f:24:fa:5b:de:eb:18:35:79:
         f5:6d:b9:9b:fb:8b:32:f8:be:32:c8:f9:c8:b1:38:a0:cd:de:
         81:e9:92:f5:19:27:ec:be:5c:4a:35:45:53:4d:98:92:11:33:
         8f:81:bb:eb:5f:cb:63:22:6a:36:13:47:33:e8:61:26:89:7a:
         e2:84:3c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net