Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/WskaznLEMYwubtusiQFBluw68yw.roa
File:                     WskaznLEMYwubtusiQFBluw68yw.roa (raw, json)
Hash identifier:          uh2j/ttzj+A4Z4+a8ZWSmr/34qkzodFFdTgCIu7Q+QU=
Subject key identifier:   5A:C9:1A:CE:72:C4:31:8C:2E:6E:DB:AC:89:01:41:96:EC:3A:F3:2C
Certificate issuer:       /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial:       019424B3BD60E0DB6AF0CB95136EB35ABE6B
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/WskaznLEMYwubtusiQFBluw68yw.roa
Signing time:             Thu 02 Jan 2025 01:49:06 +0000
ROA not before:           Thu 02 Jan 2025 01:49:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     62080
IP address blocks:        194.145.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:bd:60:e0:db:6a:f0:cb:95:13:6e:b3:5a:be:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
        Validity
            Not Before: Jan  2 01:49:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5ac91ace72c4318c2e6edbac89014196ec3af32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:cd:25:59:46:fc:12:af:ba:77:38:66:a8:c2:
                    17:dc:d1:2f:4e:2b:7e:9c:b6:01:65:b8:35:67:f4:
                    fd:e4:4d:bf:4c:3e:d2:ba:9f:11:5c:7b:1d:7d:db:
                    09:e1:7c:ff:dc:66:87:9f:a3:e8:55:52:37:83:bc:
                    4f:8e:c4:53:8d:70:8a:37:82:ed:5d:65:bb:67:d5:
                    5a:90:7a:6f:57:04:b6:24:35:52:e7:d3:35:ad:cc:
                    90:0e:4f:55:33:02:8a:af:5f:55:e1:a9:27:5f:b3:
                    2f:33:a7:ac:04:a1:a7:c7:32:13:fe:69:41:ec:1c:
                    c1:e8:ca:39:f8:19:8e:96:6c:2d:08:6e:b6:d5:61:
                    64:95:8d:2b:5e:a5:54:91:34:f6:22:92:89:a8:d6:
                    d5:f1:b4:5b:75:e8:37:70:51:a3:b1:66:61:d3:72:
                    fb:12:74:ed:ec:f5:9a:f8:1b:d6:85:b3:c4:ac:14:
                    56:ce:ad:03:db:92:74:30:fe:4f:d3:be:55:a9:14:
                    df:b4:99:3f:7f:ab:aa:43:6d:fd:82:6d:88:29:c9:
                    de:da:3d:bc:df:7c:14:80:e8:c3:3b:ba:30:cd:02:
                    be:c5:27:a2:42:a2:e7:3d:d7:5a:07:4b:e1:86:39:
                    3f:d6:3b:f0:cc:cc:92:f2:b1:81:f7:85:00:98:a6:
                    7f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C9:1A:CE:72:C4:31:8C:2E:6E:DB:AC:89:01:41:96:EC:3A:F3:2C
            X509v3 Authority Key Identifier:
                keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/WskaznLEMYwubtusiQFBluw68yw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.145.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:ee:1c:26:0a:d2:be:71:8e:35:06:b1:a5:35:70:30:ad:c6:
         3b:4a:4e:88:c5:0b:4d:eb:b0:e2:93:47:d3:2a:87:d5:d8:60:
         1a:02:09:13:90:69:b5:ef:12:be:b2:5e:9c:5a:5b:05:62:e8:
         f1:dc:28:34:d5:61:eb:2f:7a:d0:58:f4:b2:14:a6:4c:d2:d9:
         96:1e:38:15:c5:e7:4e:7d:71:9a:bb:d6:9a:66:3d:a7:39:68:
         ef:55:16:4c:81:c5:76:cc:7a:36:28:5b:9d:08:9d:95:00:b9:
         3a:2e:70:27:90:ee:47:e7:48:fc:ed:a9:00:b9:f8:fc:f0:c3:
         0d:b5:c9:38:b9:37:0b:82:a9:a1:54:f5:a9:ae:14:6e:fb:0f:
         05:1a:1b:63:03:06:c8:82:a9:17:62:db:84:f8:7c:bc:fe:72:
         e8:74:e8:4f:dc:57:91:e3:48:5e:13:d6:b3:26:f9:10:6f:ff:
         57:ae:61:2d:ad:bb:da:92:5d:9a:1f:67:cd:ad:b8:bf:6e:a8:
         68:e1:1d:41:bb:b7:45:14:53:32:a7:69:5f:78:4a:fe:51:c2:
         66:74:ae:73:09:f2:72:80:46:cc:49:10:1e:7d:41:35:0c:e3:
         36:9e:30:e7:89:43:e7:75:b5:e4:61:54:cd:ee:92:67:8f:14:
         08:df:84:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net