Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/wZuLHZACRgaqannQqtWTgy9AnFY.roa
File:                     wZuLHZACRgaqannQqtWTgy9AnFY.roa (raw, json)
Hash identifier:          ArTL5+VwNfVl+VzsgeZQzp979burQZd57vVQg0xpNM4=
Subject key identifier:   C1:9B:8B:1D:90:02:46:06:AA:6A:79:D0:AA:D5:93:83:2F:40:9C:56
Certificate issuer:       /CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
Certificate serial:       019420D644366A5D342B5AC008B7BBD5758E
Authority key identifier: 4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/wZuLHZACRgaqannQqtWTgy9AnFY.roa
Signing time:             Wed 01 Jan 2025 07:48:20 +0000
ROA not before:           Wed 01 Jan 2025 07:48:20 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8585
IP address blocks:        31.204.192.0/18 maxlen: 18
                          37.122.160.0/19 maxlen: 19
                          46.33.192.0/19 maxlen: 19
                          46.33.192.0/22 maxlen: 22
                          46.33.196.0/24 maxlen: 24
                          46.33.197.0/24 maxlen: 24
                          46.33.198.0/24 maxlen: 24
                          46.33.199.0/24 maxlen: 24
                          46.161.64.0/18 maxlen: 18
                          46.161.76.0/22 maxlen: 22
                          77.222.0.0/19 maxlen: 19
                          78.155.32.0/19 maxlen: 19
                          85.94.96.0/19 maxlen: 19
                          95.155.0.0/18 maxlen: 18
                          109.228.64.0/18 maxlen: 18
                          195.66.160.0/19 maxlen: 19
                          195.66.164.0/24 maxlen: 24
                          195.66.166.0/24 maxlen: 24
                          195.66.167.0/24 maxlen: 24
                          195.66.180.0/24 maxlen: 24
                          195.66.189.0/24 maxlen: 24
                          213.149.96.0/19 maxlen: 19
                          2a00:fe80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:44:36:6a:5d:34:2b:5a:c0:08:b7:bb:d5:75:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
        Validity
            Not Before: Jan  1 07:48:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c19b8b1d90024606aa6a79d0aad593832f409c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:35:e3:7e:1f:6a:94:30:d2:18:ca:b1:cc:42:
                    48:2c:1e:e2:e0:3b:a2:6b:2a:86:45:65:60:c6:be:
                    e9:18:71:6e:1d:bb:67:4d:d1:82:65:ec:d6:39:bd:
                    b0:e6:fb:0c:ed:99:81:58:50:64:5a:bf:67:8b:92:
                    53:a0:6b:19:5f:ff:da:3e:6d:6c:cb:d6:63:7a:3a:
                    85:98:5c:b6:01:f4:a5:dd:32:db:1b:75:67:4a:52:
                    7f:8d:e1:c3:0a:2e:23:05:35:a6:a4:84:d4:95:bb:
                    91:94:fb:fe:eb:59:96:4d:e6:1a:16:aa:c1:11:29:
                    67:f2:24:9f:6b:b7:41:e1:69:20:6e:c0:2c:82:30:
                    12:54:45:52:5c:e9:e6:a1:d8:0d:12:68:b7:db:eb:
                    1e:36:40:a2:6d:cd:c1:5e:46:1b:e3:81:74:9a:0b:
                    92:e0:5f:17:df:e3:7b:31:fa:c7:be:9d:39:db:27:
                    45:0f:0d:e8:8c:87:a2:c0:05:e9:aa:c6:f6:1a:15:
                    24:7e:0e:f7:3f:81:0a:dc:22:8f:47:14:e5:51:b3:
                    c3:d2:44:86:7c:79:cf:7a:15:3d:bb:63:8e:4b:57:
                    7c:db:e1:9a:a8:b6:7b:8c:16:db:f8:84:0f:d1:81:
                    fe:71:a9:a0:d4:39:99:80:66:be:fb:88:82:ca:cc:
                    a3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9B:8B:1D:90:02:46:06:AA:6A:79:D0:AA:D5:93:83:2F:40:9C:56
            X509v3 Authority Key Identifier:
                keyid:4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/wZuLHZACRgaqannQqtWTgy9AnFY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.204.192.0/18
                  37.122.160.0/19
                  46.33.192.0/19
                  46.161.64.0/18
                  77.222.0.0/19
                  78.155.32.0/19
                  85.94.96.0/19
                  95.155.0.0/18
                  109.228.64.0/18
                  195.66.160.0/19
                  213.149.96.0/19
                IPv6:
                  2a00:fe80::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:83:67:e1:ec:fe:ba:9b:74:8f:05:8c:38:cc:72:16:85:53:
         1e:95:91:54:12:eb:86:70:4d:8d:5f:e6:dd:d1:65:28:8b:93:
         89:70:d5:1e:35:15:8b:5c:0d:72:47:df:e0:b6:86:a7:b1:bf:
         d3:41:da:b5:b5:d1:62:88:15:ee:8b:b8:22:24:72:38:0d:99:
         a8:db:b3:bd:52:a7:a9:41:5f:f7:24:c4:53:74:a5:3c:dd:26:
         dd:b0:2b:cd:54:1f:a1:83:81:5d:41:85:73:fb:f1:ed:66:af:
         a2:b7:e3:65:4c:21:89:61:8d:9d:f3:86:8e:79:0b:5a:40:e2:
         3a:d9:e9:83:18:34:08:e2:ec:5f:62:06:51:a6:57:29:e7:d3:
         65:9d:6f:f0:41:3c:0f:59:b0:1e:47:c1:02:8d:7f:19:96:ad:
         57:62:17:38:b0:71:cb:eb:32:7b:56:d5:16:cf:78:7a:61:cf:
         5b:a2:60:da:6b:11:13:57:3d:ca:aa:be:58:17:2f:97:28:e0:
         14:a1:c7:1f:48:dc:5f:e6:42:f9:f9:56:47:0b:62:03:ed:70:
         87:ee:f5:d1:48:1e:e8:74:13:73:9b:27:a6:8c:11:d7:1e:d1:
         b7:bd:14:48:5e:f2:97:bf:b5:b0:87:41:f7:2d:a7:fa:da:80:
         ca:a3:f8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net