Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/Vsn1bByq5mqvMkumktSPkugU5Jk.roa
File:                     Vsn1bByq5mqvMkumktSPkugU5Jk.roa (raw, json)
Hash identifier:          i8qenFMaLj7uGhe9HJrFmtK1fpNEx6rT8M+YhW9Zvig=
Subject key identifier:   56:C9:F5:6C:1C:AA:E6:6A:AF:32:4B:A6:92:D4:8F:92:E8:14:E4:99
Certificate issuer:       /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial:       019427483B7B7B9571C738346482FF95D661
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/Vsn1bByq5mqvMkumktSPkugU5Jk.roa
Signing time:             Thu 02 Jan 2025 13:50:32 +0000
ROA not before:           Thu 02 Jan 2025 13:50:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15625
IP address blocks:        145.221.0.0/16 maxlen: 16
                          145.221.0.0/17 maxlen: 17
                          145.221.36.0/24 maxlen: 24
                          145.221.37.0/24 maxlen: 24
                          145.221.38.0/24 maxlen: 24
                          145.221.39.0/24 maxlen: 24
                          145.221.40.0/24 maxlen: 24
                          145.221.41.0/24 maxlen: 24
                          145.221.42.0/24 maxlen: 24
                          145.221.43.0/24 maxlen: 24
                          145.221.92.0/24 maxlen: 24
                          145.221.99.0/24 maxlen: 24
                          145.221.128.0/17 maxlen: 17
                          145.221.176.0/24 maxlen: 24
                          145.221.177.0/24 maxlen: 24
                          145.221.178.0/24 maxlen: 24
                          145.221.179.0/24 maxlen: 24
                          145.221.180.0/24 maxlen: 24
                          145.221.181.0/24 maxlen: 24
                          145.221.182.0/24 maxlen: 24
                          145.221.183.0/24 maxlen: 24
                          145.221.184.0/24 maxlen: 24
                          145.221.185.0/24 maxlen: 24
                          145.221.186.0/24 maxlen: 24
                          145.221.188.0/24 maxlen: 24
                          145.221.189.0/24 maxlen: 24
                          145.221.190.0/24 maxlen: 24
                          145.221.193.0/24 maxlen: 24
                          145.221.208.0/24 maxlen: 24
                          145.221.209.0/24 maxlen: 24
                          145.221.210.0/24 maxlen: 24
                          145.221.211.0/24 maxlen: 24
                          145.221.212.0/24 maxlen: 24
                          145.221.213.0/24 maxlen: 24
                          145.221.214.0/24 maxlen: 24
                          145.221.215.0/24 maxlen: 24
                          145.221.216.0/24 maxlen: 24
                          145.221.217.0/24 maxlen: 24
                          145.221.219.0/24 maxlen: 24
                          145.221.220.0/24 maxlen: 24
                          145.221.221.0/24 maxlen: 24
                          145.221.222.0/24 maxlen: 24
                          145.221.252.0/24 maxlen: 24
                          145.221.253.0/24 maxlen: 24
                          145.221.254.0/24 maxlen: 24
                          145.221.255.0/24 maxlen: 24
                          156.114.128.0/18 maxlen: 18
                          156.114.128.0/19 maxlen: 19
                          156.114.128.0/24 maxlen: 24
                          156.114.129.0/24 maxlen: 24
                          156.114.130.0/24 maxlen: 24
                          156.114.131.0/24 maxlen: 24
                          156.114.132.0/24 maxlen: 24
                          156.114.133.0/24 maxlen: 24
                          156.114.153.0/24 maxlen: 24
                          156.114.154.0/24 maxlen: 24
                          156.114.155.0/24 maxlen: 24
                          156.114.160.0/19 maxlen: 19
                          156.114.160.0/24 maxlen: 24
                          156.114.161.0/24 maxlen: 24
                          156.114.162.0/24 maxlen: 24
                          156.114.163.0/24 maxlen: 24
                          156.114.164.0/24 maxlen: 24
                          156.114.165.0/24 maxlen: 24
                          156.114.185.0/24 maxlen: 24
                          156.114.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:3b:7b:7b:95:71:c7:38:34:64:82:ff:95:d6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
        Validity
            Not Before: Jan  2 13:50:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=56c9f56c1caae66aaf324ba692d48f92e814e499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:17:ca:f9:88:b0:8c:8f:a2:dc:3e:cb:05:08:
                    d7:0d:5f:c8:dc:e2:12:ce:c2:a2:c6:67:94:aa:a9:
                    0b:e3:94:e2:a1:ca:0d:66:c9:40:07:21:bd:ce:28:
                    29:dc:a9:5f:bd:81:c7:e1:a9:87:a8:0f:13:64:e4:
                    78:7a:27:e7:8d:a6:ed:f0:25:64:bf:e8:4b:aa:d6:
                    f0:76:ac:87:85:05:dd:d3:9f:8b:8e:30:5c:3a:27:
                    7e:58:5f:c3:df:9d:4d:a1:c7:c4:8e:f3:b2:50:23:
                    e5:f9:c0:50:fc:b0:71:96:9c:8a:48:44:aa:d6:ac:
                    81:af:2d:fe:a9:38:94:20:8d:53:49:f4:ca:aa:ff:
                    71:97:5e:bf:7a:7e:cc:d6:14:35:cf:0a:d5:7c:db:
                    7d:c1:ae:4a:12:f1:84:79:6f:99:3c:40:f4:73:ff:
                    40:d0:52:a9:8c:59:11:e3:b7:44:73:a4:b8:46:34:
                    b4:d7:50:02:a4:3d:9d:28:90:d7:3d:d9:c1:77:59:
                    f4:4f:22:f8:5e:32:75:09:9a:f4:7e:23:6a:20:f5:
                    44:f5:73:f4:97:04:96:88:98:dc:cd:ed:ad:87:96:
                    1a:75:e4:1f:15:93:71:d5:30:6b:ef:c5:d9:f7:bb:
                    4d:d8:bb:09:14:f4:6e:a1:05:ce:da:9d:e9:78:ca:
                    54:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C9:F5:6C:1C:AA:E6:6A:AF:32:4B:A6:92:D4:8F:92:E8:14:E4:99
            X509v3 Authority Key Identifier:
                keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/Vsn1bByq5mqvMkumktSPkugU5Jk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.221.0.0/16
                  156.114.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7b:1f:11:8c:12:62:d9:09:9e:e9:6f:55:c7:fc:3f:27:b3:1e:
         76:ba:0b:c8:01:e8:45:1c:91:db:fe:99:88:b6:18:7c:60:9f:
         ee:e2:8b:49:b3:16:de:54:97:69:55:06:ec:b2:30:f8:cf:b7:
         7d:6a:df:e4:49:e0:fa:5b:f1:d7:db:92:f8:37:fb:78:29:cf:
         5e:47:c4:fd:b9:e9:1f:a7:af:31:fb:ab:86:6f:5d:ad:37:08:
         88:6a:4e:ed:3f:a4:5c:28:02:40:61:05:9c:df:11:42:f9:30:
         53:03:e2:27:c6:fa:9c:b1:ea:e3:0d:41:1e:d8:e7:ab:9d:a9:
         6b:4f:c6:43:4c:d4:af:a0:a9:88:ff:94:0a:01:02:2b:dd:82:
         ff:fe:42:23:1d:7d:ca:01:5f:47:58:50:92:70:76:d3:73:a8:
         1d:45:c9:37:45:e7:7f:d4:d9:e6:e1:3e:0b:05:7c:81:69:d2:
         71:1f:44:bd:b7:d3:23:d4:6d:ed:d3:9e:5b:2f:58:32:04:d4:
         09:9c:aa:4a:6d:2a:93:56:b6:7b:da:2b:33:10:db:25:c7:6c:
         de:84:5e:ce:f3:c0:9d:95:e0:e1:1e:5f:c4:e6:a3:34:f3:42:
         38:7c:3c:b3:96:4b:bc:99:b5:32:95:66:a7:e4:39:50:88:9f:
         91:a7:54:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:49:43 2025 by rpki-client on console.sobornost.net