Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/vHnKRxUajbywNAqL6nOx-jDQRUM.roa
File:                     vHnKRxUajbywNAqL6nOx-jDQRUM.roa (raw, json)
Hash identifier:          9L1D0lkWg2QABU5Zj6IAqZoeAKA6O0lNRb8Xz0hsQns=
Subject key identifier:   BC:79:CA:47:15:1A:8D:BC:B0:34:0A:8B:EA:73:B1:FA:30:D0:45:43
Certificate issuer:       /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Certificate serial:       0194266A177BE0710FD75E845F2BE21AF2CE
Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/vHnKRxUajbywNAqL6nOx-jDQRUM.roa
Signing time:             Thu 02 Jan 2025 09:47:54 +0000
ROA not before:           Thu 02 Jan 2025 09:47:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207509
IP address blocks:        185.25.94.0/24 maxlen: 24
                          2a0c:95c0::/29 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6a:17:7b:e0:71:0f:d7:5e:84:5f:2b:e2:1a:f2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
        Validity
            Not Before: Jan  2 09:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bc79ca47151a8dbcb0340a8bea73b1fa30d04543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ef:52:9d:c2:d6:71:7e:05:da:ea:2c:8b:a9:
                    55:39:82:28:3f:c0:cc:8a:b6:a3:64:f8:50:1b:1f:
                    a6:3f:46:73:ad:e2:9f:bb:7a:bb:57:1e:c1:64:d0:
                    bb:d0:c8:15:72:40:17:4a:b3:c1:33:4e:3d:71:ac:
                    83:fe:c4:2e:b3:28:6c:99:34:9f:a1:bb:3a:29:b1:
                    d0:64:7c:7b:a1:71:77:6c:ef:44:18:4c:bf:6f:1a:
                    92:3f:28:fe:c6:e5:e2:ab:84:0f:88:a9:03:b1:45:
                    47:99:e5:6a:f3:1c:20:89:7d:63:21:09:ce:fa:e6:
                    d6:7c:1e:73:6e:f5:3c:ab:62:24:71:c9:a7:74:32:
                    b4:d5:88:d0:9f:6e:06:cf:c0:eb:c8:0b:b0:31:c3:
                    e8:47:43:93:72:55:a8:7a:be:af:7b:c6:26:f2:1b:
                    76:cd:00:11:02:6c:cd:a1:bd:57:50:32:79:ff:51:
                    85:80:7a:f6:42:bb:45:fd:95:70:70:a5:61:26:47:
                    4c:eb:09:9d:44:79:37:0a:22:9c:2c:0d:94:bd:f7:
                    3f:92:b9:74:3c:12:73:b8:24:b7:57:5f:2e:08:a1:
                    16:e6:6e:43:0d:f0:f1:ee:4e:66:d1:e0:ae:b6:07:
                    0d:37:27:61:71:5a:2c:85:44:ab:43:81:2a:64:a2:
                    92:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:79:CA:47:15:1A:8D:BC:B0:34:0A:8B:EA:73:B1:FA:30:D0:45:43
            X509v3 Authority Key Identifier:
                keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/vHnKRxUajbywNAqL6nOx-jDQRUM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.25.94.0/24
                IPv6:
                  2a0c:95c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         62:46:33:a9:7f:05:0a:e8:d9:ec:25:50:bd:75:ad:96:a2:99:
         d9:f7:cf:ca:ec:a8:c1:3e:6a:73:20:ae:f8:c9:50:c4:ec:7d:
         da:1f:a4:67:ad:98:78:90:d6:22:0c:f1:4c:d3:cf:da:9e:35:
         db:5b:41:1a:7b:9b:55:1f:bc:dc:6c:ca:a0:5f:31:5c:4d:6d:
         26:a7:c2:46:cd:f8:11:95:c5:5a:2a:81:0b:8f:89:14:22:19:
         97:d9:c7:c6:ab:c4:a3:17:6b:48:fb:c8:a8:74:1a:cf:9d:2f:
         2d:6f:a4:66:8f:19:f7:aa:c6:e0:ce:a9:65:2a:a7:f9:12:d0:
         8c:98:db:e1:1b:d1:45:48:c9:26:18:9b:83:09:14:ec:0f:c4:
         0c:0f:af:b3:5c:99:20:da:24:60:c7:84:b7:e0:8f:f3:31:be:
         c3:21:50:16:e3:92:8e:2c:58:cd:9d:34:34:75:9c:b5:48:a3:
         ea:d2:ee:40:b8:fe:d3:72:d6:70:73:33:89:3a:44:10:38:bb:
         64:f1:7a:ca:49:95:05:ee:51:50:ed:8b:35:fe:46:5b:37:ae:
         1d:65:b5:cf:05:08:f7:3e:df:f8:4e:12:7e:c4:13:64:c7:28:
         58:85:eb:93:d4:14:06:e2:11:70:45:40:c0:ef:e5:f8:01:32:
         8d:20:de:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----