Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/45ZEV-2i1vRdy90rokjRcQ4xSe4.roa
File:                     45ZEV-2i1vRdy90rokjRcQ4xSe4.roa (raw, json)
Hash identifier:          ZhVSW3BK8XEZVGJDvUY2YgC4tkCCCyYXhiZwWu4Zbno=
Subject key identifier:   E3:96:44:57:ED:A2:D6:F4:5D:CB:DD:2B:A2:48:D1:71:0E:31:49:EE
Certificate issuer:       /CN=5729626fa91313d56e4d7645572ff58061fd4f8c
Certificate serial:       019425FBFA3420C05FB4E8D5886371FC8AF9
Authority key identifier: 57:29:62:6F:A9:13:13:D5:6E:4D:76:45:57:2F:F5:80:61:FD:4F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vylib6kTE9VuTXZFVy_1gGH9T4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/45ZEV-2i1vRdy90rokjRcQ4xSe4.roa
Signing time:             Thu 02 Jan 2025 07:47:38 +0000
ROA not before:           Thu 02 Jan 2025 07:47:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     24956
IP address blocks:        2001:67c:1978::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fb:fa:34:20:c0:5f:b4:e8:d5:88:63:71:fc:8a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5729626fa91313d56e4d7645572ff58061fd4f8c
        Validity
            Not Before: Jan  2 07:47:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e3964457eda2d6f45dcbdd2ba248d1710e3149ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:34:d3:77:99:c6:d9:66:e6:62:1d:7b:f6:5e:
                    ce:ba:3d:64:6a:0a:a1:e1:9d:39:49:9b:e9:b6:89:
                    3f:95:06:15:a8:5b:ac:05:03:d2:e9:89:79:e9:f9:
                    63:c0:3d:1e:81:ef:57:14:8a:66:96:8a:0f:59:fc:
                    0d:16:ff:a9:20:a2:05:ba:03:31:61:10:12:f8:23:
                    1e:36:31:98:49:09:c9:cc:9e:7b:72:72:85:94:2a:
                    ef:08:2e:f5:ab:dc:6a:ed:1d:5b:06:19:ec:ac:e2:
                    84:0e:8d:d4:80:61:3d:ed:e0:13:4b:28:a7:af:9d:
                    f0:29:bb:36:92:7e:be:ae:0d:9e:43:7f:fe:20:75:
                    84:b0:a3:38:a2:3d:57:09:12:93:87:06:aa:08:e3:
                    89:51:8a:8d:61:e9:fd:a7:8f:cd:69:4e:03:ae:76:
                    78:52:ea:ac:62:f1:34:97:ca:85:52:4f:6e:f7:72:
                    8e:74:a0:9e:ee:9d:76:af:6d:12:9e:4e:a9:5e:75:
                    35:ab:b1:a5:79:ed:73:e6:e9:81:ca:0c:a3:d8:2b:
                    28:2d:22:98:f4:ff:4c:a0:44:ff:a6:a1:78:12:49:
                    ab:f2:78:99:18:87:2c:73:f9:ef:46:31:09:16:7c:
                    5e:91:1e:87:5c:17:c0:27:6f:6a:f8:06:34:3d:c1:
                    7e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:96:44:57:ED:A2:D6:F4:5D:CB:DD:2B:A2:48:D1:71:0E:31:49:EE
            X509v3 Authority Key Identifier:
                keyid:57:29:62:6F:A9:13:13:D5:6E:4D:76:45:57:2F:F5:80:61:FD:4F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vylib6kTE9VuTXZFVy_1gGH9T4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/45ZEV-2i1vRdy90rokjRcQ4xSe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/Vylib6kTE9VuTXZFVy_1gGH9T4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1978::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:ce:27:a0:7a:23:fa:6f:c5:ab:28:90:c0:9c:35:00:64:70:
         65:eb:c1:6b:70:02:08:35:d0:4f:9c:b2:db:be:d8:9d:07:9f:
         e1:18:a4:e9:3e:6f:38:71:c8:de:78:7b:7d:5c:d0:b5:fa:07:
         a9:5d:79:d4:63:68:b0:93:1c:e6:06:9e:c0:41:ac:3e:59:1f:
         28:3b:b4:ad:06:10:8b:1c:1c:d6:36:f5:9d:13:98:a8:7f:35:
         87:6d:1a:c6:00:19:4b:8a:18:1f:eb:95:44:d8:41:52:af:1e:
         fd:4e:3e:56:c1:82:f9:3b:b4:ca:8e:fe:83:96:31:cf:1c:a2:
         45:ae:a4:d2:e7:d5:61:58:6e:dd:61:7d:66:eb:e9:07:b9:f8:
         62:be:13:fa:52:46:7d:e4:7f:97:0f:38:26:c0:2a:9f:ec:f2:
         d3:79:21:f4:47:64:af:80:d8:d9:e0:6a:4a:d6:10:bc:ec:d7:
         3b:7b:1f:21:53:8f:10:8e:46:73:ab:00:08:8c:bd:60:c8:6f:
         bc:c3:b0:70:1a:db:5b:43:73:cd:e3:c7:91:88:b2:d2:db:67:
         49:49:0c:17:ba:c7:25:88:a6:eb:0e:66:97:eb:bb:71:de:87:
         71:f5:50:62:8f:eb:e6:b6:c8:d4:42:6e:3f:8b:60:59:54:83:
         af:57:73:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:33 2025 by rpki-client on console.sobornost.net