Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/bVPZcxyyuoSw5oO9YToFQkVC9HE.roa
File:                     bVPZcxyyuoSw5oO9YToFQkVC9HE.roa (raw, json)
Hash identifier:          PMh8VdKlUCXwqFCEJ+zfZN1ZK1DFnhbrgEIJ3TSYDdE=
Subject key identifier:   6D:53:D9:73:1C:B2:BA:84:B0:E6:83:BD:61:3A:05:42:45:42:F4:71
Certificate issuer:       /CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Certificate serial:       01941FFA83FF55669A740ACA153E14A6671E
Authority key identifier: 15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/bVPZcxyyuoSw5oO9YToFQkVC9HE.roa
Signing time:             Wed 01 Jan 2025 03:48:18 +0000
ROA not before:           Wed 01 Jan 2025 03:48:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8978
IP address blocks:        193.43.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:83:ff:55:66:9a:74:0a:ca:15:3e:14:a6:67:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
        Validity
            Not Before: Jan  1 03:48:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6d53d9731cb2ba84b0e683bd613a05424542f471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:52:bc:90:42:87:05:a5:b9:b1:c3:6a:38:ba:
                    72:94:4d:87:b1:62:d3:50:eb:c3:0b:d4:f9:51:5b:
                    75:2d:77:fe:49:e9:ee:5f:0e:9a:66:49:76:7f:5e:
                    59:3a:4d:cf:13:87:1d:41:01:fd:46:08:71:07:2d:
                    a4:ad:ad:f6:dd:d7:fe:e2:61:b1:38:8c:27:67:6d:
                    b5:a1:41:de:89:2e:1a:4c:57:67:a8:40:60:9a:d8:
                    58:fa:93:53:85:0d:96:df:b1:8d:06:22:f4:72:c7:
                    a1:fd:c6:3c:21:d5:b0:90:32:a1:ae:f0:88:33:70:
                    f3:f2:80:ac:7a:f9:b5:da:e5:bf:fe:83:f6:9e:96:
                    5b:f4:a3:83:ea:02:40:52:24:ce:14:b5:55:00:b1:
                    8a:18:95:bc:59:8f:57:dc:7a:57:a7:ce:49:9e:8c:
                    83:c5:98:ff:f3:77:3e:09:30:00:15:03:55:e0:f4:
                    7a:52:af:19:74:cd:ca:d9:8d:b4:1c:53:74:8b:c7:
                    bd:d5:f6:0a:16:02:f0:26:47:82:3a:79:5f:36:98:
                    7c:6c:fc:61:f0:4b:f1:6d:e2:94:e3:33:16:4b:60:
                    45:ba:8a:f4:f4:32:a5:d3:4d:16:f3:70:70:60:05:
                    98:1e:1b:a9:4a:f4:42:e3:ea:b3:35:99:23:dc:fa:
                    59:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:53:D9:73:1C:B2:BA:84:B0:E6:83:BD:61:3A:05:42:45:42:F4:71
            X509v3 Authority Key Identifier:
                keyid:15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/bVPZcxyyuoSw5oO9YToFQkVC9HE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.43.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:90:a1:c9:68:ef:c0:ca:a0:33:13:08:32:b7:3f:6e:79:7e:
         27:31:76:4a:0f:f6:4d:95:fb:13:12:b9:ae:36:7b:e9:17:91:
         dd:01:7a:9d:2b:e3:54:25:30:31:da:bc:7c:49:58:b0:ab:07:
         99:10:a1:c0:aa:8b:0e:17:9e:91:e5:98:e8:75:66:63:4e:5d:
         c3:75:57:f5:6c:e9:f5:62:e3:1a:9f:1b:41:92:40:48:20:4f:
         e1:c7:b2:b5:23:be:26:b6:f7:2c:61:f1:5c:b6:70:77:0f:57:
         fd:6d:3a:4e:52:ea:ac:e3:c8:30:ea:a7:9e:63:4d:a7:0a:a9:
         d1:00:0d:95:96:98:15:08:ad:03:a0:69:6b:8f:38:05:ad:cc:
         43:6a:8f:59:8c:67:0f:e5:f8:66:73:eb:38:3f:9e:3c:8a:3a:
         87:5e:fe:13:53:04:fd:59:ae:0f:bd:a7:1a:ee:29:4f:a7:1e:
         6b:cf:a2:4b:3d:c7:69:7e:65:4d:05:c7:a1:69:17:25:98:2a:
         52:d9:a3:b0:17:7c:e8:81:7e:31:ee:8a:5a:63:f5:0d:f6:a4:
         bc:02:9c:38:22:9e:28:ae:ec:19:f3:20:4e:1b:9d:a0:48:2f:
         93:69:6b:76:f5:1d:3c:64:ea:c5:1d:3f:9a:8e:4a:e5:cb:27:
         f5:9b:37:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:33 2025 by rpki-client on console.sobornost.net