Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/1-APoX9Oey6I0mLUyJzmQ0SOKJJw.roa
File:                     1-APoX9Oey6I0mLUyJzmQ0SOKJJw.roa (raw, json)
Hash identifier:          7lKGUS9YGkL6te+MMf3+PUlesMDobhRD6uU3QiAvoFk=
Subject key identifier:   F8:03:E8:5F:D3:9E:CB:A2:34:98:B5:32:27:39:90:D1:23:8A:24:9C
Certificate issuer:       /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Certificate serial:       01961A8D5488D9F99B0DF5057EB18CD51B10
Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/1-APoX9Oey6I0mLUyJzmQ0SOKJJw.roa
Signing time:             Wed 09 Apr 2025 12:36:31 +0000
ROA not before:           Wed 09 Apr 2025 12:36:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     48817
IP address blocks:        80.244.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1a:8d:54:88:d9:f9:9b:0d:f5:05:7e:b1:8c:d5:1b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
        Validity
            Not Before: Apr  9 12:36:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f803e85fd39ecba23498b532273990d1238a249c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f7:fb:39:2f:28:1b:99:eb:a3:28:7d:4b:f1:
                    c3:c0:bb:7e:48:b3:24:a1:c3:45:3c:ee:70:19:95:
                    98:ab:fe:4d:d0:b1:d5:8d:cc:9a:13:9a:c5:5d:8b:
                    19:ed:bc:fc:39:86:9e:73:2a:f5:60:76:1f:10:21:
                    4b:8b:a6:4e:e3:c3:0b:4b:0c:6c:14:48:01:ba:23:
                    6f:74:5e:8f:6e:81:db:b6:cb:8f:50:84:27:6c:f8:
                    95:f1:b6:62:36:d6:d1:09:f6:06:77:cf:bc:01:1b:
                    04:f7:74:cb:69:e6:85:a5:37:5d:c2:37:95:5b:af:
                    78:62:a4:39:d1:08:8e:44:7a:c3:6a:29:77:41:f6:
                    0a:41:14:2d:a7:86:71:4c:90:1e:45:a5:97:a4:9d:
                    9b:f1:fe:54:87:50:c3:6c:37:07:a2:b3:96:08:58:
                    15:92:3b:d9:d5:c4:a0:01:54:32:01:1f:d4:e0:2c:
                    c0:5d:13:17:fb:4f:3c:ba:d8:3d:6f:e5:32:d1:89:
                    85:94:81:45:b8:33:39:4b:59:08:9e:66:0b:7a:f4:
                    87:71:d2:7f:06:a7:c3:55:cb:65:a7:81:13:9c:5c:
                    08:61:20:81:e0:de:f0:33:f6:3b:0b:e0:3d:a4:d9:
                    47:45:b8:77:c1:6f:23:ee:93:a7:52:e9:1f:7e:a4:
                    b0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:03:E8:5F:D3:9E:CB:A2:34:98:B5:32:27:39:90:D1:23:8A:24:9C
            X509v3 Authority Key Identifier:
                keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/1-APoX9Oey6I0mLUyJzmQ0SOKJJw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.244.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:4c:94:ce:c8:f3:52:d5:81:24:e1:b7:91:5e:15:8c:8c:48:
         7a:d8:0f:9e:75:05:84:34:3c:eb:7c:58:a1:87:9d:fe:49:99:
         0e:1b:5c:f2:d7:b3:90:95:44:a2:94:42:5d:8c:9e:1e:3b:de:
         fa:07:0b:c3:64:ff:38:99:4d:f1:b4:58:e5:53:f9:f8:5f:4d:
         dd:42:fb:5d:41:dd:b3:6c:c3:b3:8f:3a:88:e3:86:7f:f6:73:
         97:8c:e8:a0:98:76:98:c7:63:7b:db:ce:56:a9:d4:e4:bd:2a:
         9a:56:39:95:09:fc:50:90:f8:84:4d:0b:bd:73:00:b1:5e:db:
         35:eb:ba:1b:ce:f1:98:e5:c2:e8:1a:07:f6:f6:fd:e8:2e:b3:
         46:01:65:b9:4a:69:ef:e2:61:6e:31:5c:cf:dc:3b:7d:67:0b:
         0d:dc:d0:76:b2:68:8d:55:88:bd:4a:ee:99:73:4c:ea:b6:da:
         a9:a3:08:90:20:2e:2e:e5:bc:68:90:cc:fb:0f:47:c2:fa:f0:
         21:e8:40:de:54:5e:c1:b5:18:42:20:15:7c:c2:4f:a3:57:2e:
         0a:4c:76:01:9a:e9:4d:e8:9e:4f:aa:8b:05:b5:e8:28:0f:ca:
         ae:39:00:55:9d:09:92:4b:78:ac:88:56:0f:71:86:05:59:7c:
         c7:c0:84:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net