Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UYKGorFVrQQ8i9jc9XlzKg9XuYg.roa
File:                     UYKGorFVrQQ8i9jc9XlzKg9XuYg.roa (raw, json)
Hash identifier:          wdQgTRp2IJKdd6LAwYb+G4RVAbQqPEL/KAfpflh8kC0=
Subject key identifier:   51:82:86:A2:B1:55:AD:04:3C:8B:D8:DC:F5:79:73:2A:0F:57:B9:88
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       0196250EA8FEBB5DD2267FA1AE4269EDB7B5
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UYKGorFVrQQ8i9jc9XlzKg9XuYg.roa
Signing time:             Fri 11 Apr 2025 13:33:59 +0000
ROA not before:           Fri 11 Apr 2025 13:33:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     211557
IP address blocks:        93.113.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:25:0e:a8:fe:bb:5d:d2:26:7f:a1:ae:42:69:ed:b7:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Apr 11 13:33:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=518286a2b155ad043c8bd8dcf579732a0f57b988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6c:55:6a:a4:95:19:df:8b:1e:ef:9f:a9:e8:
                    79:c9:6e:4c:e3:02:37:dd:9c:f4:ac:e1:72:8b:1c:
                    94:2a:73:9a:d7:cc:15:17:db:a3:59:ed:78:e7:fb:
                    12:7a:66:6a:08:45:c0:37:9a:2f:d5:ef:d8:bb:33:
                    19:85:04:2b:12:c2:c6:6a:41:fd:3c:c6:7d:f6:79:
                    1a:e9:f5:fe:4c:4c:89:4b:96:0c:7b:dc:04:38:76:
                    ac:e4:93:d2:48:97:8e:b4:b1:87:49:78:82:18:4f:
                    64:dc:f2:44:8f:f8:ed:51:2f:8f:39:03:ce:15:19:
                    1b:32:32:08:89:bc:a0:a6:c1:fd:67:7a:e9:1a:f2:
                    32:9e:51:d3:cd:98:fa:d2:bb:fc:af:59:23:89:a4:
                    7b:a1:12:06:a0:c7:cc:dd:ca:c8:a9:49:22:38:7c:
                    34:6f:9a:21:93:75:db:7f:db:3f:89:c4:cb:7c:9e:
                    bb:5a:29:93:10:8d:3b:b6:4e:13:28:7c:25:b3:46:
                    fa:21:b4:81:36:2d:7a:01:91:a7:96:36:19:cf:82:
                    a6:9d:3c:c5:8c:0b:40:5c:2a:df:43:53:02:9f:be:
                    fd:d7:0b:fe:e9:89:7f:0e:c5:ea:7a:7a:7e:2a:ea:
                    2c:06:f9:db:ea:99:72:9b:3e:86:b2:d8:91:2f:c3:
                    c9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:82:86:A2:B1:55:AD:04:3C:8B:D8:DC:F5:79:73:2A:0F:57:B9:88
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UYKGorFVrQQ8i9jc9XlzKg9XuYg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:12:06:21:ed:92:83:3b:c6:b4:66:61:95:0e:ba:42:be:e3:
         26:a8:45:8c:06:93:49:d8:68:03:ff:e1:7b:02:77:7b:01:b2:
         4b:da:d5:69:69:0d:01:f2:7b:c6:f2:b0:3f:39:ad:e0:b0:a9:
         81:03:9f:54:24:d3:32:94:e4:46:39:00:b1:89:a2:2c:55:86:
         8a:fe:a3:8a:85:c1:0a:93:e2:df:c5:3d:46:46:ff:39:49:ae:
         41:81:62:f4:a3:10:be:cf:7c:e8:86:d3:b3:f4:24:1f:d0:c8:
         ec:84:63:fc:bf:b1:fe:ed:00:81:61:6b:53:1a:67:47:af:c1:
         68:c7:05:72:a3:30:19:db:77:6c:1d:b9:b2:3f:0b:f5:8e:a7:
         5d:0f:8e:60:f1:53:4a:2b:a1:c9:08:7c:6f:f1:2f:12:35:04:
         1e:34:10:26:dd:f9:77:6f:3c:10:23:0d:53:bc:ca:07:6b:2e:
         00:b9:9b:b5:23:58:4f:1c:d1:f4:9e:0d:d5:ad:9c:94:cf:49:
         b2:1b:ed:49:49:13:16:fc:ab:3a:6c:b1:75:de:d2:db:ce:22:
         ce:8a:fd:1c:fa:09:de:fb:84:64:51:50:cd:b2:c2:c3:6e:9b:
         9a:dc:2c:95:90:bc:98:7f:f3:79:84:72:9e:bf:de:af:10:6a:
         e2:4a:75:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net