Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/1FlLRIIYGSU2lD9s6BElZ_82OMk.roa
File:                     1FlLRIIYGSU2lD9s6BElZ_82OMk.roa (raw, json)
Hash identifier:          Q5lYF3Ib2nrKiWVSyeewvimy0dKCeaCp7d/phtTC4tU=
Subject key identifier:   D4:59:4B:44:82:18:19:25:36:94:3F:6C:E8:11:25:67:FF:36:38:C9
Certificate issuer:       /CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
Certificate serial:       019420D6375A0E182906FEFBC47FAF28C6A5
Authority key identifier: 5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/1FlLRIIYGSU2lD9s6BElZ_82OMk.roa
Signing time:             Wed 01 Jan 2025 07:48:17 +0000
ROA not before:           Wed 01 Jan 2025 07:48:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     62139
IP address blocks:        185.46.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:37:5a:0e:18:29:06:fe:fb:c4:7f:af:28:c6:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
        Validity
            Not Before: Jan  1 07:48:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d4594b448218192536943f6ce8112567ff3638c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c8:50:fb:97:e1:70:85:17:b7:cc:1b:bc:f3:
                    fe:eb:9c:70:0d:42:be:fc:a3:54:12:6f:15:00:9c:
                    df:94:66:13:d0:8e:fa:84:d3:22:74:ff:9c:eb:68:
                    82:b2:9c:a4:af:4c:35:d7:6e:88:ac:0d:ae:52:a2:
                    b6:9f:bd:5d:38:b3:56:41:51:88:48:a3:d3:e7:28:
                    61:eb:7f:57:20:c3:f3:a8:98:1a:94:5a:4d:5d:96:
                    8a:82:75:c1:2e:df:9a:cb:1a:74:4d:07:58:be:8b:
                    76:54:62:d9:09:64:79:74:5b:b5:02:cf:08:93:0d:
                    7e:f1:81:5b:f4:69:6a:fe:86:66:77:74:52:a6:54:
                    09:4b:e5:f8:45:9c:e8:04:43:d0:8d:eb:41:23:d1:
                    9d:ff:c3:46:18:8f:fa:74:6b:eb:a2:07:4d:95:4b:
                    57:a4:dc:e0:e1:85:31:0f:0c:0f:09:42:5b:f4:56:
                    90:48:31:e3:b3:32:73:c0:78:17:0a:1d:3c:a6:92:
                    ce:ca:e0:2d:e4:33:da:55:09:63:62:78:33:19:05:
                    5e:6c:c1:67:74:66:77:d8:1d:b3:aa:c6:3b:ab:03:
                    1b:7e:d3:e7:b1:6e:8f:06:0c:51:5a:88:e9:0a:75:
                    ae:2d:83:15:bc:a0:94:c9:70:c9:ae:f4:2a:fa:d8:
                    81:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:59:4B:44:82:18:19:25:36:94:3F:6C:E8:11:25:67:FF:36:38:C9
            X509v3 Authority Key Identifier:
                keyid:5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/1FlLRIIYGSU2lD9s6BElZ_82OMk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.46.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:52:94:93:63:aa:14:d0:95:f0:52:c3:77:b1:d4:64:d3:5a:
         7c:73:36:d7:3d:95:bc:9a:cf:4c:7a:bd:66:c7:85:5b:23:a8:
         d9:ea:e8:7d:11:38:ad:0f:ae:94:99:e3:59:d3:21:92:ef:f3:
         3e:77:4f:f7:03:1b:59:c0:8b:df:a5:2e:18:bb:e1:73:53:88:
         f3:a1:98:02:6f:50:a0:b4:a0:fb:91:45:39:09:b8:77:f3:63:
         a4:e5:4d:7f:a6:3a:b4:6d:ad:8b:3a:09:2e:b6:07:1e:de:09:
         e7:aa:ae:d1:cc:2b:c7:25:de:8e:76:df:dd:f6:85:38:5a:b3:
         71:8c:27:fd:7c:a8:6e:70:3b:34:7e:c4:e2:46:c8:d0:f1:b7:
         43:a4:34:07:52:62:fe:e9:e3:e1:ae:fc:f4:8a:47:36:df:74:
         15:73:c5:7f:1f:44:bc:5b:48:86:fb:ac:1a:44:24:05:84:86:
         08:46:a0:74:7c:17:55:7a:5a:f8:9e:8a:4c:7c:5d:6c:30:e6:
         9b:93:d4:dd:0f:ac:34:e3:35:54:23:22:8a:df:66:e0:28:d6:
         aa:e7:52:44:a9:fb:0c:40:d6:7c:c8:e4:e7:f3:fe:a1:c2:51:
         98:fc:89:e9:50:c8:a0:f5:4b:86:60:9c:38:ee:9f:94:59:ce:
         fe:b2:04:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:45 2025 by rpki-client on console.sobornost.net