Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/WEz0cGIk3YmjQ0yrdknf8JONckc.roa
File:                     WEz0cGIk3YmjQ0yrdknf8JONckc.roa (raw, json)
Hash identifier:          aWcb5jHZpWl1UXwytQ84UDQpza5mh8xr0Rn64szejaY=
Subject key identifier:   58:4C:F4:70:62:24:DD:89:A3:43:4C:AB:76:49:DF:F0:93:8D:72:47
Certificate issuer:       /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial:       0194221FCA857049CC8F40FAE242E692DCB5
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/WEz0cGIk3YmjQ0yrdknf8JONckc.roa
Signing time:             Wed 01 Jan 2025 13:48:16 +0000
ROA not before:           Wed 01 Jan 2025 13:48:16 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     61976
IP address blocks:        78.155.198.0/24 maxlen: 24
                          79.141.64.0/20 maxlen: 24
                          79.141.64.0/24 maxlen: 24
                          79.141.65.0/24 maxlen: 24
                          79.141.66.0/24 maxlen: 24
                          92.255.62.0/23 maxlen: 24
                          185.42.164.0/22 maxlen: 24
                          185.193.90.0/23 maxlen: 24
                          2a00:ab00:6000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:ca:85:70:49:cc:8f:40:fa:e2:42:e6:92:dc:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
        Validity
            Not Before: Jan  1 13:48:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=584cf4706224dd89a3434cab7649dff0938d7247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bc:5c:1d:ce:d8:6a:e0:a5:06:b7:86:e0:9e:
                    5e:46:4d:f2:c8:00:22:a9:40:f0:85:f2:ec:03:68:
                    0d:0e:2b:b7:d9:db:17:16:e7:81:46:ca:d9:cb:1c:
                    4d:21:6c:ce:b5:3f:ad:18:06:3c:e5:28:4d:29:b1:
                    e2:28:85:87:80:1a:66:1c:c1:d1:85:03:19:72:a1:
                    9a:b5:a3:5e:4e:7e:eb:34:7a:af:c2:b6:e1:31:60:
                    fa:32:fc:27:f1:10:6b:64:e2:c6:d8:6b:eb:2b:6e:
                    a7:64:86:b8:0c:19:2c:d9:c2:f1:d6:b0:ad:56:8c:
                    86:32:a4:45:a8:14:9e:b1:44:74:12:96:6c:0c:f0:
                    1b:0c:c7:82:11:dd:2e:1b:d5:0a:df:46:74:78:1b:
                    b4:9d:c1:c8:75:8e:9c:33:30:41:55:97:c4:b3:4b:
                    20:7a:af:40:ca:f0:10:aa:5c:0d:a3:21:85:48:e6:
                    81:39:0f:fc:f2:df:68:f0:f2:63:4b:10:a7:74:4d:
                    c3:7e:83:de:72:09:91:28:bf:b8:8c:86:33:04:3c:
                    91:c2:8f:f6:fb:60:66:09:d0:6f:5d:45:61:36:a4:
                    78:97:5e:1b:47:17:0e:41:b9:53:1e:49:c4:2c:3f:
                    6d:80:dc:6f:7a:84:1d:93:1a:df:7a:fa:df:d7:dd:
                    00:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4C:F4:70:62:24:DD:89:A3:43:4C:AB:76:49:DF:F0:93:8D:72:47
            X509v3 Authority Key Identifier:
                keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/WEz0cGIk3YmjQ0yrdknf8JONckc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.155.198.0/24
                  79.141.64.0/20
                  92.255.62.0/23
                  185.42.164.0/22
                  185.193.90.0/23
                IPv6:
                  2a00:ab00:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1a:4c:7d:85:1d:50:87:11:fb:cb:25:6d:a4:a4:e0:98:fd:ca:
         df:c3:6a:90:1d:32:a0:1d:49:c8:b8:ab:36:aa:6b:ab:b6:92:
         24:dd:ec:62:1e:f5:96:1b:df:6f:23:b1:79:8c:28:ed:2a:09:
         67:d8:f0:f2:c7:41:0f:92:08:e2:7c:c3:b3:a0:61:5f:f0:b9:
         3a:7c:55:a7:c7:c3:28:84:73:16:72:fa:47:80:2f:38:52:f1:
         16:19:7c:ab:59:9e:88:37:11:67:89:e8:7e:85:ee:94:da:b1:
         78:de:4f:7f:8c:06:1c:a4:a8:ba:5d:59:5a:1a:75:29:cf:8c:
         b8:77:57:71:64:81:47:29:bd:28:8f:43:d0:8a:77:92:3f:9d:
         1c:b8:8a:6d:fd:e9:dd:32:ac:0e:ac:56:cb:f2:c3:f7:02:24:
         77:f7:94:26:f1:df:6c:62:c9:2e:6e:03:ed:66:30:25:a2:66:
         fc:db:90:82:1f:b0:8d:35:3c:76:ec:64:ea:c6:a6:f7:6b:d1:
         4a:82:3d:6b:61:10:49:52:2d:f5:8c:3b:af:f3:f2:b8:19:fe:
         b2:a0:70:84:5c:64:3d:ca:83:50:87:6d:25:52:72:c2:b9:4f:
         13:1d:42:3a:df:b5:f4:32:04:21:db:54:fe:46:00:2e:7f:d4:
         66:de:83:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:49 2025 by rpki-client on console.sobornost.net