Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/GPg7gW4F10Mg48LJUDuBF4feyiE.roa
File:                     GPg7gW4F10Mg48LJUDuBF4feyiE.roa (raw, json)
Hash identifier:          A3ef/wOMuM0LcEbNMw0qeeXZ7Q/nJI3dkjZ6zDIHtDo=
Subject key identifier:   18:F8:3B:81:6E:05:D7:43:20:E3:C2:C9:50:3B:81:17:87:DE:CA:21
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       01942369A4F1006E490DA31D480573D6753A
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/GPg7gW4F10Mg48LJUDuBF4feyiE.roa
Signing time:             Wed 01 Jan 2025 19:48:33 +0000
ROA not before:           Wed 01 Jan 2025 19:48:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     57060
IP address blocks:        86.105.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:a4:f1:00:6e:49:0d:a3:1d:48:05:73:d6:75:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: Jan  1 19:48:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=18f83b816e05d74320e3c2c9503b811787deca21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:60:ac:a6:7f:b1:5b:72:f2:2b:c9:b6:af:97:
                    64:dc:ab:23:e7:63:0f:4d:6e:6b:ed:f4:99:2b:2f:
                    48:16:96:46:25:e5:68:e3:b6:13:71:25:96:e3:05:
                    21:9f:d6:11:e3:7a:cc:69:c7:a4:ae:b5:a3:53:14:
                    22:53:02:79:6a:74:69:5a:60:bc:08:0a:04:47:c3:
                    8e:ec:ac:85:e5:e7:ef:aa:40:19:3f:67:a8:23:89:
                    c1:ac:f5:c8:aa:f4:83:e3:61:fa:51:8e:4b:a8:a2:
                    35:ba:c3:af:40:41:84:97:9f:8a:b4:ba:d9:03:15:
                    ea:72:5d:f5:41:ef:18:5f:36:bb:63:af:dd:df:97:
                    0a:c0:ab:fc:66:e8:5c:e2:b9:54:60:20:59:c3:3f:
                    69:c9:56:e6:43:0e:82:73:b1:e7:8f:e0:75:a3:61:
                    85:35:ec:9d:53:f8:36:b3:32:87:4f:12:4d:e8:47:
                    22:50:cf:bb:ff:8f:4b:7c:b3:4b:89:8a:a2:3e:eb:
                    f4:58:d1:ca:b5:d7:f8:39:68:b4:94:e1:5f:ff:68:
                    3d:b0:d5:82:54:03:eb:15:2d:14:3c:75:12:d2:71:
                    b8:f2:2f:65:14:84:79:76:d3:b5:20:a5:80:b3:fd:
                    dc:62:f1:ac:c8:b2:d3:22:37:a6:70:dc:45:e7:84:
                    80:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F8:3B:81:6E:05:D7:43:20:E3:C2:C9:50:3B:81:17:87:DE:CA:21
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/GPg7gW4F10Mg48LJUDuBF4feyiE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.105.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:50:dc:fe:ea:37:17:bf:4f:5e:b9:b5:5d:16:76:47:6e:1a:
         45:e2:01:9b:d7:3b:5f:aa:67:b0:6e:4b:46:26:e7:f4:78:dc:
         22:3c:cd:7f:d6:88:e8:8e:bb:86:b3:e4:cf:05:e5:5f:f0:da:
         1d:4c:05:06:4b:e7:bc:53:44:06:88:20:82:c1:c8:4a:0a:f8:
         95:ab:d0:aa:44:e1:90:dc:12:1d:f3:bf:e2:20:c4:b9:9e:ad:
         62:81:42:10:95:d4:d9:07:db:b3:9c:37:a6:8e:fa:f5:0f:d9:
         89:f9:a2:6e:b5:13:c9:12:21:c2:fd:4f:8c:98:2e:8f:c2:4d:
         c8:ff:e9:ba:70:8d:a8:46:95:ea:5a:7c:30:6f:ee:63:66:b2:
         5e:95:cd:f0:ee:d8:0a:44:89:62:87:14:8c:03:89:6f:b2:0c:
         9a:5c:f7:c4:87:b4:98:1d:61:6d:34:46:d1:ab:7b:57:ea:b1:
         bb:91:29:86:f7:5b:37:23:86:48:3d:25:f4:7e:5d:17:51:e8:
         5f:cc:5d:b5:e0:69:3a:43:c7:fa:c3:a2:ca:d1:cb:dd:2a:a3:
         b6:c3:02:c0:e5:bd:7e:5c:a9:d6:f4:c4:25:0f:aa:45:0d:ae:
         f7:e7:75:2e:98:47:df:55:05:95:cf:8b:c8:7c:b2:61:3f:17:
         23:1a:aa:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:00 2025 by rpki-client on console.sobornost.net