Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/7uR_yiVUsKXN9cQ9UEqMaOjd_ow.roa
File:                     7uR_yiVUsKXN9cQ9UEqMaOjd_ow.roa (raw, json)
Hash identifier:          OVRCNzp/6ULY8TXLR8C+JnnDlpd68DlkSuJjHaG4io0=
Subject key identifier:   EE:E4:7F:CA:25:54:B0:A5:CD:F5:C4:3D:50:4A:8C:68:E8:DD:FE:8C
Certificate issuer:       /CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3
Certificate serial:       01941FFA716E4B16BC4CAFA13E56A3920C7E
Authority key identifier: E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/7uR_yiVUsKXN9cQ9UEqMaOjd_ow.roa
Signing time:             Wed 01 Jan 2025 03:48:14 +0000
ROA not before:           Wed 01 Jan 2025 03:48:14 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209685
IP address blocks:        88.218.140.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:71:6e:4b:16:bc:4c:af:a1:3e:56:a3:92:0c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3
        Validity
            Not Before: Jan  1 03:48:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=eee47fca2554b0a5cdf5c43d504a8c68e8ddfe8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:0a:a9:cf:29:87:6b:e2:96:fa:01:ac:ee:
                    91:87:00:82:bb:56:69:0e:d3:99:c8:10:43:e3:bb:
                    36:06:80:13:d4:cc:b9:7b:7e:9e:e3:3d:7a:d0:78:
                    05:3c:11:61:8b:39:33:61:62:7b:b9:b3:3e:a6:5e:
                    e3:18:b0:dd:70:f1:e2:bd:fc:41:0f:7e:70:d2:2c:
                    bc:09:6d:9b:ec:ee:44:6a:a5:83:d5:f6:15:f9:43:
                    f6:75:c0:ca:71:5c:91:5e:93:bc:a1:a2:65:ad:50:
                    8d:e5:80:12:3f:95:18:cb:bd:e8:af:d3:c5:a5:07:
                    f7:df:f8:da:e6:50:7a:c9:aa:c5:bf:96:89:a7:5f:
                    c4:19:9d:82:dc:56:f1:93:ed:3f:e6:43:96:78:df:
                    ce:55:14:47:e6:69:28:3e:f1:e3:22:79:19:8d:e4:
                    9b:74:61:0e:e3:bb:9e:a0:ef:4f:fa:3e:73:0a:bc:
                    85:4d:b9:f8:af:40:d7:ff:a3:a7:01:97:ce:cd:f5:
                    e9:71:ee:4d:13:f8:e6:3d:92:9e:54:90:f1:a5:a9:
                    ad:4d:df:e8:2c:a5:12:e0:cc:0d:cd:ea:b8:03:f4:
                    de:e4:0b:c3:1a:45:cb:8a:63:90:ba:55:c0:61:68:
                    e9:a6:ac:4d:34:aa:65:b0:34:20:a2:13:2f:cc:9b:
                    11:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E4:7F:CA:25:54:B0:A5:CD:F5:C4:3D:50:4A:8C:68:E8:DD:FE:8C
            X509v3 Authority Key Identifier:
                keyid:E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/7uR_yiVUsKXN9cQ9UEqMaOjd_ow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.218.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:e4:76:1d:2e:f1:6d:06:13:88:a0:2a:98:7b:44:9d:ca:53:
         1f:e9:6c:fa:b1:7a:35:ae:77:1d:71:b1:9f:14:8f:85:66:35:
         b3:b1:94:13:09:8c:bd:93:4f:3f:c2:dc:6c:ae:e4:b2:6e:21:
         98:be:75:bb:5e:ff:5f:99:90:d3:73:0c:f6:a0:d3:94:44:af:
         c5:45:e1:2e:25:0c:38:23:7b:7c:50:79:44:c7:99:93:78:af:
         6d:24:3a:42:f2:67:c6:3b:f8:0f:38:eb:8b:7a:04:00:3a:73:
         43:bf:22:3f:2b:16:d0:fb:eb:e7:e8:90:76:2f:79:7b:a5:4b:
         09:a5:a8:50:69:52:03:8b:cd:b2:2d:4c:a7:20:e3:ee:3f:69:
         a5:c9:90:dd:3f:3d:75:8e:d4:5c:f3:ed:f0:2c:f4:62:3e:21:
         26:00:30:d9:18:b7:36:95:e1:bb:df:ef:a6:46:cd:79:b7:ed:
         c8:6e:74:9b:0b:ba:49:2d:bd:40:db:2f:51:1f:a4:22:c8:41:
         f7:45:5e:75:70:88:4a:26:32:83:a5:4e:0a:01:25:c2:c3:f4:
         e2:ec:e9:e5:dd:1d:7f:17:9b:48:50:3a:fa:4e:fb:5b:f7:54:
         82:1d:b6:e6:cc:50:8a:4d:53:f7:3f:e7:88:e2:31:a7:d7:ec:
         4c:f0:6b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:02 2025 by rpki-client on console.sobornost.net