Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/w0MGxtWzNh-Wg8RBcln32CLcNqo.roa
File:                     w0MGxtWzNh-Wg8RBcln32CLcNqo.roa (raw, json)
Hash identifier:          H0A/C+iiSZpPUmhK9SIg9MZWz78n+gyc/aBSLoyD6VQ=
Subject key identifier:   C3:43:06:C6:D5:B3:36:1F:96:83:C4:41:72:59:F7:D8:22:DC:36:AA
Certificate issuer:       /CN=e60bbe0be77c4e2f05791786eadcc8276b261b8c
Certificate serial:       019421B1D4720191777304496B4DF5218A16
Authority key identifier: E6:0B:BE:0B:E7:7C:4E:2F:05:79:17:86:EA:DC:C8:27:6B:26:1B:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/w0MGxtWzNh-Wg8RBcln32CLcNqo.roa
Signing time:             Wed 01 Jan 2025 11:48:09 +0000
ROA not before:           Wed 01 Jan 2025 11:48:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     202005
IP address blocks:        185.26.136.0/24 maxlen: 24
                          185.26.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:d4:72:01:91:77:73:04:49:6b:4d:f5:21:8a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60bbe0be77c4e2f05791786eadcc8276b261b8c
        Validity
            Not Before: Jan  1 11:48:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c34306c6d5b3361f9683c4417259f7d822dc36aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e4:64:00:73:fc:0d:3a:0c:41:d9:90:65:84:
                    10:70:6a:c5:b2:7f:24:cb:ce:15:40:a3:f9:b5:4c:
                    29:d8:e6:ab:fd:82:05:c1:d8:b4:ee:13:81:7e:b6:
                    a2:bd:d0:85:9b:61:a6:6c:49:60:f1:5d:2b:4e:48:
                    19:ab:54:fa:0f:4d:69:b0:23:f4:19:3e:58:0b:88:
                    5c:db:cf:07:9d:60:cd:77:04:98:81:dc:44:03:c5:
                    7d:bd:1f:0d:6e:1b:67:35:e1:db:30:d4:74:3e:01:
                    56:71:bc:46:32:e0:6d:be:fe:7c:8a:e1:ec:89:be:
                    86:34:08:dd:17:46:60:8c:48:db:fd:03:de:d5:03:
                    57:a4:80:19:5e:fc:06:0e:c1:9f:56:74:1a:f6:fb:
                    4f:44:26:0b:48:d2:54:10:66:d7:8d:83:41:47:45:
                    68:d2:6f:07:86:b7:9d:71:29:dc:91:96:69:e8:06:
                    5f:ae:a0:0e:fb:6e:96:85:b9:56:1b:42:78:fe:2b:
                    10:74:f4:eb:54:2a:bb:1e:37:18:17:b6:ee:d5:ec:
                    50:b1:51:91:00:78:e9:fd:b3:57:41:c2:2e:3b:92:
                    0a:df:fd:59:65:e7:7c:d0:f6:52:30:d4:8e:11:d1:
                    5e:62:4b:a1:1d:a6:f4:dd:72:e7:17:ed:6c:64:da:
                    15:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:43:06:C6:D5:B3:36:1F:96:83:C4:41:72:59:F7:D8:22:DC:36:AA
            X509v3 Authority Key Identifier:
                keyid:E6:0B:BE:0B:E7:7C:4E:2F:05:79:17:86:EA:DC:C8:27:6B:26:1B:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/w0MGxtWzNh-Wg8RBcln32CLcNqo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.26.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:82:86:56:7a:d1:65:1a:95:b5:fa:95:42:a1:81:1e:6a:d8:
         d2:32:7e:52:b6:bc:d0:fa:04:f4:3b:9d:c6:e9:11:76:9b:cd:
         4b:2e:fd:8f:77:62:9a:98:77:52:55:63:8a:9f:18:47:93:06:
         57:b8:1e:d7:33:b4:fc:57:6c:a5:11:8e:a6:c8:0d:92:8c:49:
         dd:03:b1:2c:1c:81:7f:8d:1a:6b:18:52:cd:a7:2e:fb:b4:d6:
         0c:2c:58:11:17:9e:5b:0c:92:a4:b8:d6:ed:d9:67:5b:29:7f:
         ad:59:3e:0a:ad:d8:ff:cb:17:6a:b3:21:9f:69:37:61:13:9a:
         cc:5c:c6:4c:75:81:2f:0e:97:d3:3c:2c:e0:c2:8f:50:90:e6:
         57:23:ec:5a:7e:a5:2f:8c:f9:99:52:2a:e7:0f:7c:15:21:1f:
         5e:d4:43:18:7c:17:f2:a6:17:43:e7:c9:19:3b:e6:05:30:b1:
         c8:74:23:bf:81:d0:1e:f1:52:f7:f2:79:2f:a6:df:5f:cb:a5:
         b3:a6:cd:ff:46:48:07:f6:d5:bc:ab:fe:d0:65:ea:70:4a:9b:
         80:2a:49:06:50:50:0f:a2:3b:fd:0f:98:44:6d:44:06:bf:6c:
         a6:23:85:a7:9b:96:1b:20:8c:3b:ca:cd:9d:b4:b2:f4:a4:8d:
         5e:03:f6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:10 2025 by rpki-client on console.sobornost.net