Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/9VypMz3iCSk3bTcWbdUG56PoZsA.roa
File:                     9VypMz3iCSk3bTcWbdUG56PoZsA.roa (raw, json)
Hash identifier:          mzMSrWOZTqC0QzpCxmFu8qEg5OOSS8ESViyPUbDM+Lk=
Subject key identifier:   F5:5C:A9:33:3D:E2:09:29:37:6D:37:16:6D:D5:06:E7:A3:E8:66:C0
Certificate issuer:       /CN=e74aaba5989badb60274760deef6c40cd0112026
Certificate serial:       01953D97F11D89C0286D100C9CEA544B6AAC
Authority key identifier: E7:4A:AB:A5:98:9B:AD:B6:02:74:76:0D:EE:F6:C4:0C:D0:11:20:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50qrpZibrbYCdHYN7vbEDNARICY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/9VypMz3iCSk3bTcWbdUG56PoZsA.roa
Signing time:             Tue 25 Feb 2025 14:52:02 +0000
ROA not before:           Tue 25 Feb 2025 14:52:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     945
IP address blocks:        185.155.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:3d:97:f1:1d:89:c0:28:6d:10:0c:9c:ea:54:4b:6a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e74aaba5989badb60274760deef6c40cd0112026
        Validity
            Not Before: Feb 25 14:52:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f55ca9333de20929376d37166dd506e7a3e866c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:79:31:65:66:58:a4:ab:ad:8f:22:a4:d1:47:
                    26:25:d1:db:2b:b9:fc:06:57:53:1c:0c:26:2a:7b:
                    62:7c:ec:e5:d8:6a:b6:27:fe:53:89:5e:12:2c:4e:
                    32:45:96:4e:52:de:eb:c7:28:ad:9d:17:0d:22:42:
                    3a:ee:21:3e:31:14:f7:1e:10:61:f6:22:3f:f4:76:
                    57:ba:18:c4:0e:28:f6:2d:e1:ec:99:2d:7f:8a:8a:
                    15:08:7b:6e:83:d1:ae:7e:ea:58:ca:e9:8b:8b:77:
                    0e:84:78:ac:4a:95:24:77:5c:0b:4f:ff:fa:19:4a:
                    ff:6c:63:97:27:2f:a6:7d:78:de:48:b1:a0:6a:f2:
                    17:20:dd:36:a2:9a:ef:ca:66:93:c8:28:5a:bc:43:
                    b3:00:55:21:81:d6:f9:ac:bb:f2:f7:28:ce:a4:49:
                    1f:c2:40:05:a6:d6:ac:b8:79:03:9e:71:75:1e:51:
                    82:08:31:26:01:9f:c7:60:bc:a2:32:3c:16:b4:a4:
                    79:f6:a6:7b:16:73:4f:06:87:e7:6b:21:2d:42:43:
                    f7:c4:8f:91:a2:52:cf:e0:f4:32:fa:da:89:e4:95:
                    3e:34:93:25:08:f7:21:68:37:6a:db:cc:f1:d7:e2:
                    26:bc:9a:41:7f:59:31:b0:ab:40:e6:71:d6:9a:1b:
                    56:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5C:A9:33:3D:E2:09:29:37:6D:37:16:6D:D5:06:E7:A3:E8:66:C0
            X509v3 Authority Key Identifier:
                keyid:E7:4A:AB:A5:98:9B:AD:B6:02:74:76:0D:EE:F6:C4:0C:D0:11:20:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50qrpZibrbYCdHYN7vbEDNARICY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/9VypMz3iCSk3bTcWbdUG56PoZsA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/18181f-5554-4fa0-8c6d-8c23f6f57c8c/1/50qrpZibrbYCdHYN7vbEDNARICY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:b4:e3:00:32:a3:9b:6f:88:6d:18:05:14:18:71:c4:3c:f7:
         49:83:fe:36:12:6d:c4:e9:dc:c8:1a:c4:56:6f:f4:19:c3:9d:
         7f:f1:39:44:1d:2b:fd:13:11:f1:5f:ba:ba:e2:d3:fd:28:81:
         ed:28:9b:10:80:9b:2c:be:a5:1b:0f:d0:1e:b1:45:99:72:29:
         f7:4e:a7:7a:17:44:1a:bc:5b:a5:7f:b5:df:94:9c:2c:dc:3a:
         4b:92:49:d4:dd:cb:54:35:c8:4c:61:5a:56:74:75:3a:42:b6:
         12:e9:eb:14:10:b7:86:ba:87:21:a7:56:df:e7:03:b6:cb:65:
         3e:e0:72:19:5b:c2:ae:8c:cc:e6:9d:28:5b:43:9a:63:25:40:
         f3:e2:db:69:fa:75:8c:76:f9:b5:aa:35:c9:3f:ee:08:bb:76:
         a2:9b:3e:ed:6b:67:9d:73:54:a3:67:3d:ac:22:70:1e:49:2c:
         bc:cb:7f:2c:a3:ea:81:c3:ab:a2:f3:cf:f9:87:40:7a:e2:ae:
         e0:c4:4a:f0:a9:a7:dc:08:92:40:16:ff:a9:94:a6:9a:e8:81:
         0b:fb:20:94:2a:92:38:3f:23:bc:9e:a4:1c:36:38:30:ad:b5:
         8f:a2:ea:29:1a:60:f6:6f:26:7d:6f:d8:08:c5:0c:6c:8e:71:
         28:b7:9b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:55:17 2025 by rpki-client on console.sobornost.net