Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/HPCKr00mXSJ3C9phmBvKtJQXCBY.roa
File:                     HPCKr00mXSJ3C9phmBvKtJQXCBY.roa (raw, json)
Hash identifier:          TqSUlnmZHL4GKMxOnemPwak2VaRBnIX0Q7+M72vd6iE=
Subject key identifier:   1C:F0:8A:AF:4D:26:5D:22:77:0B:DA:61:98:1B:CA:B4:94:17:08:16
Certificate issuer:       /CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
Certificate serial:       01941F8C120FCF7BB365D284055BF43C7B8A
Authority key identifier: 19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/HPCKr00mXSJ3C9phmBvKtJQXCBY.roa
Signing time:             Wed 01 Jan 2025 01:47:40 +0000
ROA not before:           Wed 01 Jan 2025 01:47:40 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     56532
IP address blocks:        185.103.232.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:12:0f:cf:7b:b3:65:d2:84:05:5b:f4:3c:7b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19d65fa33ce5b3f7bdb497e5fca509d7fc03c693
        Validity
            Not Before: Jan  1 01:47:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1cf08aaf4d265d22770bda61981bcab494170816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5d:1a:87:18:cd:ba:e6:d8:8e:1d:5f:98:fe:
                    33:ff:2b:f8:f2:6f:15:88:e1:b0:4d:30:f3:36:01:
                    31:93:86:e6:94:5b:04:6c:a7:16:2e:37:23:31:85:
                    24:a7:23:24:11:c4:c9:5c:98:7c:75:59:67:f7:ce:
                    e6:cd:31:a4:47:e3:4e:b4:39:25:bb:72:5d:73:0b:
                    19:0a:fa:99:00:47:11:73:e8:42:b9:5e:a5:32:37:
                    10:ce:d4:01:7d:42:94:be:2f:78:91:3b:9d:48:b1:
                    ba:24:85:7e:68:06:69:6b:1b:5e:60:5f:2a:e0:bd:
                    87:1c:f4:7d:38:39:f7:86:ee:24:91:e3:ee:e0:bc:
                    10:e6:4e:6a:9b:1e:e9:3e:ae:79:b6:40:8f:7d:89:
                    7e:9b:45:ab:a9:cd:c2:82:aa:b0:7e:79:df:5c:c2:
                    96:68:3d:4e:8c:7c:67:82:ea:91:bd:c3:60:c8:1e:
                    38:79:0a:65:6a:14:2c:e3:76:db:f1:32:db:7a:45:
                    4b:8f:df:12:ad:ee:aa:7a:0d:a5:4e:58:26:23:57:
                    37:7a:6f:d5:75:b8:0f:c4:e8:0e:da:56:ce:85:79:
                    18:f0:c3:8c:00:0d:65:36:21:81:9f:2a:dd:cd:10:
                    b1:08:c0:2a:85:c1:0a:cf:27:39:61:c1:74:76:90:
                    12:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F0:8A:AF:4D:26:5D:22:77:0B:DA:61:98:1B:CA:B4:94:17:08:16
            X509v3 Authority Key Identifier:
                keyid:19:D6:5F:A3:3C:E5:B3:F7:BD:B4:97:E5:FC:A5:09:D7:FC:03:C6:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdZfozzls_e9tJfl_KUJ1_wDxpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/HPCKr00mXSJ3C9phmBvKtJQXCBY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/725c22-7eec-4033-a763-c87ce76383bc/1/GdZfozzls_e9tJfl_KUJ1_wDxpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.103.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:ef:e3:58:5c:a7:16:9c:ef:65:d6:f4:dc:c6:99:62:ce:f7:
         36:e6:b6:be:24:93:c5:01:dd:45:3c:a6:01:4a:24:96:92:1b:
         4c:02:6f:8f:90:54:14:3b:0b:ed:f0:6d:e3:91:4c:f5:1c:65:
         d3:92:da:ab:1a:93:6d:d8:27:f8:f5:7d:16:3c:46:90:98:9e:
         70:d1:08:21:92:dc:31:4c:2a:64:1d:7c:84:18:6d:32:71:c2:
         31:74:37:71:20:13:b1:18:22:cc:e8:ff:4d:eb:27:55:a6:33:
         13:59:55:3b:eb:d0:48:b1:d9:05:28:63:62:09:ce:52:e7:ad:
         1d:be:8b:8d:0e:d2:ee:89:4a:79:98:64:df:69:14:46:7c:7c:
         29:d3:f7:58:a5:3b:38:ab:9b:76:76:65:71:a8:24:ab:21:61:
         54:c5:9f:58:7b:f2:34:45:a4:e0:80:9a:5c:7e:e2:7d:e2:37:
         04:13:55:7a:3c:e0:ab:27:45:29:bb:d6:92:ed:c2:93:ab:41:
         25:62:4c:7e:ca:b7:b1:12:fe:e2:02:ad:2e:90:9b:95:70:26:
         45:42:41:2b:1f:0a:a5:00:f7:5e:73:35:05:ef:0e:5e:5f:1c:
         93:d1:d2:cc:70:eb:89:05:be:a3:71:62:f4:50:fd:6e:f0:72:
         3a:d4:1d:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjBIPz3uzZdKEBVv0PHuKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZDY1ZmEzM2NlNWIzZjdiZGI0OTdlNWZjYTUwOWQ3ZmMw
M2M2OTMwHhcNMjUwMTAxMDE0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2YwOGFhZjRkMjY1ZDIyNzcwYmRhNjE5ODFiY2FiNDk0MTcwODE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV0ahxjNuubYjh1fmP4z/yv48m8V
iOGwTTDzNgExk4bmlFsEbKcWLjcjMYUkpyMkEcTJXJh8dVln987mzTGkR+NOtDkl
u3JdcwsZCvqZAEcRc+hCuV6lMjcQztQBfUKUvi94kTudSLG6JIV+aAZpaxteYF8q
4L2HHPR9ODn3hu4kkePu4LwQ5k5qmx7pPq55tkCPfYl+m0Wrqc3CgqqwfnnfXMKW
aD1OjHxnguqRvcNgyB44eQplahQs43bb8TLbekVLj98Sre6qeg2lTlgmI1c3em/V
dbgPxOgO2lbOhXkY8MOMAA1lNiGBnyrdzRCxCMAqhcEKzyc5YcF0dpASbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBzwiq9NJl0idwvaYZgbyrSUFwgWMB8GA1UdIwQY
MBaAFBnWX6M85bP3vbSX5fylCdf8A8aTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2RaZm96emxzX2U5dEpmbF9LVUoxX3dEeHBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83MjVjMjItN2VlYy00MDMzLWE3NjMt
Yzg3Y2U3NjM4M2JjLzEvSFBDS3IwMG1YU0ozQzlwaG1Cdkt0SlFYQ0JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS83MjVjMjItN2VlYy00MDMzLWE3NjMtYzg3Y2U3NjM4M2Jj
LzEvR2RaZm96emxzX2U5dEpmbF9LVUoxX3dEeHBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWfoMA0G
CSqGSIb3DQEBCwUAA4IBAQBs7+NYXKcWnO9l1vTcxplizvc25ra+JJPFAd1FPKYB
SiSWkhtMAm+PkFQUOwvt8G3jkUz1HGXTktqrGpNt2Cf49X0WPEaQmJ5w0Qghktwx
TCpkHXyEGG0yccIxdDdxIBOxGCLM6P9N6ydVpjMTWVU769BIsdkFKGNiCc5S560d
vouNDtLuiUp5mGTfaRRGfHwp0/dYpTs4q5t2dmVxqCSrIWFUxZ9Ye/I0RaTggJpc
fuJ94jcEE1V6POCrJ0Upu9aS7cKTq0ElYkx+yrexEv7iAq0ukJuVcCZFQkErHwql
APdeczUF7w5eXxyT0dLMcOuJBb6jcWL0UP1u8HI61B2+
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:15 2025 by rpki-client on console.sobornost.net