Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/8vkkegr96IBMHB6BFhag_SmFnOI.roa
File:                     8vkkegr96IBMHB6BFhag_SmFnOI.roa (raw, json)
Hash identifier:          h5/oEq8rbYbckXXTNVYfhI/okuKJEZpt0WvLrdLeyGw=
Subject key identifier:   F2:F9:24:7A:0A:FD:E8:80:4C:1C:1E:81:16:16:A0:FD:29:85:9C:E2
Certificate issuer:       /CN=7dec279b0501730698a30bcdcea3ae477c957331
Certificate serial:       019427B523BECB6ACDF2EF122E0F36F51CED
Authority key identifier: 7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/8vkkegr96IBMHB6BFhag_SmFnOI.roa
Signing time:             Thu 02 Jan 2025 15:49:30 +0000
ROA not before:           Thu 02 Jan 2025 15:49:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     41605
IP address blocks:        185.82.148.0/22 maxlen: 22
                          185.82.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:23:be:cb:6a:cd:f2:ef:12:2e:0f:36:f5:1c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dec279b0501730698a30bcdcea3ae477c957331
        Validity
            Not Before: Jan  2 15:49:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f2f9247a0afde8804c1c1e811616a0fd29859ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:17:15:8c:04:bf:e5:68:5a:71:2d:bc:ad:be:
                    e5:fe:10:02:50:7f:30:88:83:60:3b:91:9a:01:36:
                    dc:f6:97:4c:ca:c2:38:62:b3:00:3f:e1:c8:3a:1d:
                    03:66:4a:73:82:97:75:a1:b5:67:7d:98:2f:66:85:
                    89:de:4a:c6:da:d3:3a:7f:b1:9c:9d:40:81:9d:a2:
                    be:cb:57:2c:ff:9d:5b:3b:e5:7f:ff:84:91:c5:11:
                    71:10:5d:e4:9b:9c:74:84:77:66:db:75:eb:8b:31:
                    55:93:7c:1b:88:34:48:de:33:74:bc:35:c9:51:f9:
                    5a:95:4e:59:a6:93:1a:00:f9:50:a5:d3:96:8e:c8:
                    ac:79:aa:12:f3:6b:9a:b4:7b:f0:5c:ce:99:54:f7:
                    84:bb:67:e1:b7:de:fc:1a:df:9c:f0:05:1d:22:42:
                    7d:e7:9f:b8:96:83:8d:60:b2:b6:56:1b:03:6f:4b:
                    df:a5:c7:89:0a:5d:e3:87:40:fb:66:29:5f:36:10:
                    ae:2a:de:a2:ba:09:7e:df:41:08:c3:80:d3:d3:72:
                    2f:cb:9d:d1:25:71:46:23:25:64:8d:f2:42:c0:15:
                    40:b1:06:c3:2c:85:22:8c:5c:5b:2d:11:7e:b3:ed:
                    d4:c8:00:2e:bc:38:f5:7b:ef:64:91:07:ee:02:71:
                    30:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F9:24:7A:0A:FD:E8:80:4C:1C:1E:81:16:16:A0:FD:29:85:9C:E2
            X509v3 Authority Key Identifier:
                keyid:7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/8vkkegr96IBMHB6BFhag_SmFnOI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.82.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:51:30:5f:ad:d3:b4:dd:63:68:9c:c7:d4:52:5e:e0:67:19:
         43:ca:e9:f8:06:2c:01:4a:e8:54:52:f0:13:b5:e5:09:97:2b:
         4f:4d:7a:6a:11:d1:d5:78:5d:1f:66:bf:92:b0:c8:d5:e6:7a:
         34:0a:9c:29:6f:9c:b5:f1:3d:db:46:28:a4:15:4e:dd:7b:db:
         14:48:5c:f0:05:85:9e:bd:f9:54:24:3f:08:94:b0:24:2c:2e:
         38:70:96:b1:e0:82:d4:2b:1f:6d:6a:30:99:e8:02:ae:27:aa:
         23:54:7e:60:61:e2:02:01:31:d8:47:06:a3:55:8b:90:f7:6a:
         55:97:42:c0:ab:e6:aa:fd:df:99:36:59:cb:cc:dc:94:88:e4:
         4c:09:c1:56:ad:9d:49:33:3f:e4:ac:17:97:34:ee:d1:53:ea:
         09:e0:68:a9:23:03:ae:27:b2:3b:67:31:f3:07:61:0e:a6:ea:
         51:bc:76:32:21:12:61:32:26:49:66:bc:61:c2:f3:4c:0a:05:
         91:5f:2d:1f:45:e1:c3:f9:9b:f2:5f:66:ec:f4:6d:76:95:70:
         e3:00:7d:4e:ad:d1:3f:b1:4a:c3:c4:e5:e7:2b:d1:1f:95:47:
         cf:b6:a9:4e:f6:4e:e4:f8:73:05:82:13:b1:28:a4:a1:4f:49:
         f9:4c:a2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net