Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/SyEVUI3N-GA_i-uzTD16e1zmM2E.roa
File:                     SyEVUI3N-GA_i-uzTD16e1zmM2E.roa (raw, json)
Hash identifier:          LqMTwONwWzte69tiLUqbC66cMzx5aiQvY2EzU+SnCGc=
Subject key identifier:   4B:21:15:50:8D:CD:F8:60:3F:8B:EB:B3:4C:3D:7A:7B:5C:E6:33:61
Certificate issuer:       /CN=faf64476ef3945b344ffee38da56caccc5d039b0
Certificate serial:       01941FFA20C389C4632C001449F29ED867A1
Authority key identifier: FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/SyEVUI3N-GA_i-uzTD16e1zmM2E.roa
Signing time:             Wed 01 Jan 2025 03:47:53 +0000
ROA not before:           Wed 01 Jan 2025 03:47:53 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     208896
IP address blocks:        185.57.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:20:c3:89:c4:63:2c:00:14:49:f2:9e:d8:67:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf64476ef3945b344ffee38da56caccc5d039b0
        Validity
            Not Before: Jan  1 03:47:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4b2115508dcdf8603f8bebb34c3d7a7b5ce63361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:08:fc:c0:5d:9c:b7:16:ba:73:31:34:22:e4:
                    07:ff:96:17:52:62:a8:e4:af:e8:bc:b6:49:ef:92:
                    86:d8:f0:9a:0b:71:ad:4c:cb:4e:83:c1:67:22:03:
                    e0:52:98:df:43:58:5d:d3:8a:0a:29:d2:1a:62:4b:
                    73:8f:dd:31:98:2c:28:ee:63:34:64:7a:63:da:15:
                    ac:b8:01:da:a4:a3:ae:ef:f4:41:3d:db:35:d5:08:
                    49:91:be:9d:11:ec:dd:0d:a4:8e:a9:d0:c5:c7:a6:
                    12:d5:1f:d7:16:44:06:4b:32:74:07:3f:bf:4f:f5:
                    56:85:11:6f:82:42:1b:c4:cd:2d:a8:84:89:8f:ff:
                    ca:f0:fa:bb:64:d3:9c:e6:34:6a:b7:6f:1f:15:a4:
                    b7:ee:f8:88:e3:07:78:e3:51:ed:11:49:ae:62:b0:
                    85:e4:02:95:ad:c7:fe:1f:1f:05:08:49:2c:43:4a:
                    7a:dd:83:ae:47:7e:17:0e:5a:2a:42:a5:8c:d6:90:
                    e6:95:e4:13:e5:46:91:66:f0:c2:3a:a7:36:4f:57:
                    e1:c9:2d:23:18:0e:f4:7c:95:6d:09:b5:29:3d:6f:
                    ce:a4:e4:8f:f8:64:c2:00:91:8f:26:ef:77:01:31:
                    5d:d3:f3:bd:ef:ea:a6:18:85:88:b0:f8:43:18:35:
                    25:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:21:15:50:8D:CD:F8:60:3F:8B:EB:B3:4C:3D:7A:7B:5C:E6:33:61
            X509v3 Authority Key Identifier:
                keyid:FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/SyEVUI3N-GA_i-uzTD16e1zmM2E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.57.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:ec:c7:25:52:51:ba:7a:6c:92:d4:be:b6:f0:53:d1:e8:ce:
         4b:4e:55:20:fd:b6:61:f5:d3:d0:be:f3:d0:d3:a5:86:43:43:
         02:be:24:69:09:72:7e:d3:f8:ba:3b:a0:b9:77:7b:51:4b:f1:
         5d:83:cc:f9:37:16:06:75:55:d1:c6:28:c5:39:08:51:1b:1f:
         2e:5b:a5:be:a0:72:ff:10:46:5a:c3:2c:04:b2:33:70:15:08:
         12:94:2e:98:d3:47:13:e3:64:5c:c6:36:6c:ff:8f:d5:ff:11:
         63:19:f3:bc:73:bd:1e:60:3e:8e:ca:62:8e:48:ba:c0:b8:45:
         6e:61:d8:4b:6b:bd:df:72:de:ee:62:2b:92:00:b3:f9:42:50:
         54:36:4a:00:1c:89:0c:92:f5:74:e8:44:c9:98:49:13:19:43:
         01:a5:e4:76:dc:eb:d6:36:1c:c8:f2:88:93:43:12:53:ba:71:
         3a:02:d1:d4:95:16:ed:bc:5b:7c:d4:59:58:02:97:39:45:bf:
         a1:12:73:23:72:45:b1:cb:dd:db:78:be:52:38:06:ca:a4:f1:
         54:fc:66:ab:cb:0f:87:2b:5d:d5:3f:03:d0:24:eb:c6:c6:28:
         13:ea:76:38:83:dd:eb:3b:87:5b:d5:99:9d:9e:0e:e2:d5:fb:
         17:47:f7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:29 2025 by rpki-client on console.sobornost.net