Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/1b0YLKL7-iTCHbE9CdUd3XA5y7g.roa
File:                     1b0YLKL7-iTCHbE9CdUd3XA5y7g.roa (raw, json)
Hash identifier:          rIogoNu1hzVKlpslv16w1RSjAhJwMYGtMcjGmVqGYDI=
Subject key identifier:   D5:BD:18:2C:A2:FB:FA:24:C2:1D:B1:3D:09:D5:1D:DD:70:39:CB:B8
Certificate issuer:       /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial:       019424B266FBDEE019DC8A92F619C6B4B1EF
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/1b0YLKL7-iTCHbE9CdUd3XA5y7g.roa
Signing time:             Thu 02 Jan 2025 01:47:39 +0000
ROA not before:           Thu 02 Jan 2025 01:47:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     42075
IP address blocks:        185.80.72.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b2:66:fb:de:e0:19:dc:8a:92:f6:19:c6:b4:b1:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
        Validity
            Not Before: Jan  2 01:47:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d5bd182ca2fbfa24c21db13d09d51ddd7039cbb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c1:39:51:de:8c:cf:3a:37:6b:18:c9:a5:66:
                    2d:1c:70:2f:0a:0e:b7:f8:67:58:f9:d6:11:79:a3:
                    02:87:e5:5e:87:a5:1b:e8:19:b5:50:a5:88:e5:58:
                    fd:ce:4a:20:18:d5:51:fb:b4:2c:2d:2c:87:90:94:
                    a5:4f:ee:71:db:ea:a6:63:ca:eb:17:48:c5:e9:2e:
                    67:75:3d:80:61:dd:04:85:b3:ea:52:ed:ec:7b:26:
                    6e:e5:33:33:7a:07:26:8e:fb:02:e2:21:0a:5d:3a:
                    91:bf:88:4b:5c:45:b7:0e:d6:41:0a:2e:3d:25:82:
                    35:d4:61:08:7a:e0:23:8c:59:09:f7:13:82:a2:4f:
                    a2:9b:53:28:7c:60:7b:be:dc:b6:43:70:54:19:54:
                    0a:9e:11:92:23:6c:92:1a:e1:1e:e2:98:09:a1:8b:
                    05:bf:1a:c6:74:8f:4a:84:b6:02:19:ba:18:bc:96:
                    4e:a2:90:75:de:95:24:ac:59:5d:37:90:ba:7c:32:
                    7f:b6:e3:1c:75:2e:3f:9d:e4:76:a6:bf:74:e8:9c:
                    99:6b:f9:f4:de:3a:19:e4:2b:40:79:a9:15:d9:98:
                    8a:68:53:fb:81:d2:ce:25:09:cb:0b:af:f3:57:2a:
                    fb:24:f5:66:8a:26:c3:b3:10:80:29:90:c4:16:96:
                    95:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BD:18:2C:A2:FB:FA:24:C2:1D:B1:3D:09:D5:1D:DD:70:39:CB:B8
            X509v3 Authority Key Identifier:
                keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/1b0YLKL7-iTCHbE9CdUd3XA5y7g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.80.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:9e:0d:a5:8e:bd:d2:90:5a:ba:17:f9:78:ef:ea:c0:bf:b2:
         2a:c4:aa:36:c5:20:16:39:10:ae:24:b6:00:e2:2e:f3:2f:c5:
         46:b9:5d:9d:d1:a3:6a:d3:df:09:16:66:48:31:47:a1:e2:42:
         5f:c3:0b:67:ca:a2:8e:24:f0:af:c0:50:f6:89:ec:e9:6e:c2:
         ba:6f:27:aa:83:80:03:39:a5:46:a5:c1:75:01:75:5f:12:61:
         f8:bb:8e:7d:8a:18:a9:75:38:91:74:3d:50:a2:52:20:f3:f5:
         4a:5c:20:94:b1:dd:2d:20:0e:dd:d4:06:db:29:fe:be:c9:b4:
         50:66:07:dd:99:36:97:0f:40:ff:fa:fe:21:d5:7e:74:cc:38:
         60:4b:c7:51:bf:ca:46:e2:a3:93:f8:3f:31:be:5c:23:8d:a4:
         e1:73:1c:b7:8f:5d:f2:35:86:cd:ef:42:ac:f9:5c:c7:e3:a8:
         36:3f:89:fa:7c:6a:f8:56:28:d4:c4:b8:da:d0:dd:61:0d:5b:
         f7:81:21:7c:46:11:8f:9f:8d:38:22:af:2d:91:6e:cd:7f:0a:
         0e:14:1d:4f:49:15:dc:60:84:42:e2:fc:bb:c6:56:1c:65:8a:
         69:00:42:19:f2:7a:3c:00:ec:a3:b6:15:4c:36:c9:cf:a8:40:
         f0:ae:4e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:29 2025 by rpki-client on console.sobornost.net