Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/b_NE7DVIfDXKb-MpYj6nT1XXano.roa
File:                     b_NE7DVIfDXKb-MpYj6nT1XXano.roa (raw, json)
Hash identifier:          p2sDMI4p8wkfemzISoM/DEW8q7cpoFG20Gw6CbldWQQ=
Subject key identifier:   6F:F3:44:EC:35:48:7C:35:CA:6F:E3:29:62:3E:A7:4F:55:D7:6A:7A
Certificate issuer:       /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial:       019427B50036630DB69ABA822C2877475753
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/b_NE7DVIfDXKb-MpYj6nT1XXano.roa
Signing time:             Thu 02 Jan 2025 15:49:21 +0000
ROA not before:           Thu 02 Jan 2025 15:49:21 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212988
IP address blocks:        185.232.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:00:36:63:0d:b6:9a:ba:82:2c:28:77:47:57:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
        Validity
            Not Before: Jan  2 15:49:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6ff344ec35487c35ca6fe329623ea74f55d76a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2b:56:19:0e:22:59:0f:ad:42:73:55:0e:fd:
                    77:b3:f6:ab:cc:4b:06:3b:a6:dc:a4:40:3a:cc:c0:
                    0c:d4:fa:90:5e:db:40:6a:9a:81:ef:a1:4c:b4:da:
                    0b:5e:3f:67:80:99:b6:62:c7:48:0e:d5:12:6b:28:
                    32:9a:cc:19:57:e5:88:3f:24:79:74:24:95:21:b1:
                    b1:79:6f:e7:0e:d6:50:e7:80:ee:d9:b0:b2:7b:02:
                    50:ab:ea:48:b1:99:dd:81:40:48:de:34:97:d7:2c:
                    bf:00:c7:be:5d:1b:52:a4:23:ba:be:78:ee:2e:05:
                    00:66:bf:fe:b3:54:3e:e2:61:f2:77:97:70:97:24:
                    14:c5:2d:7e:f2:29:c6:e7:f4:8c:dc:e1:7e:c2:89:
                    64:72:3b:e5:1b:8a:78:c9:a4:9b:52:2f:0b:33:4b:
                    ae:9c:d2:ba:2e:64:79:dd:b5:31:84:4c:20:37:63:
                    3f:cd:62:78:3b:ee:aa:45:9c:1f:03:29:2b:bb:5e:
                    15:14:30:68:83:61:40:8d:ca:39:9c:5a:d0:1c:2d:
                    ac:7a:a9:8a:21:18:11:17:ef:9b:e2:b5:4d:42:83:
                    2d:7b:86:3d:f5:05:c4:23:ff:90:79:49:d4:f1:2c:
                    71:78:9c:22:49:c8:59:76:16:05:bc:0c:38:06:2a:
                    c2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F3:44:EC:35:48:7C:35:CA:6F:E3:29:62:3E:A7:4F:55:D7:6A:7A
            X509v3 Authority Key Identifier:
                keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/b_NE7DVIfDXKb-MpYj6nT1XXano.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.232.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:89:5b:8a:0d:66:36:71:4f:d4:6b:dc:14:b2:82:66:4d:ec:
         6d:36:4a:86:94:8a:dc:0c:61:50:3e:7a:d0:3f:a9:72:2e:0b:
         8a:2e:6f:6f:4a:91:b2:c9:02:e8:15:a3:3a:6b:e0:e1:0b:7a:
         21:f8:bb:78:6c:8d:0c:6b:e7:53:ab:87:3e:20:2c:ee:56:38:
         fe:7e:9f:be:18:26:c4:8a:ab:eb:ef:02:69:27:54:e4:26:60:
         8c:1a:af:e6:a5:97:37:4f:6d:70:74:bd:1f:4d:f4:38:f4:a4:
         96:c4:8a:48:c5:ab:dd:95:65:f8:4e:5b:7b:1e:d1:a6:e4:4c:
         c5:55:22:b7:9d:1b:a9:f5:dd:7e:99:4f:7b:c2:23:ed:cf:51:
         cf:81:f5:f7:91:89:40:1d:48:00:31:75:5f:c4:a4:9d:b9:59:
         a0:b6:db:42:44:cf:9d:57:03:dd:5f:7f:25:4b:7d:17:26:52:
         c7:0e:31:8b:70:9d:bd:31:a3:f1:2d:6a:90:d7:1f:8c:69:c2:
         8a:46:42:35:92:13:49:01:78:5a:0b:98:fb:c6:23:de:b4:98:
         4e:51:98:f1:f4:81:9d:6b:90:4d:f9:25:de:22:08:6a:fd:76:
         e0:c0:a8:9f:6c:2a:51:5d:5f:8b:13:9c:c0:55:de:8b:34:b0:
         cf:62:31:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net