Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/UVLB6EC_S4cdufZlLeGb47V1ReM.roa
File:                     UVLB6EC_S4cdufZlLeGb47V1ReM.roa (raw, json)
Hash identifier:          +1SPWwuKyVjoCsUjj6tw92B1zG4mEC7h1VegEv3YxLE=
Subject key identifier:   51:52:C1:E8:40:BF:4B:87:1D:B9:F6:65:2D:E1:9B:E3:B5:75:45:E3
Certificate issuer:       /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial:       01962E424ED61CDF63B90021901E1EF80E29
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/UVLB6EC_S4cdufZlLeGb47V1ReM.roa
Signing time:             Sun 13 Apr 2025 08:26:59 +0000
ROA not before:           Sun 13 Apr 2025 08:26:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49418
IP address blocks:        89.169.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:42:4e:d6:1c:df:63:b9:00:21:90:1e:1e:f8:0e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
        Validity
            Not Before: Apr 13 08:26:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5152c1e840bf4b871db9f6652de19be3b57545e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cf:f1:7f:d6:a4:76:ea:b0:0b:ee:64:0f:cb:
                    fb:4f:79:c4:e4:3f:9b:d9:67:f4:d1:47:6a:5d:cf:
                    21:af:3c:5a:02:64:6f:2f:79:01:10:f2:36:4f:23:
                    19:3b:81:80:05:76:7e:47:30:ac:ff:04:7b:ea:43:
                    65:1b:5c:cd:da:26:9b:bd:5e:53:57:58:d0:17:77:
                    64:cb:a3:9b:d5:1f:17:02:79:d6:62:6a:f3:a5:ad:
                    35:4a:59:fc:ef:4b:0f:8f:a1:10:7e:b5:67:3a:74:
                    30:0b:47:a4:44:4d:62:a0:53:f7:14:a1:0f:32:cd:
                    44:4d:12:6f:26:d8:1a:fa:47:7e:38:b9:ef:21:f5:
                    0b:f0:0c:ca:4e:2d:4e:97:28:ee:6f:35:fc:68:5f:
                    52:93:39:10:0d:f1:11:1f:30:fa:48:f5:e0:6a:4b:
                    ce:28:9e:f1:f3:16:0f:ff:fe:31:9e:46:cd:1a:25:
                    a9:46:31:a2:13:ac:46:c2:99:20:c1:e5:75:33:5d:
                    18:10:4d:fb:55:f2:ba:79:cd:b6:5c:3b:a7:e2:4c:
                    7f:48:be:30:57:51:9c:42:83:a0:d7:91:4a:be:9c:
                    60:5f:52:fc:aa:e2:5c:88:7a:2f:95:bd:e8:9b:c1:
                    bb:e1:6b:51:a1:4c:cc:85:1a:50:c2:69:21:84:04:
                    c0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:52:C1:E8:40:BF:4B:87:1D:B9:F6:65:2D:E1:9B:E3:B5:75:45:E3
            X509v3 Authority Key Identifier:
                keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/UVLB6EC_S4cdufZlLeGb47V1ReM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.169.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:d1:f8:9f:4f:f1:13:1e:1e:28:50:a2:cc:f3:96:df:ff:ec:
         df:3f:5f:1e:4d:86:18:74:49:7f:97:94:2a:6e:71:46:09:68:
         04:57:46:f8:2f:39:22:2f:f1:61:5e:4d:ca:7f:66:8b:66:72:
         8c:b0:11:ca:34:ca:be:77:68:5b:0f:77:57:a7:c7:5e:70:54:
         fe:ec:03:bb:31:1d:01:a8:b7:47:99:fc:89:1d:4e:48:3a:5a:
         5e:4f:de:ee:16:67:a1:1d:fe:08:9c:ef:b3:ba:49:88:b0:0d:
         23:9b:ee:f6:25:28:6b:6c:ac:c9:03:b9:bf:57:d3:ed:44:3d:
         43:59:38:0e:39:24:e5:58:de:4d:67:f8:ce:fc:2d:bf:03:ba:
         88:06:e2:ef:f4:2b:8a:25:ad:98:56:bd:18:96:82:6b:d7:07:
         f7:44:b9:39:c4:93:44:95:e0:ba:c0:93:78:f7:5c:4d:2c:94:
         74:0c:e7:a8:a9:66:b4:2d:be:70:2e:71:64:33:74:85:42:d4:
         c8:db:50:53:bd:6c:82:35:fc:ab:55:31:96:d1:9c:1b:93:ae:
         32:a4:a6:fd:59:a1:a9:fd:0c:29:c2:26:3c:46:7c:27:5d:9e:
         19:33:d2:e7:29:2c:cb:97:04:c5:47:b0:d7:9a:40:69:cf:89:
         f3:77:93:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYuQk7WHN9juQAhkB4e+A4pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NDE1NTgxODFmNzg2MzExOWJmNGExNTU0Yzc1ZGFiMWY2
YzUyOTIwHhcNMjUwNDEzMDgyNjU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTUyYzFlODQwYmY0Yjg3MWRiOWY2NjUyZGUxOWJlM2I1NzU0NWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c/xf9akduqwC+5kD8v7T3nE5D+b
2Wf00UdqXc8hrzxaAmRvL3kBEPI2TyMZO4GABXZ+RzCs/wR76kNlG1zN2iabvV5T
V1jQF3dky6Ob1R8XAnnWYmrzpa01Sln870sPj6EQfrVnOnQwC0ekRE1ioFP3FKEP
Ms1ETRJvJtga+kd+OLnvIfUL8AzKTi1OlyjubzX8aF9SkzkQDfERHzD6SPXgakvO
KJ7x8xYP//4xnkbNGiWpRjGiE6xGwpkgweV1M10YEE37VfK6ec22XDun4kx/SL4w
V1GcQoOg15FKvpxgX1L8quJciHovlb3om8G74WtRoUzMhRpQwmkhhATA5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFFSwehAv0uHHbn2ZS3hm+O1dUXjMB8GA1UdIwQY
MBaAFLVBVYGB94YxGb9KFVTHXasfbFKSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFVGVmdZSDNoakVadjBvVlZNZGRxeDlzVXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80ZGQxNjktOGRjYi00NjUzLThhMDMt
NTcxYjZjNjEyYmVjLzEvVVZMQjZFQ19TNGNkdWZabExlR2I0N1YxUmVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi80ZGQxNjktOGRjYi00NjUzLThhMDMtNTcxYjZjNjEyYmVj
LzEvdFVGVmdZSDNoakVadjBvVlZNZGRxeDlzVXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWakOMA0G
CSqGSIb3DQEBCwUAA4IBAQCa0fifT/ETHh4oUKLM85bf/+zfP18eTYYYdEl/l5Qq
bnFGCWgEV0b4LzkiL/FhXk3Kf2aLZnKMsBHKNMq+d2hbD3dXp8decFT+7AO7MR0B
qLdHmfyJHU5IOlpeT97uFmehHf4InO+zukmIsA0jm+72JShrbKzJA7m/V9PtRD1D
WTgOOSTlWN5NZ/jO/C2/A7qIBuLv9CuKJa2YVr0YloJr1wf3RLk5xJNEleC6wJN4
91xNLJR0DOeoqWa0Lb5wLnFkM3SFQtTI21BTvWyCNfyrVTGW0Zwbk64ypKb9WaGp
/QwpwiY8RnwnXZ4ZM9LnKSzLlwTFR7DXmkBpz4nzd5Ma
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:27 2025 by rpki-client on console.sobornost.net