Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/gV-AdPUkFl_LfbEYHO3LEVqJDIE.roa
File:                     gV-AdPUkFl_LfbEYHO3LEVqJDIE.roa (raw, json)
Hash identifier:          oq8v8AZonrWakSkTnbhq+zFVagwWWAyJucXMeAftiMA=
Subject key identifier:   81:5F:80:74:F5:24:16:5F:CB:7D:B1:18:1C:ED:CB:11:5A:89:0C:81
Certificate issuer:       /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial:       019427B5B6039602B687D2A9CA3F8020F6E5
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/gV-AdPUkFl_LfbEYHO3LEVqJDIE.roa
Signing time:             Thu 02 Jan 2025 15:50:07 +0000
ROA not before:           Thu 02 Jan 2025 15:50:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     31715
IP address blocks:        45.149.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:b6:03:96:02:b6:87:d2:a9:ca:3f:80:20:f6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
        Validity
            Not Before: Jan  2 15:50:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=815f8074f524165fcb7db1181cedcb115a890c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5c:f2:b1:a8:ec:c7:9f:af:13:5b:9d:45:b0:
                    6a:d6:9e:f0:bc:9b:32:e2:78:de:6d:7c:37:1f:36:
                    0e:2d:42:88:5e:d1:94:61:ae:72:6c:9d:e0:62:e9:
                    c1:b9:23:fa:a7:b6:fd:bd:9f:6f:d1:6c:e3:73:24:
                    b0:25:5b:fc:08:43:56:56:b0:57:89:e1:f0:c4:ba:
                    90:78:b3:f1:b4:bf:2b:8f:15:79:49:f5:cd:2c:05:
                    41:18:7a:e7:b3:35:70:89:d7:89:2a:e6:1d:da:53:
                    d3:91:09:f2:e1:ef:dc:22:b3:28:bd:eb:e9:e6:fb:
                    e4:e0:c7:ee:04:08:26:36:57:1e:b6:e3:01:4a:54:
                    6e:01:86:96:95:ec:70:ed:6d:a0:83:f0:6e:8f:bc:
                    0f:b2:a4:e6:ee:4c:5f:71:d8:79:7f:70:05:4e:08:
                    0c:8d:de:e7:53:8a:04:dd:7b:fa:4d:4a:81:24:de:
                    0d:af:89:63:4a:79:bc:5b:62:f8:7c:b0:f1:0a:00:
                    6d:70:13:22:27:a1:f8:1e:99:92:cb:51:8f:e7:24:
                    78:92:6a:90:d0:ec:83:07:91:3c:af:3e:cc:78:a5:
                    9d:a3:df:ef:b4:13:f6:3d:55:79:d3:c0:94:35:57:
                    dc:60:53:14:0a:08:50:89:58:a6:80:f4:98:6e:d4:
                    b2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5F:80:74:F5:24:16:5F:CB:7D:B1:18:1C:ED:CB:11:5A:89:0C:81
            X509v3 Authority Key Identifier:
                keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/gV-AdPUkFl_LfbEYHO3LEVqJDIE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:b4:41:35:97:43:e1:44:92:1d:f3:fe:93:4c:44:58:8d:73:
         c2:10:eb:d6:7d:55:dd:e9:c9:7a:eb:d9:88:4a:e1:eb:46:c4:
         f5:8e:58:31:f5:12:da:5f:30:cf:50:d2:3b:e6:c5:61:88:39:
         80:01:ec:f3:65:88:6d:0b:61:72:33:91:db:a5:d0:84:da:55:
         73:0d:60:7b:6d:9b:19:a6:8a:84:60:74:9f:4c:f7:95:b5:4b:
         80:b0:10:60:e9:f6:a1:43:37:1b:87:ac:85:f7:77:b9:5d:82:
         6a:1a:4c:45:fa:69:22:10:4a:e1:6e:f3:d1:a3:23:1b:94:7c:
         e6:cf:8d:ad:ad:29:a5:4c:c0:00:f5:38:12:22:9c:01:c3:9e:
         96:3a:62:55:ad:1e:b2:74:43:9b:fb:69:ea:e9:89:ff:e5:8f:
         b9:fc:e6:b8:27:47:36:41:8e:11:75:6c:d8:92:d7:77:3a:2f:
         71:a0:ac:18:5a:1b:77:1b:9a:11:ff:3c:7c:80:f9:12:69:31:
         ec:3e:7d:c8:07:7a:95:a2:b7:ee:6c:70:f3:e2:5a:22:47:c6:
         e9:c0:76:59:8d:0c:94:66:91:fa:39:f1:56:15:a2:ee:e3:6f:
         30:40:46:db:ec:37:47:0b:f4:b6:44:c8:fb:fc:62:19:89:ed:
         5a:b6:b8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:54:10 2025 by rpki-client on console.sobornost.net