Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/GVUeOB4dXXqj9XML1jN57j3Df5M.roa
File:                     GVUeOB4dXXqj9XML1jN57j3Df5M.roa (raw, json)
Hash identifier:          Gudd1ItpySLdTVSh5GugJVCfXdpguWaKVtT1YrB4g6U=
Subject key identifier:   19:55:1E:38:1E:1D:5D:7A:A3:F5:73:0B:D6:33:79:EE:3D:C3:7F:93
Certificate issuer:       /CN=6798580bb843519c104420e59c0b5c2403414607
Certificate serial:       0194258FAED6A215F15985DDD8F04B2B24FB
Authority key identifier: 67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/GVUeOB4dXXqj9XML1jN57j3Df5M.roa
Signing time:             Thu 02 Jan 2025 05:49:20 +0000
ROA not before:           Thu 02 Jan 2025 05:49:20 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     24839
IP address blocks:        193.0.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:ae:d6:a2:15:f1:59:85:dd:d8:f0:4b:2b:24:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6798580bb843519c104420e59c0b5c2403414607
        Validity
            Not Before: Jan  2 05:49:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=19551e381e1d5d7aa3f5730bd63379ee3dc37f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0b:8f:59:b4:25:9a:c5:16:6f:52:25:0e:3c:
                    8e:bb:bc:aa:9a:21:ad:f4:1c:76:ab:76:e9:9a:88:
                    28:c8:39:96:7b:af:f6:6e:a6:df:2c:a0:50:d6:30:
                    13:ed:a1:27:23:fb:00:54:38:b4:27:2c:ce:88:5a:
                    f8:b3:06:5d:df:9b:fb:16:dc:d3:bd:26:76:54:9b:
                    12:9f:08:12:84:ea:56:b5:73:c2:9c:2f:24:5a:7d:
                    c5:64:9f:95:08:6c:4f:7f:dc:f2:6a:32:4e:5b:bc:
                    0d:15:92:09:d1:f7:e7:7b:4d:4b:a2:e2:d0:88:c1:
                    3d:01:9f:36:2c:c3:37:ce:c7:43:b9:8d:0d:e9:41:
                    b8:b6:b1:73:40:0e:ac:00:2e:54:a5:80:0a:34:61:
                    41:3e:21:b5:da:35:c5:b7:24:fd:75:1d:54:a1:2f:
                    04:dd:40:61:22:3c:88:dd:f1:59:58:4a:eb:8d:ab:
                    d6:26:03:94:1f:e6:f3:e0:85:3c:1c:76:32:86:b3:
                    78:54:f3:26:94:3a:31:53:2b:33:33:d0:f9:70:57:
                    47:84:41:41:e6:57:89:9b:ea:9d:76:c0:2c:94:74:
                    58:23:22:7f:bf:56:9e:98:84:ca:54:22:2c:a7:94:
                    29:40:d9:1f:a8:04:6a:fb:29:63:ac:c1:ce:c6:0a:
                    fc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:55:1E:38:1E:1D:5D:7A:A3:F5:73:0B:D6:33:79:EE:3D:C3:7F:93
            X509v3 Authority Key Identifier:
                keyid:67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/GVUeOB4dXXqj9XML1jN57j3Df5M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:3c:a5:38:10:e2:3f:bc:ef:e1:9d:80:98:7b:bb:05:8e:ca:
         53:93:75:0f:74:9d:b0:47:1d:99:56:1c:0e:6a:b4:a0:15:97:
         25:d7:a8:23:db:6e:fe:47:b5:f5:14:51:10:1f:60:42:d1:94:
         dd:40:c5:02:76:c6:df:19:93:07:21:d4:8a:c0:e3:4b:95:d4:
         64:ea:ad:33:f8:5f:09:36:61:f5:48:27:42:00:63:72:65:5d:
         e4:78:a4:d6:db:89:bf:d1:8b:f3:b8:3f:16:ee:d9:52:93:47:
         de:7c:a4:1a:3f:05:4b:5f:04:d6:4b:a8:9e:ae:3c:93:2a:63:
         21:c5:f2:cd:d3:4b:71:90:bc:d2:a2:4b:4c:0b:fc:42:0a:9c:
         52:d1:1d:e8:30:f5:22:43:2d:6c:64:be:e4:b5:52:43:f5:08:
         59:81:27:98:5c:78:eb:c2:e2:0f:ce:48:fb:7f:a5:89:db:c8:
         75:47:84:f9:de:22:5b:74:3d:fd:d1:b4:4a:6c:43:d0:d0:e8:
         5d:77:19:87:98:9e:6b:86:ca:53:7e:e2:c5:f1:da:4b:a5:40:
         f4:f4:a5:a9:b7:ee:bb:05:b7:9f:7a:7c:14:32:66:c9:56:68:
         d6:9b:ae:04:03:a9:fb:f2:21:89:70:f6:12:51:05:8a:e3:f2:
         0f:a6:2a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:41 2025 by rpki-client on console.sobornost.net