Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/y_VdrldyiOysCbP_n_SofIR2xM4.roa
File:                     y_VdrldyiOysCbP_n_SofIR2xM4.roa (raw, json)
Hash identifier:          3Y8+s1Vq2DoJJO2anwZwA2qsfUgRB7+A97MBZINmwUE=
Subject key identifier:   CB:F5:5D:AE:57:72:88:EC:AC:09:B3:FF:9F:F4:A8:7C:84:76:C4:CE
Certificate issuer:       /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial:       0195ECBA093AA9BF469F20FAAC183AB93F25
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/y_VdrldyiOysCbP_n_SofIR2xM4.roa
Signing time:             Mon 31 Mar 2025 15:02:49 +0000
ROA not before:           Mon 31 Mar 2025 15:02:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     48910
IP address blocks:        31.186.250.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:ec:ba:09:3a:a9:bf:46:9f:20:fa:ac:18:3a:b9:3f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
        Validity
            Not Before: Mar 31 15:02:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cbf55dae577288ecac09b3ff9ff4a87c8476c4ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d1:86:27:ef:68:cd:99:03:23:a9:2b:bc:6d:
                    96:f5:ce:09:68:ea:3b:7b:41:29:8c:d6:63:bb:8a:
                    44:10:6d:29:cb:f2:f8:70:17:18:59:46:10:a2:d1:
                    d3:e5:c9:10:38:8f:60:89:d9:e3:13:f8:56:d2:92:
                    36:37:3b:fa:df:3d:3a:1e:d4:0f:3a:24:32:a8:70:
                    ea:ab:bf:8b:4d:ae:a7:7a:31:b6:7b:33:fa:9e:02:
                    1a:de:d2:65:10:97:74:00:d3:9a:d0:f9:49:62:51:
                    3c:f4:cd:e0:b5:e8:72:d2:c6:97:1a:81:b6:21:88:
                    d9:3b:52:20:fb:66:79:19:f7:84:07:d8:94:f6:f2:
                    71:a8:de:4e:1d:ec:c0:b5:03:96:ad:81:16:45:b1:
                    60:8a:41:aa:5f:3a:24:ef:40:ba:81:11:47:3b:3e:
                    8d:c6:fb:b0:5a:ed:48:2f:67:4b:bd:51:46:b8:5c:
                    0b:60:da:3f:b5:de:53:3a:f0:4c:d3:12:2c:d7:ae:
                    34:c3:60:70:ed:f1:39:23:39:90:a0:3b:bf:8f:a0:
                    7b:e2:d1:ed:71:0b:08:69:ca:47:7c:2b:79:07:53:
                    0a:d4:0d:3b:68:1d:a1:dc:4b:98:0a:c0:02:cf:f2:
                    7e:2e:b7:ba:a1:31:07:9e:85:93:42:63:81:2f:b0:
                    7e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F5:5D:AE:57:72:88:EC:AC:09:B3:FF:9F:F4:A8:7C:84:76:C4:CE
            X509v3 Authority Key Identifier:
                keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/y_VdrldyiOysCbP_n_SofIR2xM4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.186.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:d2:66:7d:d1:cd:17:5c:60:c7:08:74:cd:53:56:15:20:94:
         31:5f:7a:58:48:05:93:4a:4b:df:30:75:a3:b8:b7:ef:23:b5:
         ed:7c:05:dc:aa:1d:fb:d6:28:3b:6e:3f:79:bc:c4:4a:a9:3a:
         d5:b5:5b:16:03:d3:a1:09:35:35:27:d1:2b:64:ee:86:17:3d:
         62:2c:54:ea:43:8e:0b:8b:c2:c1:35:2c:4a:82:c8:53:a9:8b:
         cf:b7:80:17:3a:45:84:cf:8d:2d:6d:6a:12:5b:f5:2f:d0:41:
         88:00:ca:78:59:4c:94:fb:0c:ca:f3:ce:08:83:4d:95:ed:53:
         49:dc:98:89:51:10:32:5a:0b:85:64:e4:17:3d:b3:b4:59:5c:
         02:9b:6c:13:02:9f:45:86:f3:34:91:dd:76:87:77:50:5d:3f:
         12:c5:4d:ec:d2:19:6e:02:1e:0a:f4:9f:e1:ac:3d:0c:16:86:
         65:7e:47:53:22:80:f5:b2:43:a1:d3:cf:fd:2e:99:d4:73:c6:
         c2:e4:d5:1c:19:f5:e2:96:26:29:4f:37:d9:ae:d2:cc:c7:51:
         51:d9:35:13:d5:27:76:b4:83:57:87:67:aa:7d:71:7d:c1:66:
         d8:a1:ce:bf:e4:18:3d:42:67:4f:77:68:c8:77:83:91:77:c8:
         56:01:cd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:43 2025 by rpki-client on console.sobornost.net