Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/g5Vn880XXpeU5DJfsGcy-Urcv2M.roa
File:                     g5Vn880XXpeU5DJfsGcy-Urcv2M.roa (raw, json)
Hash identifier:          OCJJ4xo5f+mpBB7aa28MDI5Ug57SbY/lCFK1ZpNzZKw=
Subject key identifier:   83:95:67:F3:CD:17:5E:97:94:E4:32:5F:B0:67:32:F9:4A:DC:BF:63
Certificate issuer:       /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial:       0194266BDE3FD0397D74B6487BE39B36F4F0
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/g5Vn880XXpeU5DJfsGcy-Urcv2M.roa
Signing time:             Thu 02 Jan 2025 09:49:50 +0000
ROA not before:           Thu 02 Jan 2025 09:49:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     12962
IP address blocks:        193.178.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:de:3f:d0:39:7d:74:b6:48:7b:e3:9b:36:f4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
        Validity
            Not Before: Jan  2 09:49:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=839567f3cd175e9794e4325fb06732f94adcbf63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3f:78:36:f4:7b:58:ab:8a:fc:51:fa:13:6b:
                    59:49:2b:9b:c8:c8:80:9c:74:35:fa:02:20:b7:9c:
                    76:ec:e5:6c:bc:41:db:ec:33:a5:9f:b5:2d:5e:92:
                    d2:fd:e0:1a:00:30:40:de:73:1e:ea:ff:ae:c6:ec:
                    9a:fb:5d:6d:0b:3b:b5:6b:9c:b4:0c:1c:aa:31:31:
                    2b:9a:e1:4d:04:ff:ef:c4:48:9e:0c:7c:5a:f3:63:
                    05:59:7f:fb:88:0c:cf:9c:fb:5f:a1:dc:24:eb:76:
                    54:75:ff:33:06:35:4a:3f:d9:fd:09:47:f6:3a:4c:
                    45:3e:e2:52:37:ae:da:7d:35:11:02:92:33:35:01:
                    90:a6:79:57:f8:51:c6:54:c7:27:6d:9f:92:bb:08:
                    84:bd:4e:d9:5c:cd:12:40:fb:2c:93:44:f3:0e:b6:
                    50:e3:d8:b7:ea:51:65:94:f4:e1:3d:af:f2:48:e7:
                    11:9e:d7:24:71:ce:e9:af:90:21:52:4e:15:ed:c3:
                    ee:f0:f3:e4:e1:37:14:0b:76:cc:07:56:8e:7a:c0:
                    b2:91:44:3b:4d:2e:91:00:a7:20:97:99:e6:1a:d7:
                    b0:f3:3a:46:94:10:69:1b:7e:9a:31:1a:71:ff:38:
                    a4:d9:bf:0e:8f:12:f7:8c:8f:45:16:c3:1a:5a:a5:
                    5c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:95:67:F3:CD:17:5E:97:94:E4:32:5F:B0:67:32:F9:4A:DC:BF:63
            X509v3 Authority Key Identifier:
                keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/g5Vn880XXpeU5DJfsGcy-Urcv2M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:ea:aa:cb:52:0d:a0:15:74:49:f4:e9:28:96:7b:23:ea:14:
         31:22:9c:4f:a5:e4:6d:b9:ab:fb:7b:d1:8e:8c:6e:71:34:2d:
         e5:1d:3b:11:a4:26:d5:70:58:81:56:45:f3:be:30:88:db:81:
         9a:e8:77:0b:30:a6:c8:8b:ea:5d:31:4d:c5:3e:50:68:a3:28:
         3b:22:99:d8:51:47:37:e6:4b:c4:98:e0:e8:c3:7e:60:80:4a:
         c2:eb:92:89:a0:0c:ee:50:3c:4c:fb:c3:7e:03:34:20:b9:8b:
         e1:0a:a7:dd:ac:b3:05:5b:16:e7:b3:1a:4f:a7:18:2d:78:53:
         88:f7:e2:c0:66:3c:fc:3b:f1:a2:76:ce:3f:27:99:3c:8f:6a:
         9f:9c:fa:64:53:ec:6b:45:b4:82:f3:ec:72:14:6c:1e:0a:ad:
         a4:fe:df:d5:b7:50:ea:c4:b6:67:95:a2:67:85:16:25:b0:45:
         ff:de:fa:e7:b4:5a:8e:0d:15:e0:34:c7:82:4b:6a:da:06:00:
         d8:74:95:50:64:c7:2f:c1:19:2a:e0:5c:7d:50:d9:72:c8:df:
         47:39:eb:32:e8:f9:f7:4b:51:eb:06:51:31:a3:de:94:0f:98:
         ff:c8:4c:df:c3:16:9e:1a:8a:b1:4b:0c:fb:68:cb:6c:42:cb:
         05:a8:c6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:43 2025 by rpki-client on console.sobornost.net