Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/LsDv-O1id1Z_r-P1VDDoKMp-HFs.roa
File:                     LsDv-O1id1Z_r-P1VDDoKMp-HFs.roa (raw, json)
Hash identifier:          S7695EKXW5oE911b275MWPbjxN0m3ZToZZcyj6qkn8c=
Subject key identifier:   2E:C0:EF:F8:ED:62:77:56:7F:AF:E3:F5:54:30:E8:28:CA:7E:1C:5B
Certificate issuer:       /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial:       019423D78BDDCE9D0DAAB0D8E1496852BAB0
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/LsDv-O1id1Z_r-P1VDDoKMp-HFs.roa
Signing time:             Wed 01 Jan 2025 21:48:36 +0000
ROA not before:           Wed 01 Jan 2025 21:48:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212197
IP address blocks:        94.100.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:8b:dd:ce:9d:0d:aa:b0:d8:e1:49:68:52:ba:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
        Validity
            Not Before: Jan  1 21:48:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2ec0eff8ed6277567fafe3f55430e828ca7e1c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0a:be:5b:5b:47:3c:6c:96:10:00:fb:11:39:
                    64:3c:3e:d8:b6:2f:8f:d2:d6:34:a6:9b:3e:ea:d2:
                    8e:6e:25:7c:1f:7d:fc:0b:22:c8:92:b7:b6:b1:a8:
                    f6:a7:5f:78:d8:64:5b:59:64:93:c4:61:fa:e3:6e:
                    f2:67:a8:8a:24:f4:8b:78:b7:30:62:5b:a1:f3:ac:
                    21:77:0c:22:85:e5:8a:96:d2:bb:67:1a:1a:ab:40:
                    7e:10:51:75:dc:c5:87:93:7a:8f:35:1b:31:90:38:
                    43:2f:48:01:18:d3:00:12:9f:bb:62:a0:0d:fd:d8:
                    6f:d9:75:4f:b9:f8:07:35:1c:9f:5a:d0:4c:10:4c:
                    d0:df:de:4c:40:90:94:29:15:ed:4f:32:e0:89:75:
                    de:af:96:22:be:2c:36:b7:fc:7a:97:05:c2:25:12:
                    36:e8:15:24:84:df:be:29:30:64:16:ae:12:7b:53:
                    8e:aa:e8:5e:26:15:db:d4:1e:c5:03:01:01:e3:84:
                    8f:52:02:82:9c:14:33:e6:a6:70:8e:28:3d:43:75:
                    0d:3e:62:52:b7:ee:41:98:6e:99:65:28:60:88:22:
                    d7:57:9f:b8:e7:f8:0a:d4:5b:78:de:3e:00:9d:d8:
                    f2:a4:0d:08:23:4e:6e:73:7a:ab:48:46:16:a1:b5:
                    00:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C0:EF:F8:ED:62:77:56:7F:AF:E3:F5:54:30:E8:28:CA:7E:1C:5B
            X509v3 Authority Key Identifier:
                keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/LsDv-O1id1Z_r-P1VDDoKMp-HFs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.100.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:76:4c:27:cf:95:8c:28:ca:fe:41:0b:67:c2:c0:16:5a:58:
         4e:39:3a:8e:ec:79:24:d6:e1:d5:db:f4:6e:49:a8:3d:8a:08:
         fa:1f:33:00:67:b2:cf:a9:4a:2b:79:04:11:9f:24:e8:08:90:
         cb:1c:fe:2e:36:b9:b1:f1:c7:d5:50:85:28:23:69:16:29:d6:
         89:38:76:f0:d4:31:0a:24:38:66:e6:f0:ac:d6:30:f2:a2:4d:
         e2:eb:ec:c2:bf:5b:24:3f:2f:2d:94:90:3e:67:b7:83:b5:11:
         5c:e3:6b:e9:fa:f2:03:fa:75:ad:45:55:91:09:84:2d:15:33:
         b0:96:a4:69:a9:b6:9f:97:52:01:ae:0a:0d:5d:5d:c9:e7:c5:
         2c:2f:8a:cd:c1:04:77:5c:88:f8:95:a9:5f:4c:54:dd:f3:bd:
         19:4e:b1:46:1c:a8:d4:14:79:76:70:6a:9c:8a:9b:53:9f:49:
         d0:31:7e:a6:21:2d:95:20:c6:b9:fe:be:89:4f:4b:86:6d:6e:
         76:fe:af:0c:60:ba:89:55:dc:d3:19:75:b6:21:99:4f:18:06:
         1b:49:cb:22:f7:cb:ce:a3:5c:68:3a:17:d2:68:1b:5a:74:c9:
         a9:0c:ca:81:00:c2:23:90:6b:35:3b:1b:dc:87:6b:78:39:a8:
         47:71:0f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:47 2025 by rpki-client on console.sobornost.net