Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/vm3Dl8PWnyQRCRl-g25LEr6Yumc.roa
File:                     vm3Dl8PWnyQRCRl-g25LEr6Yumc.roa (raw, json)
Hash identifier:          fg1f8lzAXvWg8xURxOtkNfq5GyeXeTy/J7/16qNzsfI=
Subject key identifier:   BE:6D:C3:97:C3:D6:9F:24:11:09:19:7E:83:6E:4B:12:BE:98:BA:67
Certificate issuer:       /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial:       019423D7890AD843F0588946DA2612A611DB
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/vm3Dl8PWnyQRCRl-g25LEr6Yumc.roa
Signing time:             Wed 01 Jan 2025 21:48:35 +0000
ROA not before:           Wed 01 Jan 2025 21:48:35 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     199577
IP address blocks:        80.233.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:89:0a:d8:43:f0:58:89:46:da:26:12:a6:11:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
        Validity
            Not Before: Jan  1 21:48:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=be6dc397c3d69f241109197e836e4b12be98ba67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2f:2a:1a:5b:45:72:88:92:1a:a5:7d:41:59:
                    3e:aa:22:03:16:d4:ee:bf:71:0d:f0:fe:49:8f:08:
                    44:bc:39:0b:06:cb:51:a0:7e:65:5c:d6:e1:a0:b4:
                    c8:61:1c:e3:03:d5:18:e1:43:9f:e9:db:d4:40:e5:
                    be:d0:5a:1b:ee:d9:46:ce:7e:39:52:e5:e3:3a:57:
                    47:46:7d:c3:e0:cc:34:5b:4d:4c:96:74:7a:b9:7f:
                    6a:f3:cb:82:8e:a3:d0:98:f2:5e:c1:06:b6:96:0b:
                    01:66:46:93:97:58:6c:36:9d:74:ca:1a:18:88:14:
                    13:8a:cd:63:c0:84:21:9f:fa:37:33:7e:af:0d:1a:
                    4b:20:ec:3f:e0:4d:d5:54:b7:1f:6e:1f:12:61:90:
                    9a:27:7c:ad:e8:d2:d1:43:65:7e:75:11:57:aa:1c:
                    8c:9f:2a:2d:b6:ba:e0:38:4c:3d:6e:c3:a3:2b:39:
                    b1:0a:6e:0b:20:5a:88:4c:f1:bc:e1:2c:8e:fa:9c:
                    5a:c6:26:e0:b4:b2:55:5f:ba:d9:62:d0:30:1c:af:
                    70:88:d3:3d:85:2e:39:b0:fb:e8:80:ee:87:e0:9c:
                    ea:d3:3b:b8:93:7a:6c:01:a8:28:15:f0:0f:f0:3e:
                    3f:23:67:38:82:c0:df:9f:29:72:a6:91:6b:4b:c4:
                    72:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6D:C3:97:C3:D6:9F:24:11:09:19:7E:83:6E:4B:12:BE:98:BA:67
            X509v3 Authority Key Identifier:
                keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/vm3Dl8PWnyQRCRl-g25LEr6Yumc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.233.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:93:a4:d3:a8:08:e8:74:ce:fc:bc:a2:d4:fd:fc:39:8f:ad:
         e6:e7:82:a6:40:fe:58:2b:de:83:7c:84:b5:19:1a:4e:9b:2d:
         41:7e:67:63:9a:f8:63:77:b3:a0:cb:cf:e8:eb:42:dc:30:4f:
         47:e1:db:a6:27:b0:f0:2b:c4:7c:12:2f:e7:7a:1c:1d:59:3f:
         1e:eb:56:b3:91:2f:57:13:4e:d2:16:97:70:44:ac:86:fc:62:
         86:86:99:91:eb:bd:d3:74:9d:a0:27:6c:38:d9:7d:d8:22:c9:
         93:39:c7:7c:bd:c7:72:3a:63:29:ec:76:a7:17:21:70:d1:0e:
         7e:5d:a9:01:8b:e0:bc:22:b9:5e:63:5f:31:80:96:f0:c5:8d:
         0f:bd:25:54:ab:7e:4b:e2:b4:af:29:3a:7f:ce:ad:c7:ba:ac:
         b3:40:15:9c:54:80:84:f5:b7:5a:fe:41:8c:6e:ac:b0:3d:9a:
         a3:6e:3c:6a:51:d2:57:7c:97:2e:50:0c:ba:48:f0:d0:b2:78:
         a6:b8:bc:7f:9b:5d:17:30:7b:4c:c8:14:1e:69:bb:56:d8:aa:
         db:b1:7c:69:b9:72:92:f6:26:2a:fd:a8:6f:ed:05:b8:4c:73:
         a1:e4:fb:34:53:59:2d:0d:fc:f2:fa:96:6f:dc:21:1a:07:ca:
         5d:5a:23:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:47 2025 by rpki-client on console.sobornost.net