Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/wVkI_Szt3pr4XGdNEoWckhxFxCk.roa
File:                     wVkI_Szt3pr4XGdNEoWckhxFxCk.roa (raw, json)
Hash identifier:          g7wpqUCSc32Jx8X0zDboKVFnJQIoCmmZncv7BRTwxHA=
Subject key identifier:   C1:59:08:FD:2C:ED:DE:9A:F8:5C:67:4D:12:85:9C:92:1C:45:C4:29
Certificate issuer:       /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Certificate serial:       019421445EC1B8BEAC075E9D1F45F84B0550
Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/wVkI_Szt3pr4XGdNEoWckhxFxCk.roa
Signing time:             Wed 01 Jan 2025 09:48:36 +0000
ROA not before:           Wed 01 Jan 2025 09:48:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     35530
IP address blocks:        93.126.64.0/18 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:5e:c1:b8:be:ac:07:5e:9d:1f:45:f8:4b:05:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
        Validity
            Not Before: Jan  1 09:48:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c15908fd2cedde9af85c674d12859c921c45c429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6f:8b:1a:1e:11:b3:9b:6d:7f:56:57:8c:4f:
                    d3:50:4b:36:01:c4:60:46:91:fb:51:06:4e:c2:b8:
                    a9:46:89:97:e9:0a:69:1b:be:b6:7b:cc:0d:25:9b:
                    c4:48:e1:98:4d:da:1a:57:36:05:13:f3:2e:1a:76:
                    11:5f:01:e6:56:b8:7c:6d:cd:5f:20:34:28:fc:eb:
                    81:b5:b4:c1:2a:82:dc:6a:b2:b8:be:b4:2a:e1:d7:
                    f3:ee:4a:9c:aa:50:16:47:3c:b4:55:5f:07:7a:80:
                    3e:34:b8:8e:cb:47:12:a5:9c:76:5b:f9:db:ef:1d:
                    58:fc:bc:ef:f6:c5:41:71:ef:e1:97:17:95:8f:5b:
                    27:a1:77:91:b1:b1:fc:5b:b4:6f:9f:00:41:d1:d8:
                    04:b9:6c:ce:f3:07:a7:5e:d2:f7:01:d6:1e:f1:4f:
                    1a:30:3b:5a:2d:cb:54:28:43:55:88:f8:12:c7:00:
                    bb:42:67:c4:0e:28:b2:e1:9e:4e:9f:52:bb:7a:ad:
                    9a:01:d8:74:9c:c6:29:c8:cc:85:83:81:66:4a:1c:
                    d0:20:ae:6f:12:10:35:c5:20:b7:b5:9b:fa:2a:f4:
                    17:64:62:45:f3:45:d5:d0:28:cc:82:b6:18:49:48:
                    21:1f:e1:06:1c:b7:13:35:87:69:e5:65:34:a0:90:
                    f8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:59:08:FD:2C:ED:DE:9A:F8:5C:67:4D:12:85:9C:92:1C:45:C4:29
            X509v3 Authority Key Identifier:
                keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/wVkI_Szt3pr4XGdNEoWckhxFxCk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.126.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2e:a8:5e:63:c6:d6:ba:c1:ec:39:6a:b4:d2:fd:5c:b8:3f:ce:
         ab:94:11:4c:92:9f:e3:ad:b3:27:c1:db:12:3a:2a:59:b8:e2:
         45:93:b4:37:27:08:8c:aa:80:51:d6:33:fb:59:17:00:c8:c4:
         99:d5:f4:a9:67:df:72:53:84:a8:da:d4:69:98:37:18:29:20:
         8c:fe:c0:52:89:d0:88:f5:e9:e9:66:5c:9c:5a:3f:8c:8f:9c:
         a5:d3:65:92:6d:5a:f0:22:ae:e7:20:88:24:91:3b:17:b4:65:
         00:eb:87:15:59:82:00:f3:27:09:39:85:79:92:7d:33:18:6e:
         db:dd:1c:b7:fe:7d:7a:95:ca:b1:69:39:7d:bd:9a:dd:a3:c4:
         f8:82:30:96:0f:7a:8e:3a:f7:b1:1f:dd:b6:a3:94:3f:5b:53:
         96:b3:97:dd:03:6d:5d:72:85:fd:27:e0:7b:89:86:32:df:44:
         2d:c0:b3:a5:29:5d:dd:85:ec:55:f7:17:11:64:4f:03:e6:5c:
         79:8e:c5:dd:1d:69:9a:4a:7f:51:46:db:a4:98:b5:09:fc:59:
         56:2c:e5:84:0c:dd:37:5a:b5:4f:62:16:f6:a9:dd:3f:9e:b6:
         22:2a:a7:ff:83:6c:a1:6b:1e:86:cd:d5:e8:03:b8:ad:06:57:
         1e:28:26:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:49 2025 by rpki-client on console.sobornost.net