Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fxqbqWY2LUrAvOZUAqJdbZwPcwM.roa
File:                     fxqbqWY2LUrAvOZUAqJdbZwPcwM.roa (raw, json)
Hash identifier:          WZWzCPPGHBAsyBePw9E7LODmLxhDXcR81S2BWQDRwTs=
Subject key identifier:   7F:1A:9B:A9:66:36:2D:4A:C0:BC:E6:54:02:A2:5D:6D:9C:0F:73:03
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       0196268F2E0CBC0E9ED887E88E15A3B89458
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fxqbqWY2LUrAvOZUAqJdbZwPcwM.roa
Signing time:             Fri 11 Apr 2025 20:33:59 +0000
ROA not before:           Fri 11 Apr 2025 20:33:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213542
IP address blocks:        2a06:1185:10::/48 maxlen: 48
                          2a09:17c0:8743::/48 maxlen: 48
                          2a09:17c1:99::/48 maxlen: 48
                          2a0a:2d06:11::/48 maxlen: 48
                          2a0c:7886:123::/48 maxlen: 48
                          2a0e:15c5:11::/48 maxlen: 48
                          2a0e:1a83:22::/48 maxlen: 48
                          2a0e:c785:273::/48 maxlen: 48
                          2a0e:f600::/48 maxlen: 48
                          2a0e:f603:33::/48 maxlen: 48
                          2a0f:1206:88::/48 maxlen: 48
                          2a0f:1581:100::/48 maxlen: 48
                          2a0f:1584:9::/48 maxlen: 48
                          2a0f:1e84:3f::/48 maxlen: 48
                          2a0f:3046:85::/48 maxlen: 48
                          2a0f:3d80:49ff::/48 maxlen: 48
                          2a0f:3d86:77::/48 maxlen: 48
                          2a0f:7d04:1::/48 maxlen: 48
                          2a0f:bc00:100::/48 maxlen: 48
                          2a0f:df45:25b::/48 maxlen: 48
                          2a0f:df45:fc78::/48 maxlen: 48
                          2a0f:df45:fe5e::/48 maxlen: 48
                          2a0f:e1c1:11::/48 maxlen: 48
                          2a0f:e202:100::/48 maxlen: 48
                          2a0f:e6c6:103::/48 maxlen: 48
                          2a0f:e7c3:1::/48 maxlen: 48
                          2a0f:e7c6:44::/48 maxlen: 48
                          2a0f:e844:33::/48 maxlen: 48
                          2a0f:ea43:1::/48 maxlen: 48
                          2a0f:ea44:8691::/48 maxlen: 48
                          2a0f:ee03:56::/48 maxlen: 48
                          2a10:67c2:d6::/48 maxlen: 48
                          2a12:ac44:8426::/48 maxlen: 48
                          2a12:ecc3:1312::/48 maxlen: 48
                          2a13:c900:fd1a::/48 maxlen: 48
                          2a13:e107:3d7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:26:8f:2e:0c:bc:0e:9e:d8:87:e8:8e:15:a3:b8:94:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Apr 11 20:33:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7f1a9ba966362d4ac0bce65402a25d6d9c0f7303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0e:23:16:7c:64:44:85:6a:9f:5f:99:15:11:
                    c4:da:43:7a:d8:26:af:47:3e:31:35:a4:e4:c9:81:
                    0f:92:60:a9:cf:d0:1f:bb:20:c7:54:fa:fc:23:96:
                    ae:20:76:f8:e9:69:74:21:6d:02:7c:8e:83:03:7b:
                    05:47:81:ad:3b:77:63:4c:74:69:6d:bd:7d:4b:7c:
                    74:7d:b4:8b:35:84:ed:63:06:81:08:79:ec:51:5e:
                    c9:31:6e:74:4f:b5:90:d0:c4:ba:93:e7:09:19:32:
                    34:e1:a6:32:8c:43:d8:17:41:8a:ea:ea:2e:db:aa:
                    19:99:91:03:12:d9:90:35:e1:de:b8:a3:09:01:78:
                    14:09:bf:ef:a0:64:e4:20:3b:60:10:5a:a5:67:52:
                    ff:61:8e:62:4c:c8:ba:19:5f:4b:73:23:12:60:36:
                    f4:3f:ef:26:e0:94:88:e0:59:8b:6c:f5:f1:6a:88:
                    2c:85:28:e2:06:45:4c:8a:20:24:f9:72:69:ea:de:
                    44:c4:2d:a1:10:88:e2:db:87:3b:b3:2f:24:2d:c6:
                    de:66:f5:e9:ca:c0:ad:cb:b4:05:3f:ee:57:12:49:
                    f3:33:51:3a:15:b6:cb:d3:50:8d:39:4a:f4:c6:01:
                    92:54:27:37:e7:7b:90:de:71:72:6d:7a:fe:52:38:
                    c6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1A:9B:A9:66:36:2D:4A:C0:BC:E6:54:02:A2:5D:6D:9C:0F:73:03
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fxqbqWY2LUrAvOZUAqJdbZwPcwM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1185:10::/48
                  2a09:17c0:8743::/48
                  2a09:17c1:99::/48
                  2a0a:2d06:11::/48
                  2a0c:7886:123::/48
                  2a0e:15c5:11::/48
                  2a0e:1a83:22::/48
                  2a0e:c785:273::/48
                  2a0e:f600::/48
                  2a0e:f603:33::/48
                  2a0f:1206:88::/48
                  2a0f:1581:100::/48
                  2a0f:1584:9::/48
                  2a0f:1e84:3f::/48
                  2a0f:3046:85::/48
                  2a0f:3d80:49ff::/48
                  2a0f:3d86:77::/48
                  2a0f:7d04:1::/48
                  2a0f:bc00:100::/48
                  2a0f:df45:25b::/48
                  2a0f:df45:fc78::/48
                  2a0f:df45:fe5e::/48
                  2a0f:e1c1:11::/48
                  2a0f:e202:100::/48
                  2a0f:e6c6:103::/48
                  2a0f:e7c3:1::/48
                  2a0f:e7c6:44::/48
                  2a0f:e844:33::/48
                  2a0f:ea43:1::/48
                  2a0f:ea44:8691::/48
                  2a0f:ee03:56::/48
                  2a10:67c2:d6::/48
                  2a12:ac44:8426::/48
                  2a12:ecc3:1312::/48
                  2a13:c900:fd1a::/48
                  2a13:e107:3d7::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:3d:e4:4a:06:46:11:7e:3f:22:6d:3e:dd:84:e6:59:39:37:
         20:de:9e:2c:ae:84:d4:25:bf:78:2e:5a:bb:69:9f:89:d1:33:
         07:64:7f:a7:22:06:a6:22:ae:22:2e:77:14:21:10:fc:b3:c6:
         4b:83:18:7d:63:f4:5d:8f:ec:ea:e2:61:ad:96:fb:61:aa:0e:
         69:2c:b8:42:9c:00:98:fc:18:3d:83:7e:93:52:46:d6:90:53:
         89:bc:25:87:19:1c:a3:f9:62:53:37:93:b0:69:ec:de:cd:db:
         82:b1:75:ed:d3:a9:ff:31:ec:d0:33:e7:e1:35:4c:8e:c0:30:
         4c:43:c4:ce:02:2a:f4:79:52:53:fc:37:29:80:85:60:33:cb:
         52:42:23:b2:06:80:cd:80:a8:81:60:41:9b:7f:ee:ad:dd:09:
         c7:c2:3d:bb:ed:7d:a5:82:ff:77:ed:d6:d7:60:cf:b0:94:77:
         95:32:6c:04:09:37:a3:9c:3c:98:3e:a1:48:f9:10:f8:f7:af:
         0c:a3:95:5b:63:cc:1a:10:e8:ad:ce:c6:c8:a6:8d:3c:45:9c:
         ad:f4:4c:7c:73:42:45:d9:c8:02:0d:82:97:bb:18:01:0e:00:
         59:af:75:e2:4c:a1:37:35:16:87:77:92:6f:39:cd:5f:f9:62:
         73:40:9a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:56 2025 by rpki-client on console.sobornost.net