Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/eeNIld-CwPVcfEVGzgUCMqVFpyY.roa
File:                     eeNIld-CwPVcfEVGzgUCMqVFpyY.roa (raw, json)
Hash identifier:          uxo9SuC4/NypmA3tJNrIjhVovnUTOlUmyteCbIDqups=
Subject key identifier:   79:E3:48:95:DF:82:C0:F5:5C:7C:45:46:CE:05:02:32:A5:45:A7:26
Certificate issuer:       /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial:       01962B45D8F54B1376270A2D527EFF40E45D
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/eeNIld-CwPVcfEVGzgUCMqVFpyY.roa
Signing time:             Sat 12 Apr 2025 18:31:59 +0000
ROA not before:           Sat 12 Apr 2025 18:31:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213893
IP address blocks:        77.239.127.0/24 maxlen: 24
                          193.23.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2b:45:d8:f5:4b:13:76:27:0a:2d:52:7e:ff:40:e4:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
        Validity
            Not Before: Apr 12 18:31:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=79e34895df82c0f55c7c4546ce050232a545a726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2a:bf:cd:69:f7:4d:29:74:9b:4a:ca:3f:9a:
                    44:89:f1:34:7b:65:36:ce:fc:74:18:65:fc:42:61:
                    c8:22:f9:99:db:3e:c5:df:49:09:49:7f:bc:b7:80:
                    b5:50:af:85:76:49:ca:0a:ec:f4:25:70:a3:96:38:
                    02:3d:5d:f3:c8:33:dd:fd:5f:bf:7a:80:3e:c3:12:
                    a1:86:8b:ee:d4:c6:9a:c7:0e:cb:5f:4d:cf:0f:38:
                    ff:51:8b:fd:02:55:c0:98:96:e5:e7:0e:3c:b1:5d:
                    f5:78:31:22:98:40:6c:6a:d7:f0:50:d2:29:6c:9f:
                    61:55:9b:80:23:93:de:69:84:a5:67:42:f1:06:ea:
                    88:db:1a:85:8e:b2:15:2c:29:cd:76:3e:79:83:21:
                    3a:09:16:54:5e:98:57:10:25:8a:2f:13:d3:48:1c:
                    39:68:6c:38:5e:55:fb:1a:ae:b0:ae:b7:2a:08:a2:
                    05:29:eb:b3:d5:df:f7:83:9d:28:b2:28:e8:72:a7:
                    a8:0f:32:10:f6:bd:b0:d5:89:62:8c:93:6a:96:e7:
                    1c:6d:cf:09:fd:e7:22:dd:1a:7f:aa:da:59:ad:e1:
                    7d:0d:d8:24:a7:ea:c9:7e:2a:af:13:05:5d:e4:21:
                    eb:9b:b8:17:7c:1d:c8:9c:33:3c:7d:67:68:93:32:
                    f1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E3:48:95:DF:82:C0:F5:5C:7C:45:46:CE:05:02:32:A5:45:A7:26
            X509v3 Authority Key Identifier:
                keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/eeNIld-CwPVcfEVGzgUCMqVFpyY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.239.127.0/24
                  193.23.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:58:4b:62:ee:54:ed:3f:17:65:df:32:be:01:88:54:b9:4f:
         fa:d4:91:bf:8a:c2:22:c3:57:db:a6:3c:b1:70:b3:6e:7d:11:
         7c:c0:d5:6e:98:03:1e:7d:32:43:41:31:79:54:02:1f:07:d1:
         1f:18:1a:b1:b1:6e:fb:36:66:c0:2c:e4:db:69:fa:ec:1f:8f:
         22:1f:a2:cf:d4:a8:61:c7:f6:3d:6c:86:a1:28:2e:ce:8c:dd:
         9b:09:f6:c1:91:07:fd:f1:a6:a3:5a:42:ca:1b:04:ca:de:f6:
         f1:36:2e:41:25:b8:94:85:50:0a:9e:b6:ea:85:7b:0f:d5:ce:
         77:ab:5e:3e:d4:a4:be:00:8f:60:25:4b:13:83:94:7c:c9:ee:
         10:6b:75:af:cf:3a:1e:83:49:00:77:78:82:c4:18:40:9a:1e:
         0d:7a:23:82:93:c9:be:51:39:2c:c2:8c:96:8a:6d:e2:ad:5a:
         7c:65:54:cb:4f:fb:66:2c:84:c0:3a:27:40:3a:43:c3:f9:d2:
         69:1f:d9:d5:95:41:01:e2:e6:9c:4b:da:b6:14:ce:f7:3b:3d:
         b5:27:56:67:5f:9d:94:5e:89:22:bc:c0:ec:42:7b:f7:3b:01:
         e2:4b:e1:55:a4:a9:f9:ee:2d:8e:46:a8:53:67:5e:d1:ea:cd:
         72:58:a0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:58 2025 by rpki-client on console.sobornost.net