Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/p_Vil1ZOh0DBWp7CeNdLsp-x-qg.roa
File:                     p_Vil1ZOh0DBWp7CeNdLsp-x-qg.roa (raw, json)
Hash identifier:          JOx6Yj0rD4+YKhnvf7l3pAqkkOGJYpZq2R4MdJmD8hQ=
Subject key identifier:   A7:F5:62:97:56:4E:87:40:C1:5A:9E:C2:78:D7:4B:B2:9F:B1:FA:A8
Certificate issuer:       /CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
Certificate serial:       0194228D880AA36661F32D7500D9E2DEF353
Authority key identifier: 25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/p_Vil1ZOh0DBWp7CeNdLsp-x-qg.roa
Signing time:             Wed 01 Jan 2025 15:48:08 +0000
ROA not before:           Wed 01 Jan 2025 15:48:08 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     24651
IP address blocks:        185.57.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:88:0a:a3:66:61:f3:2d:75:00:d9:e2:de:f3:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258623ecc8dcb913d10228a9460a86e660cb8fb2
        Validity
            Not Before: Jan  1 15:48:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a7f56297564e8740c15a9ec278d74bb29fb1faa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:bd:d0:92:ce:dd:07:7b:df:ed:36:05:25:
                    43:f8:97:6f:e6:ee:4b:9a:80:b7:63:32:3c:1e:58:
                    3e:00:01:f9:47:81:aa:7b:b5:c7:65:68:c7:b2:cd:
                    7f:f8:98:8f:ca:d9:e7:d5:a9:ce:ca:cd:dd:6b:38:
                    ec:bd:38:97:6a:e2:72:2e:7f:6e:77:90:7f:41:b2:
                    03:c9:21:b9:53:ad:0a:5e:16:18:24:02:14:0b:68:
                    f3:0c:7b:01:6c:a2:f7:11:2c:38:49:c5:0a:87:36:
                    a2:a4:f6:e2:55:17:62:8f:e1:10:77:65:31:d8:60:
                    33:eb:ca:39:bc:c0:f4:6b:09:c8:70:e3:f2:1e:83:
                    4a:d2:75:5c:58:33:01:d5:67:e9:ce:bc:1a:a6:5e:
                    52:0d:6f:93:95:af:53:7e:6a:53:4c:36:c2:be:fe:
                    d0:c1:e9:94:22:b8:c2:77:c8:79:1a:29:42:f9:b0:
                    67:40:6a:c0:4e:93:65:36:2a:ae:f9:af:96:28:be:
                    72:58:8a:23:94:9f:81:1a:8f:6a:06:d8:78:f7:85:
                    77:01:8d:ff:5f:e5:22:45:e7:84:8d:e8:b7:05:ce:
                    2d:5c:9e:fc:93:35:b7:c6:8e:11:b7:c5:ea:7a:d2:
                    f3:01:6c:f1:a8:e6:52:d5:33:48:24:28:7b:85:4f:
                    7f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F5:62:97:56:4E:87:40:C1:5A:9E:C2:78:D7:4B:B2:9F:B1:FA:A8
            X509v3 Authority Key Identifier:
                keyid:25:86:23:EC:C8:DC:B9:13:D1:02:28:A9:46:0A:86:E6:60:CB:8F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYYj7MjcuRPRAiipRgqG5mDLj7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/p_Vil1ZOh0DBWp7CeNdLsp-x-qg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/96ab95-c2fe-4b93-9a2e-5689ee06e14c/1/JYYj7MjcuRPRAiipRgqG5mDLj7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.57.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:e7:c5:e3:e7:7e:af:e1:8d:38:54:92:fa:67:39:e3:85:9e:
         f2:aa:d3:78:a9:46:f5:a7:27:9f:8c:bd:04:69:c3:59:77:9a:
         fb:bc:0a:58:81:5c:e4:99:4b:dd:6e:ed:2e:c8:32:9d:12:68:
         23:51:9e:91:a4:85:cd:2a:c5:08:87:83:8f:cf:a7:46:77:f6:
         3d:c6:2f:4a:6a:82:24:5d:3a:73:90:97:9b:7f:60:75:ef:89:
         ce:b2:00:00:1d:f0:fe:54:e2:8f:ee:df:f9:bc:4c:3e:96:18:
         24:24:19:e6:98:05:9e:0b:f1:05:8e:95:9e:cd:51:02:d8:18:
         7b:ae:dc:02:fd:d7:82:6a:dd:50:09:cc:e1:ee:6b:37:8c:b8:
         f1:07:0a:f5:be:56:8e:35:90:52:79:7f:39:b1:c1:c4:48:e9:
         b1:fe:b2:30:02:87:b3:c1:b9:5b:6b:0a:73:09:9b:89:77:80:
         cf:05:e4:64:1b:9c:95:96:99:d3:46:cf:7d:3b:e7:e2:05:72:
         20:c2:26:ee:8f:a7:ea:01:47:44:8e:52:d2:c7:0a:2b:8f:78:
         82:1c:98:a0:1e:85:17:b7:6f:90:1a:b7:ed:28:df:7a:d5:ac:
         ec:4c:93:4e:57:c8:44:2e:79:b2:84:bb:e1:90:44:71:87:b9:
         9e:3e:fe:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:59 2025 by rpki-client on console.sobornost.net