Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/pWjzKwcY2D4VzPoP5dA0NiOjP1E.roa
File:                     pWjzKwcY2D4VzPoP5dA0NiOjP1E.roa (raw, json)
Hash identifier:          COXcfdNp3EzT11F9o1Nm0eGFt9uQRA5Y8hfNNYTi82c=
Subject key identifier:   A5:68:F3:2B:07:18:D8:3E:15:CC:FA:0F:E5:D0:34:36:23:A3:3F:51
Certificate issuer:       /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial:       01942823DF0411133B73117FD371922CC5D3
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/pWjzKwcY2D4VzPoP5dA0NiOjP1E.roa
Signing time:             Thu 02 Jan 2025 17:50:26 +0000
ROA not before:           Thu 02 Jan 2025 17:50:26 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     56851
IP address blocks:        45.83.192.0/22 maxlen: 24
                          62.192.154.0/24 maxlen: 24
                          176.105.233.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:23:df:04:11:13:3b:73:11:7f:d3:71:92:2c:c5:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
        Validity
            Not Before: Jan  2 17:50:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a568f32b0718d83e15ccfa0fe5d0343623a33f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2a:6e:6a:6f:20:17:63:34:94:25:12:6f:15:
                    db:9a:a6:91:18:6a:63:b7:91:0f:04:eb:45:65:4e:
                    68:0f:32:56:06:82:61:9a:5e:a7:e7:7a:30:01:07:
                    24:c2:ea:02:39:de:fd:2c:ac:fd:59:91:4d:56:9b:
                    f6:34:13:89:98:5c:a3:06:da:db:e0:9f:1a:c3:66:
                    bf:ad:dc:51:b6:ae:25:71:f3:5e:80:0d:e1:ef:3d:
                    0c:92:f8:55:ab:f5:1d:9d:9c:49:a4:3e:cf:9b:99:
                    e2:f3:88:b5:77:cf:77:c9:78:0d:02:d6:96:bb:c6:
                    ef:7c:90:8a:95:a1:a6:d5:7c:e6:ef:8e:58:82:0c:
                    6c:20:8f:86:6f:7e:49:ca:9f:c9:22:de:2b:06:7a:
                    f1:a4:e5:f8:a8:d9:14:22:4e:2b:02:cb:3e:21:ca:
                    7f:ec:74:04:8e:85:31:55:ad:9e:11:ff:10:eb:7e:
                    3f:92:fe:3a:c6:67:6f:a0:94:cd:4c:cf:d7:80:a2:
                    b8:6e:1d:9b:45:27:78:c4:2f:48:53:0c:49:64:15:
                    9a:7e:27:b0:38:32:69:6d:8c:bc:37:af:72:80:0f:
                    ea:00:b1:eb:3d:f2:a6:5f:53:d0:50:ec:95:10:8f:
                    6b:0a:46:b5:13:32:5b:55:96:02:6c:e1:7c:ca:9a:
                    62:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:68:F3:2B:07:18:D8:3E:15:CC:FA:0F:E5:D0:34:36:23:A3:3F:51
            X509v3 Authority Key Identifier:
                keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/pWjzKwcY2D4VzPoP5dA0NiOjP1E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.83.192.0/22
                  62.192.154.0/24
                  176.105.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:a5:e2:bb:aa:f0:2c:0a:58:2d:ab:10:2e:ac:cb:53:5e:22:
         0b:06:66:45:c4:6b:23:d5:b5:92:05:2b:31:77:14:98:69:9d:
         99:4f:a5:b3:50:05:22:fc:d1:ff:38:0b:cd:0f:a0:2b:f1:c6:
         fe:c7:13:34:b5:0c:48:5c:9f:b6:09:f8:c1:70:b2:3b:d2:23:
         73:bf:47:3c:c3:b3:bc:5f:2e:43:fb:09:a5:49:48:3b:f0:10:
         0f:c9:aa:03:8e:c9:54:54:95:40:18:b9:f0:e0:b7:fa:04:66:
         10:a5:4a:62:84:f8:a6:d1:f5:e7:c8:67:d0:df:b6:77:a5:f9:
         24:68:50:26:bc:1b:12:26:89:ba:5c:95:63:b9:2a:44:65:d6:
         fe:ff:f8:b6:79:a6:3d:8a:67:8f:55:20:6a:e4:ee:66:87:8d:
         6e:a3:89:5a:87:1f:c8:e6:43:34:e2:fc:c6:8e:12:99:10:1c:
         ae:be:40:d1:8c:5a:0c:ef:cc:78:5c:03:98:f7:9e:49:03:27:
         d5:41:88:a0:62:d2:7b:73:a6:b1:d4:4b:6b:fb:56:5f:38:89:
         d4:c1:d5:2b:fa:e7:61:e2:b3:62:ec:36:1b:58:c3:5b:cb:25:
         10:dd:37:06:49:bb:aa:a5:63:18:fc:87:81:47:76:b3:cc:cd:
         9a:9a:a2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:00 2025 by rpki-client on console.sobornost.net