Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/VwaG3F-L6xL12XPSU_UWu2Bd58g.roa
File:                     VwaG3F-L6xL12XPSU_UWu2Bd58g.roa (raw, json)
Hash identifier:          /URPWuVnWdS2o9I0omCNTV0BM2l7vJwm+zKrLTezQaI=
Subject key identifier:   57:06:86:DC:5F:8B:EB:12:F5:D9:73:D2:53:F5:16:BB:60:5D:E7:C8
Certificate issuer:       /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial:       0194236A52A491EE9652115485876A6370E2
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/VwaG3F-L6xL12XPSU_UWu2Bd58g.roa
Signing time:             Wed 01 Jan 2025 19:49:18 +0000
ROA not before:           Wed 01 Jan 2025 19:49:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     206309
IP address blocks:        185.179.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:52:a4:91:ee:96:52:11:54:85:87:6a:63:70:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
        Validity
            Not Before: Jan  1 19:49:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=570686dc5f8beb12f5d973d253f516bb605de7c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d0:77:95:39:ae:16:e8:e3:83:32:b1:c8:fb:
                    b1:2c:d1:68:ed:f4:03:a2:dd:c8:52:60:6e:a4:58:
                    a0:b6:f0:2f:a1:13:44:04:c8:16:86:e6:55:bd:96:
                    40:9c:47:9f:85:89:5d:62:2c:57:7c:2f:12:59:a2:
                    bf:2c:59:3c:3e:0a:be:d7:cc:2c:01:3d:bf:52:27:
                    f1:a4:c8:13:a0:e0:7c:cd:57:c6:e3:d6:90:ab:11:
                    91:7e:61:dc:0a:c0:9a:a2:e0:58:ad:d0:c1:27:f2:
                    09:07:15:62:30:16:eb:5e:a5:09:5c:66:ea:b7:51:
                    74:d8:0e:77:e0:32:30:0f:d4:b8:8f:e7:c9:ed:eb:
                    05:3c:82:71:67:81:e3:43:ab:2e:6d:17:4c:bc:ad:
                    10:17:3f:0e:68:33:ff:bb:da:6f:f1:6a:d5:ec:fb:
                    f1:da:23:d7:80:b1:a0:e2:d0:a4:9d:7e:b5:57:13:
                    f0:6d:c9:e7:cb:78:e4:5b:29:dd:67:ba:13:88:fe:
                    7d:66:ff:26:12:8f:fb:5c:96:e3:f5:cb:7a:17:93:
                    ba:1b:40:90:66:18:7c:95:06:dd:93:81:8e:4b:37:
                    f4:c7:2e:02:3e:fd:d4:3b:91:df:b7:66:45:75:18:
                    cf:3e:4d:c5:04:ea:a5:b7:4a:0c:08:78:78:13:e0:
                    d2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:06:86:DC:5F:8B:EB:12:F5:D9:73:D2:53:F5:16:BB:60:5D:E7:C8
            X509v3 Authority Key Identifier:
                keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/VwaG3F-L6xL12XPSU_UWu2Bd58g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:a6:b1:c5:89:34:c2:32:27:b7:3a:2f:c6:11:2e:1a:85:76:
         db:a7:9e:1a:44:1d:4d:5b:e5:29:73:c5:28:1d:c4:aa:a1:52:
         55:f4:8a:b4:ff:74:26:da:d6:a3:2a:3e:6d:2d:e8:4c:fc:e8:
         d0:fe:32:e8:88:cb:e7:5d:eb:d7:f2:98:07:ff:f7:7d:6d:09:
         55:3a:4b:84:3c:2f:0b:8b:b1:6a:46:f5:ad:e2:43:16:fe:bd:
         21:e8:13:e7:58:c7:d2:59:b1:57:57:09:fb:0a:f0:60:af:e1:
         38:7f:57:10:a2:01:e1:5d:cd:4c:74:3c:cf:36:49:bc:43:96:
         77:9a:a0:46:95:2f:17:0a:00:4f:b1:c7:1c:77:91:dd:68:73:
         f0:d5:fb:e5:86:9a:8a:40:8c:e0:8c:3b:6d:35:bf:0c:81:2e:
         f6:22:12:f2:e7:70:d6:e1:bb:b8:14:77:5d:30:1c:05:8f:b0:
         9c:ae:64:52:43:69:d7:f6:8a:94:e9:b9:4c:54:ea:1e:41:02:
         21:93:5b:4e:08:bb:b6:e5:5d:3d:2a:0b:f4:38:ee:8a:c3:26:
         ef:3b:db:c7:74:87:40:0a:05:67:4d:eb:62:67:49:43:8e:55:
         ed:e4:4f:df:06:b6:c1:54:99:9f:04:1f:6a:b6:4e:3e:70:2d:
         35:a1:dd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net