Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/UUfu95Auivxvbsa7i57178Y2ltM.roa
File:                     UUfu95Auivxvbsa7i57178Y2ltM.roa (raw, json)
Hash identifier:          jFwsCOA5Al7+HGdTwINvFII4nowICJNXPZ21CgfKF54=
Subject key identifier:   51:47:EE:F7:90:2E:8A:FC:6F:6E:C6:BB:8B:9E:F5:EF:C6:36:96:D3
Certificate issuer:       /CN=c1b050211219d18e996e086cb7f6309178804860
Certificate serial:       019423D733502A3F1CE512CC2328E2AE984B
Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/UUfu95Auivxvbsa7i57178Y2ltM.roa
Signing time:             Wed 01 Jan 2025 21:48:13 +0000
ROA not before:           Wed 01 Jan 2025 21:48:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     60398
IP address blocks:        212.40.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:33:50:2a:3f:1c:e5:12:cc:23:28:e2:ae:98:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1b050211219d18e996e086cb7f6309178804860
        Validity
            Not Before: Jan  1 21:48:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5147eef7902e8afc6f6ec6bb8b9ef5efc63696d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f4:4c:95:07:2f:29:c5:17:ab:75:58:36:c3:
                    28:59:57:59:3a:13:6a:54:8a:95:ae:51:44:27:ee:
                    de:b6:ea:e3:cf:90:95:90:43:a3:7f:43:61:39:75:
                    60:56:6f:e0:ab:44:65:d3:0d:f2:c9:a4:7f:1e:f3:
                    22:44:f3:ad:28:7e:f6:2c:f4:52:cd:7e:e9:9e:41:
                    9a:13:58:d5:42:45:88:cc:c2:34:d3:d5:ed:8c:de:
                    fc:c2:4e:5c:3c:58:8b:65:bd:58:f3:96:9a:2d:4a:
                    f3:8b:4a:e0:ee:42:e5:11:11:ea:72:fe:7f:49:83:
                    4c:9c:fa:5e:42:c5:08:57:cf:82:f4:96:44:c6:72:
                    56:3a:54:1b:7c:1f:af:ab:0e:e6:8b:0e:13:f3:e3:
                    0d:04:ba:4c:12:41:00:99:ed:5c:fb:67:77:7d:48:
                    57:eb:87:0f:a8:d3:89:02:2e:97:91:7a:27:0c:ce:
                    1f:f0:a2:88:2d:4e:38:3d:8e:8f:67:37:f6:05:3f:
                    08:69:07:86:20:cb:ce:b5:e5:ec:90:01:96:16:1c:
                    17:a8:b0:37:59:2f:bf:ff:bd:f1:c6:8f:55:b2:d5:
                    b7:91:58:d0:b8:9a:16:a8:e3:f7:8c:42:8c:b1:83:
                    cc:6f:64:92:6f:0d:bb:ab:58:81:f6:af:ff:8f:2b:
                    75:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:47:EE:F7:90:2E:8A:FC:6F:6E:C6:BB:8B:9E:F5:EF:C6:36:96:D3
            X509v3 Authority Key Identifier:
                keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/UUfu95Auivxvbsa7i57178Y2ltM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.40.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:58:fc:2a:7c:4e:82:a1:4b:10:8d:1f:d5:60:32:07:c5:ca:
         b2:60:20:3f:e7:37:8b:d0:a6:2c:35:9b:a2:78:2f:ea:da:89:
         35:12:09:0d:bb:4e:87:96:0c:54:a7:0a:f2:2b:cb:57:9c:47:
         ac:50:c6:b1:15:fe:40:fe:fc:ab:fa:8c:7a:73:3e:74:95:29:
         e5:e7:a7:18:90:2f:7f:34:c7:33:8e:98:a6:6e:0a:6d:7d:bc:
         6f:b3:55:05:ff:f8:ac:9a:89:87:3a:18:ba:a0:e8:0a:47:59:
         aa:d6:d3:33:88:bd:1d:e3:d0:5c:ce:e3:18:6f:34:a2:ec:f0:
         6f:3b:35:97:5b:d7:7d:b3:3c:0a:d4:14:95:48:d5:d6:25:5b:
         f4:d6:a2:60:83:2e:8c:99:8e:86:e4:b8:32:14:51:c8:eb:e1:
         98:b1:13:a0:13:7f:10:c4:28:fd:d5:fb:f5:6b:cd:52:12:4a:
         7b:de:e2:bd:c3:07:de:1c:22:2f:5b:e2:4b:30:f7:a4:f0:92:
         24:69:da:73:98:83:bb:79:8f:fe:13:64:99:0e:0b:72:fb:ca:
         5e:5f:22:fc:5e:6d:2f:9b:65:c1:21:f8:59:62:cf:09:f3:74:
         cd:4e:b5:30:df:27:5f:66:cf:a3:d1:8a:f9:88:d1:34:52:d8:
         e2:1a:91:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1zNQKj8c5RLMIyjirphLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYjA1MDIxMTIxOWQxOGU5OTZlMDg2Y2I3ZjYzMDkxNzg4
MDQ4NjAwHhcNMjUwMTAxMjE0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTQ3ZWVmNzkwMmU4YWZjNmY2ZWM2YmI4YjllZjVlZmM2MzY5NmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfRMlQcvKcUXq3VYNsMoWVdZOhNq
VIqVrlFEJ+7eturjz5CVkEOjf0NhOXVgVm/gq0Rl0w3yyaR/HvMiRPOtKH72LPRS
zX7pnkGaE1jVQkWIzMI009XtjN78wk5cPFiLZb1Y85aaLUrzi0rg7kLlERHqcv5/
SYNMnPpeQsUIV8+C9JZExnJWOlQbfB+vqw7miw4T8+MNBLpMEkEAme1c+2d3fUhX
64cPqNOJAi6XkXonDM4f8KKILU44PY6PZzf2BT8IaQeGIMvOteXskAGWFhwXqLA3
WS+//73xxo9VstW3kVjQuJoWqOP3jEKMsYPMb2SSbw27q1iB9q//jyt16QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFFH7veQLor8b27Gu4ue9e/GNpbTMB8GA1UdIwQY
MBaAFMGwUCESGdGOmW4IbLf2MJF4gEhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2JCUUlSSVowWTZaYmdoc3RfWXdrWGlBU0dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yOGE4ZjMtODg5ZS00NTQ5LWE0NGUt
Y2UyMjUxODdmYzM4LzEvVVVmdTk1QXVpdnh2YnNhN2k1NzE3OFkybHRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8yOGE4ZjMtODg5ZS00NTQ5LWE0NGUtY2UyMjUxODdmYzM4
LzEvd2JCUUlSSVowWTZaYmdoc3RfWXdrWGlBU0dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1CiMMA0G
CSqGSIb3DQEBCwUAA4IBAQBsWPwqfE6CoUsQjR/VYDIHxcqyYCA/5zeL0KYsNZui
eC/q2ok1EgkNu06HlgxUpwryK8tXnEesUMaxFf5A/vyr+ox6cz50lSnl56cYkC9/
NMczjpimbgptfbxvs1UF//ismomHOhi6oOgKR1mq1tMziL0d49BczuMYbzSi7PBv
OzWXW9d9szwK1BSVSNXWJVv01qJggy6MmY6G5LgyFFHI6+GYsROgE38QxCj91fv1
a81SEkp73uK9wwfeHCIvW+JLMPek8JIkadpzmIO7eY/+E2SZDgty+8peXyL8Xm0v
m2XBIfhZYs8J83TNTrUw3ydfZs+j0Yr5iNE0UtjiGpFh
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net