Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Gw2mbsE_MoMLk8qNwEEX0NgcNl8.roa
File:                     Gw2mbsE_MoMLk8qNwEEX0NgcNl8.roa (raw, json)
Hash identifier:          1jUFBnLBvfA4uzicHOhc17W0Ci/2g8HkC2YbueNHc3Q=
Subject key identifier:   1B:0D:A6:6E:C1:3F:32:83:0B:93:CA:8D:C0:41:17:D0:D8:1C:36:5F
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019584CDAE048122C20B4C1237FCC07F7DAA
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Gw2mbsE_MoMLk8qNwEEX0NgcNl8.roa
Signing time:             Tue 11 Mar 2025 10:43:46 +0000
ROA not before:           Tue 11 Mar 2025 10:43:46 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212077
IP address blocks:        185.113.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:84:cd:ae:04:81:22:c2:0b:4c:12:37:fc:c0:7f:7d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Mar 11 10:43:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1b0da66ec13f32830b93ca8dc04117d0d81c365f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ce:8b:ed:94:9d:c1:1c:ca:24:0b:bd:20:ae:
                    30:1d:0f:df:7e:d4:03:76:9b:73:7b:47:33:04:c9:
                    45:76:92:60:70:5f:4d:c7:33:46:bb:fd:65:23:91:
                    e2:5c:60:20:2e:2b:06:e1:02:75:f7:10:48:9e:b2:
                    b5:a7:e9:0b:f1:0f:67:a2:be:d0:8b:9d:fc:aa:80:
                    a5:ed:d2:58:9f:20:af:40:64:75:63:30:5e:3a:6c:
                    42:d5:2a:cb:61:d0:f3:9b:80:0c:fd:4c:58:05:38:
                    0f:7a:af:62:1d:5d:00:fd:94:e8:d0:0e:95:ce:a5:
                    fa:70:25:e7:cf:c5:88:c8:d9:79:fe:f3:d9:44:17:
                    ca:3c:77:eb:47:29:27:1b:aa:a4:61:ec:9d:f2:a3:
                    18:ee:22:4b:b4:84:6e:59:e8:ce:2a:6d:56:90:31:
                    bf:3a:56:77:bc:68:ce:9d:01:ca:24:cd:5d:64:93:
                    e6:c8:5c:31:ac:46:5a:c7:9c:50:0a:a4:a4:33:d1:
                    6d:5b:27:86:e8:11:7b:43:bb:70:73:dc:9e:13:3c:
                    50:52:86:cc:78:84:9e:18:2c:c3:ab:33:f9:c8:e5:
                    cc:b2:10:79:f2:f8:01:5b:3a:4e:46:bd:eb:2b:09:
                    34:a0:64:75:03:3b:4e:ab:8f:73:cc:d7:c5:56:e9:
                    bb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0D:A6:6E:C1:3F:32:83:0B:93:CA:8D:C0:41:17:D0:D8:1C:36:5F
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Gw2mbsE_MoMLk8qNwEEX0NgcNl8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.113.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:92:b9:c2:57:58:1f:33:bb:07:ca:20:d4:2d:d6:b6:7f:3d:
         6b:68:4e:53:4d:4e:2c:a1:82:89:ab:00:f6:c6:5c:6f:38:b2:
         22:3c:49:2a:c9:c8:f1:22:c9:ff:70:86:b3:1d:a3:ab:f1:5b:
         ad:07:e7:4a:85:e2:15:b4:0f:c9:e8:ab:86:3b:a7:67:29:63:
         38:c6:7c:3a:82:7a:6f:e3:5e:ba:a9:c8:6b:8f:84:b5:bb:b0:
         2b:42:b4:fc:3c:43:71:7e:9b:02:e5:e6:cd:e0:ec:87:62:61:
         4a:ca:0e:4b:8a:d4:67:e2:4a:d4:f3:f7:8e:cf:cc:72:1a:06:
         54:d4:1a:2b:ec:b5:62:45:c2:fe:74:0e:33:b9:b5:92:d2:35:
         b4:ca:d7:73:24:b8:f2:66:34:a8:ae:34:ad:57:cf:02:d6:3e:
         d1:8e:e4:37:f5:a7:3d:62:41:cf:7d:7c:34:e3:6b:74:d5:e2:
         4f:99:5f:d8:af:a0:da:c1:a7:2f:63:e5:c7:14:cd:77:d9:4f:
         a7:53:b3:25:44:06:77:fe:e5:4b:bb:61:41:4d:c6:6a:16:0e:
         6f:c0:d3:15:a7:cf:db:95:4c:71:e2:e1:8f:f9:01:39:fc:0e:
         b4:e3:04:f6:53:23:89:e4:88:ce:55:07:8e:7d:a8:9d:a3:35:
         48:e4:df:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:11 2025 by rpki-client on console.sobornost.net