Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/Vj7AFpLfLfr1svb9-cPSPJ7dIJI.roa
File:                     Vj7AFpLfLfr1svb9-cPSPJ7dIJI.roa (raw, json)
Hash identifier:          qmKM7pZ6q+ZyF/QjQ3vO49pZuCQEcIpTC5t1WR2KDrE=
Subject key identifier:   56:3E:C0:16:92:DF:2D:FA:F5:B2:F6:FD:F9:C3:D2:3C:9E:DD:20:92
Certificate issuer:       /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial:       019426D8AE019BDB0918DEC2566D72E87935
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/Vj7AFpLfLfr1svb9-cPSPJ7dIJI.roa
Signing time:             Thu 02 Jan 2025 11:48:42 +0000
ROA not before:           Thu 02 Jan 2025 11:48:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     62442
IP address blocks:        95.38.45.0/24 maxlen: 24
                          95.38.72.0/24 maxlen: 24
                          95.38.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d8:ae:01:9b:db:09:18:de:c2:56:6d:72:e8:79:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
        Validity
            Not Before: Jan  2 11:48:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=563ec01692df2dfaf5b2f6fdf9c3d23c9edd2092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1a:5c:cf:c0:5b:18:1a:9a:c3:15:41:cc:1d:
                    33:77:dc:ce:ca:47:4a:88:1e:e8:b9:48:c6:92:69:
                    c2:37:29:ee:6e:6f:8e:62:d7:ac:90:b6:74:c7:b5:
                    04:34:2d:bc:e5:c9:43:36:01:9f:b0:75:ef:9f:04:
                    e4:d0:8e:1f:82:e6:ac:49:f7:1e:44:c1:96:c7:b2:
                    0b:81:b9:f3:92:2c:5d:2a:bc:79:e9:dd:10:05:09:
                    5e:4d:0a:ca:6f:0d:e1:d3:63:7b:8c:2d:c5:4b:69:
                    08:d8:36:d0:a7:52:b0:ec:a5:8d:f6:2a:93:40:c9:
                    2c:28:25:ff:b5:39:0a:e8:10:37:5e:25:51:02:54:
                    f0:8a:db:25:02:b6:67:7b:d0:d4:df:d6:89:4a:57:
                    35:d8:73:a9:56:9c:90:49:74:d2:2e:bd:f6:ec:79:
                    2f:90:4e:87:67:6f:43:e2:5e:4c:2f:56:9c:3e:65:
                    68:09:8b:c7:68:f8:d9:f9:63:8d:30:30:28:73:2b:
                    13:63:55:6e:cd:ba:b4:4a:b0:84:5c:eb:f1:30:c7:
                    93:96:95:f0:6a:af:fd:cc:b6:ce:bb:cc:38:b0:c0:
                    98:c7:3d:ea:a2:24:59:0a:ed:b6:e9:32:66:8e:f3:
                    70:84:cb:62:23:44:20:c9:d3:fa:50:66:bb:70:17:
                    a4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3E:C0:16:92:DF:2D:FA:F5:B2:F6:FD:F9:C3:D2:3C:9E:DD:20:92
            X509v3 Authority Key Identifier:
                keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/Vj7AFpLfLfr1svb9-cPSPJ7dIJI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.38.45.0/24
                  95.38.72.0/24
                  95.38.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:bc:0d:03:9d:aa:d3:c9:ba:12:b6:3b:73:8e:f7:e2:53:71:
         84:51:17:ed:31:dd:2b:d0:88:aa:a2:ad:f2:51:2f:16:b4:84:
         63:bb:c6:77:18:96:91:4c:a0:3d:48:fe:b4:28:14:cf:ad:69:
         dc:3b:fd:ed:9b:2b:8e:1e:79:57:07:6a:77:03:8a:88:f7:fd:
         52:c3:70:c5:e8:2b:7b:7c:a0:4f:17:bc:4f:b5:43:13:7c:8c:
         a1:b0:56:a7:91:a3:bb:91:8d:ee:40:a9:22:8f:3e:c1:c8:51:
         c7:2e:7a:ff:5b:27:09:20:6c:cb:55:9b:64:ec:f1:ab:45:cb:
         02:fa:fc:79:b5:64:4e:ed:16:68:88:da:97:0f:d9:0c:21:50:
         24:f8:1c:94:12:f3:1f:8e:7f:27:70:f6:17:4a:5b:4d:a3:9f:
         7d:b9:6f:56:5e:a8:e7:79:32:1a:00:45:e7:23:e1:f8:5e:03:
         9b:f4:35:f0:e2:81:36:39:21:f7:88:46:75:34:a3:c5:e9:de:
         36:19:1f:59:f3:c8:62:7e:b7:7f:29:51:b8:7c:60:71:c1:e3:
         09:8b:45:65:65:ee:dc:9e:e4:66:dc:83:d5:66:b8:25:77:69:
         93:b7:65:6c:a7:fd:d0:52:d6:fa:be:a6:e9:10:b9:d0:4f:1d:
         6d:c3:26:c2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQm2K4Bm9sJGN7CVm1y6Hk1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl
YTZkYWYwHhcNMjUwMTAyMTE0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjNlYzAxNjkyZGYyZGZhZjViMmY2ZmRmOWMzZDIzYzllZGQyMDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRpcz8BbGBqawxVBzB0zd9zOykdK
iB7ouUjGkmnCNynubm+OYteskLZ0x7UENC285clDNgGfsHXvnwTk0I4fguasSfce
RMGWx7ILgbnzkixdKrx56d0QBQleTQrKbw3h02N7jC3FS2kI2DbQp1Kw7KWN9iqT
QMksKCX/tTkK6BA3XiVRAlTwitslArZne9DU39aJSlc12HOpVpyQSXTSLr327Hkv
kE6HZ29D4l5ML1acPmVoCYvHaPjZ+WONMDAocysTY1Vuzbq0SrCEXOvxMMeTlpXw
aq/9zLbOu8w4sMCYxz3qoiRZCu226TJmjvNwhMtiI0QgydP6UGa7cBek6wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFY+wBaS3y369bL2/fnD0jye3SCSMB8GA1UdIwQY
MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt
NjkxNDIyMzExNzI5LzEvVmo3QUZwTGZMZnIxc3ZiOS1jUFNQSjdkSUpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5
LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXyYtAwQA
XyZIAwQAXybGMA0GCSqGSIb3DQEBCwUAA4IBAQBYvA0DnarTyboStjtzjvfiU3GE
URftMd0r0Iiqoq3yUS8WtIRju8Z3GJaRTKA9SP60KBTPrWncO/3tmyuOHnlXB2p3
A4qI9/1Sw3DF6Ct7fKBPF7xPtUMTfIyhsFankaO7kY3uQKkijz7ByFHHLnr/WycJ
IGzLVZtk7PGrRcsC+vx5tWRO7RZoiNqXD9kMIVAk+ByUEvMfjn8ncPYXSltNo599
uW9WXqjneTIaAEXnI+H4XgOb9DXw4oE2OSH3iEZ1NKPF6d42GR9Z88hifrd/KVG4
fGBxweMJi0VlZe7cnuRm3IPVZrgld2mTt2Vsp/3QUtb6vqbpELnQTx1twybC
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:13 2025 by rpki-client on console.sobornost.net