Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/RVYbt4pshmH8DSV6d_7jrqY3hkM.roa
File:                     RVYbt4pshmH8DSV6d_7jrqY3hkM.roa (raw, json)
Hash identifier:          DtwQM6qpi2v7cPG8SNPN6jhojOkJB16k6kT3gTy5/Gk=
Subject key identifier:   45:56:1B:B7:8A:6C:86:61:FC:0D:25:7A:77:FE:E3:AE:A6:37:86:43
Certificate issuer:       /CN=24504c74c7127090a4cff85001f443149e128e60
Certificate serial:       01941F8CA1EDB3CE9C748775D3AD712AA02E
Authority key identifier: 24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/RVYbt4pshmH8DSV6d_7jrqY3hkM.roa
Signing time:             Wed 01 Jan 2025 01:48:17 +0000
ROA not before:           Wed 01 Jan 2025 01:48:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     203775
IP address blocks:        185.124.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:a1:ed:b3:ce:9c:74:87:75:d3:ad:71:2a:a0:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24504c74c7127090a4cff85001f443149e128e60
        Validity
            Not Before: Jan  1 01:48:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=45561bb78a6c8661fc0d257a77fee3aea6378643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d8:69:97:ac:db:67:fd:0a:a9:50:55:9d:79:
                    2e:10:d5:0d:0c:18:ce:26:3f:dc:60:ac:1f:4c:53:
                    2c:86:92:44:b9:94:70:3f:3e:93:52:87:76:7b:25:
                    1f:61:9b:84:98:84:e0:c9:1c:d4:ce:06:dd:38:d0:
                    9b:48:e2:a6:da:8a:e4:f3:d2:18:b6:bc:a0:95:28:
                    92:93:23:d1:35:f3:17:57:7c:4e:57:53:4e:22:73:
                    2e:16:69:6d:a6:e3:fd:46:36:69:18:e7:6b:ab:18:
                    8b:41:2b:02:58:e2:3f:09:9e:5f:5e:6a:c7:c0:62:
                    0e:7f:95:5b:14:d7:dd:5c:56:cc:64:b2:3f:f3:e7:
                    bc:b6:f2:6d:df:9d:d0:b1:55:21:63:d0:40:bb:ee:
                    6a:12:9a:9b:2e:e0:eb:50:14:13:e3:a6:2d:17:4d:
                    34:33:41:31:55:17:d4:9e:e7:0b:3a:e7:ec:8e:15:
                    6d:e1:b1:94:48:a4:4c:dc:1a:8b:19:a4:57:7b:84:
                    23:7a:04:cf:94:6f:f3:cd:66:2d:dc:7a:ab:bf:ab:
                    98:0f:c3:6e:ab:8c:90:06:67:35:0c:08:11:a9:39:
                    62:8f:eb:a1:f4:b5:43:5f:32:51:26:b8:5e:d3:ef:
                    b0:dd:f4:11:90:92:97:1c:98:66:c9:4a:34:71:18:
                    27:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:56:1B:B7:8A:6C:86:61:FC:0D:25:7A:77:FE:E3:AE:A6:37:86:43
            X509v3 Authority Key Identifier:
                keyid:24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/RVYbt4pshmH8DSV6d_7jrqY3hkM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.124.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:f4:d5:51:26:58:25:1b:5e:d9:04:77:eb:ed:62:d8:01:03:
         45:d4:67:73:e6:d1:ee:e8:46:07:f6:0f:d0:00:42:35:d8:4f:
         b5:d5:42:8b:5a:a6:25:79:7f:c4:0e:2a:ee:8b:d4:1e:aa:4c:
         d3:19:75:89:34:6d:9e:7a:26:4f:f7:b9:ed:e4:2f:f5:da:92:
         2e:77:c0:34:f7:fb:e1:fd:c3:fd:3c:58:90:57:ed:75:0f:f5:
         d4:84:6b:44:d2:87:55:ce:27:5c:65:20:2f:f2:18:95:4d:ac:
         2f:01:71:ee:2e:10:01:73:82:53:6e:f5:b8:65:6a:64:40:85:
         ee:b5:36:ac:24:9e:69:fa:18:39:2d:95:4f:c3:7e:f1:0a:df:
         eb:91:49:a4:29:37:7a:ed:2b:4f:68:2a:46:19:de:d1:5e:d5:
         9a:6d:cf:fe:a5:5e:d6:c9:b3:92:6c:86:dd:a0:f3:bc:b4:0f:
         63:10:a6:73:15:e6:f5:93:5e:ae:7b:b3:ad:31:28:3f:f0:1a:
         b8:ba:e2:03:32:70:c3:9d:67:32:c5:8a:ce:97:76:f9:e2:81:
         87:69:5a:be:6e:bf:c3:90:57:a4:5f:e1:44:a7:70:c6:b9:f8:
         c6:f6:6e:41:9b:49:d2:47:3c:27:5d:8d:c4:03:e8:a7:d7:e4:
         7a:63:28:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:14 2025 by rpki-client on console.sobornost.net