Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/UwHwc4Sk_hCRAHef6n3CUGRPGkk.roa
File:                     UwHwc4Sk_hCRAHef6n3CUGRPGkk.roa (raw, json)
Hash identifier:          KrGL3wXFY6k1GlYSZENHPy6IRLA8cwbf0xkJCypiFE8=
Subject key identifier:   53:01:F0:73:84:A4:FE:10:91:00:77:9F:EA:7D:C2:50:64:4F:1A:49
Certificate issuer:       /CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
Certificate serial:       019425219665B4CFAE1B82CE42413E9352A8
Authority key identifier: E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/UwHwc4Sk_hCRAHef6n3CUGRPGkk.roa
Signing time:             Thu 02 Jan 2025 03:49:05 +0000
ROA not before:           Thu 02 Jan 2025 03:49:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     396501
IP address blocks:        185.159.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:96:65:b4:cf:ae:1b:82:ce:42:41:3e:93:52:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
        Validity
            Not Before: Jan  2 03:49:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5301f07384a4fe109100779fea7dc250644f1a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f6:bb:15:97:94:c9:f9:46:c1:4d:54:f7:37:
                    91:dc:63:97:65:e9:2d:23:8e:ab:63:7c:fb:20:2e:
                    63:61:59:2e:9e:e8:77:7a:40:be:91:28:46:ef:36:
                    09:06:1a:66:38:9f:72:43:a7:96:42:c6:d6:17:5a:
                    92:88:fd:b8:57:dc:3c:d6:82:1d:01:0b:c0:84:a1:
                    b1:38:d9:82:fe:c0:b1:f9:34:17:fc:4f:e9:1b:7f:
                    8c:da:d5:d4:c9:a3:a3:48:a1:1d:d6:e2:75:b7:95:
                    14:60:fc:22:a0:cd:21:de:b3:78:b5:7f:62:a3:3f:
                    6d:a4:b6:48:5e:dc:60:18:cf:93:ab:52:c0:9c:f5:
                    05:de:56:23:2d:be:66:b5:26:68:a8:f7:37:0a:58:
                    ac:28:91:7d:43:7c:73:27:e2:0f:21:14:18:b5:57:
                    3b:e3:cd:4a:a7:3d:39:f0:e3:c4:65:fd:8f:f8:ce:
                    05:64:f4:1a:a9:d5:b0:12:9a:7d:8f:8c:f5:5f:7b:
                    65:15:ae:d2:43:78:69:dd:eb:9d:0c:28:fb:d6:e2:
                    13:e4:dc:c7:c5:5a:5c:c7:9b:d3:d4:5b:01:a9:7d:
                    be:19:68:07:83:24:c5:70:02:ef:c8:0f:51:4e:79:
                    b5:eb:9b:7c:a6:9c:72:4c:1c:0f:6d:47:4f:43:b3:
                    3f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:01:F0:73:84:A4:FE:10:91:00:77:9F:EA:7D:C2:50:64:4F:1A:49
            X509v3 Authority Key Identifier:
                keyid:E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/UwHwc4Sk_hCRAHef6n3CUGRPGkk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.159.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:97:8a:55:97:7a:fa:07:45:43:33:92:5b:dd:08:d2:e6:64:
         e9:d0:ac:0f:e9:e9:53:5f:bd:7a:66:5e:58:52:93:e8:00:9e:
         a8:0c:c8:eb:d2:ef:68:6c:3b:d8:b2:a0:b9:9b:9b:bf:da:19:
         2c:dd:0e:dd:9c:e7:be:62:17:8c:4c:59:f0:78:2e:85:22:d6:
         b8:64:4f:fc:96:50:82:b3:14:26:6d:2a:71:3f:41:c8:9a:98:
         98:b4:c7:b1:ad:fa:ae:49:5c:fa:75:8d:e8:6a:58:a4:e5:8a:
         5e:bd:a4:16:f8:80:51:6f:73:7d:ec:ff:b1:4a:61:42:d9:5f:
         4e:81:e9:93:ca:ca:56:a0:97:b6:11:90:2f:47:63:d5:27:d2:
         e8:ba:84:c5:6c:fd:0e:cd:eb:48:1f:d5:10:9a:ff:2a:0c:6e:
         0a:3e:d7:40:a4:b5:ab:b6:dc:6c:aa:44:0b:e9:b0:dd:37:f7:
         46:82:e4:3f:b9:37:e7:4b:21:eb:b8:57:94:e1:3e:58:55:2a:
         5f:c0:00:1c:84:be:ce:40:17:d0:8a:4e:23:00:03:01:66:a7:
         9c:00:ec:5a:07:4b:11:2b:4e:f5:4e:09:25:e9:a6:20:d7:62:
         8a:3f:ca:e8:d2:35:8a:2a:f9:59:38:22:12:58:c5:fc:49:be:
         3b:54:f9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:15 2025 by rpki-client on console.sobornost.net