Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/29C_AMtyAdy5xz9nR5IWFhFiIiY.roa
File:                     29C_AMtyAdy5xz9nR5IWFhFiIiY.roa (raw, json)
Hash identifier:          FBVen/Q/sLzdQJw+zYeV1QYNWCu1/gvix8MLvUf426M=
Subject key identifier:   DB:D0:BF:00:CB:72:01:DC:B9:C7:3F:67:47:92:16:16:11:62:22:26
Certificate issuer:       /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial:       019567572804F44CF73FDA17182FBDDB228D
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/29C_AMtyAdy5xz9nR5IWFhFiIiY.roa
Signing time:             Wed 05 Mar 2025 17:25:19 +0000
ROA not before:           Wed 05 Mar 2025 17:25:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215467
IP address blocks:        45.154.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:67:57:28:04:f4:4c:f7:3f:da:17:18:2f:bd:db:22:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
        Validity
            Not Before: Mar  5 17:25:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=dbd0bf00cb7201dcb9c73f674792161611622226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:10:f9:0c:b6:b0:59:1c:9f:b3:5e:c1:e6:da:
                    f1:e4:6f:77:e2:df:59:40:97:7c:8d:72:bc:1a:87:
                    44:61:b8:41:e9:17:a9:f8:b8:c7:c6:10:c1:59:ee:
                    8d:a7:28:84:14:42:93:70:85:26:1f:a8:23:ce:a8:
                    1f:a8:a4:a9:57:36:73:33:e9:5c:90:06:b3:21:2a:
                    86:64:d2:94:ae:2e:43:a5:81:d4:8e:43:c6:8d:df:
                    9d:53:d2:19:ef:75:f5:d8:80:8b:66:4e:2c:2e:88:
                    9a:c7:dd:c8:68:5f:dc:70:49:fe:f0:4f:64:49:36:
                    31:49:f4:20:4c:89:2e:c3:4e:47:c1:46:84:d7:3a:
                    85:58:9d:d7:f8:a3:91:56:95:d2:97:7f:89:fe:6a:
                    10:85:35:c7:be:0a:ce:d7:80:6c:ca:8a:41:d7:9c:
                    da:ad:5d:b0:35:bf:a8:d3:74:b8:80:f0:46:47:4f:
                    cf:5e:86:78:78:4d:03:e4:1a:d6:e0:81:30:e2:6c:
                    80:9a:0e:7c:08:72:25:f2:7b:94:5d:90:01:ba:b6:
                    3c:e6:52:0b:bb:fe:4f:81:56:52:6a:4d:0b:21:fb:
                    d0:0a:6f:3c:6b:d0:72:c6:18:57:7b:26:69:da:15:
                    d7:b6:5e:d5:91:aa:16:df:72:a5:f1:37:57:ee:97:
                    6e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D0:BF:00:CB:72:01:DC:B9:C7:3F:67:47:92:16:16:11:62:22:26
            X509v3 Authority Key Identifier:
                keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/29C_AMtyAdy5xz9nR5IWFhFiIiY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:0c:95:b7:1b:13:8d:d6:14:44:c3:c7:bd:d7:c7:38:00:7b:
         fa:8b:37:9e:40:a3:69:89:53:82:25:ea:66:32:b8:09:02:6d:
         7f:49:62:49:79:71:20:e8:8a:23:a5:c1:04:3c:a0:f0:ac:fb:
         d4:f9:d8:b8:50:a4:be:b6:2a:2a:19:50:f3:1e:6d:60:14:39:
         6e:a6:e0:e1:dc:40:9f:c2:0f:e5:4b:70:d7:0b:98:75:f5:d3:
         72:c7:ff:e2:c0:da:e2:ef:cd:c5:77:54:5a:9f:f7:b6:df:b8:
         14:5f:34:d4:d0:51:b8:42:6d:64:ec:89:a4:41:60:57:5f:01:
         51:7b:d0:65:30:73:ad:95:48:1f:39:ca:7d:a9:88:33:d1:eb:
         3c:d8:e4:b9:17:63:93:cb:c2:18:d3:3b:10:ba:9e:33:00:8b:
         19:8f:79:a5:30:ce:83:1e:6a:61:af:5f:fd:41:b2:a5:ee:64:
         cf:f3:15:ba:82:23:77:df:cf:ed:f5:04:fb:b5:8e:ea:26:fc:
         81:c4:1b:83:34:f4:7e:a6:f9:53:2f:88:dd:51:90:19:43:bd:
         02:2b:91:57:76:82:ce:f0:23:e1:4b:ef:64:5d:6b:b7:d7:c7:
         2f:00:d5:84:14:7a:2a:45:fa:1d:5c:37:25:19:d1:59:8a:95:
         7c:9f:b7:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVnVygE9Ez3P9oXGC+92yKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NzdhMzExNmVjYzlkN2E0MjlmMTM2NTE2MTNlOGFkMTQ5
ZmYzMjQwHhcNMjUwMzA1MTcyNTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmQwYmYwMGNiNzIwMWRjYjljNzNmNjc0NzkyMTYxNjExNjIyMjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xD5DLawWRyfs17B5trx5G934t9Z
QJd8jXK8GodEYbhB6Rep+LjHxhDBWe6NpyiEFEKTcIUmH6gjzqgfqKSpVzZzM+lc
kAazISqGZNKUri5DpYHUjkPGjd+dU9IZ73X12ICLZk4sLoiax93IaF/ccEn+8E9k
STYxSfQgTIkuw05HwUaE1zqFWJ3X+KORVpXSl3+J/moQhTXHvgrO14BsyopB15za
rV2wNb+o03S4gPBGR0/PXoZ4eE0D5BrW4IEw4myAmg58CHIl8nuUXZABurY85lIL
u/5PgVZSak0LIfvQCm88a9ByxhhXeyZp2hXXtl7VkaoW33Kl8TdX7pduXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNvQvwDLcgHcucc/Z0eSFhYRYiImMB8GA1UdIwQY
MBaAFGl3oxFuzJ16Qp8TZRYT6K0Un/MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85YzY2OTEtYWRhYy00MWU1LThjZTkt
ZjRiN2IzOThjNjM0LzEvMjlDX0FNdHlBZHk1eHo5blI1SVdGaEZpSWlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85YzY2OTEtYWRhYy00MWU1LThjZTktZjRiN2IzOThjNjM0
LzEvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZrHMA0G
CSqGSIb3DQEBCwUAA4IBAQDDDJW3GxON1hREw8e918c4AHv6izeeQKNpiVOCJepm
MrgJAm1/SWJJeXEg6IojpcEEPKDwrPvU+di4UKS+tioqGVDzHm1gFDlupuDh3ECf
wg/lS3DXC5h19dNyx//iwNri783Fd1Ran/e237gUXzTU0FG4Qm1k7ImkQWBXXwFR
e9BlMHOtlUgfOcp9qYgz0es82OS5F2OTy8IY0zsQup4zAIsZj3mlMM6DHmphr1/9
QbKl7mTP8xW6giN338/t9QT7tY7qJvyBxBuDNPR+pvlTL4jdUZAZQ70CK5FXdoLO
8CPhS+9kXWu318cvANWEFHoqRfodXDclGdFZipV8n7eO
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:15 2025 by rpki-client on console.sobornost.net