Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/RJc6jzAyS3uWboc6tEy0sbhbczk.roa
File:                     RJc6jzAyS3uWboc6tEy0sbhbczk.roa (raw, json)
Hash identifier:          Tl0N+n4FID6GW+L+lL7UDQWc6s/Qw80QVfgROFxq4Tw=
Subject key identifier:   44:97:3A:8F:30:32:4B:7B:96:6E:87:3A:B4:4C:B4:B1:B8:5B:73:39
Certificate issuer:       /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Certificate serial:       019422FC266B326D9F80EE5608F7FFEE2299
Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/RJc6jzAyS3uWboc6tEy0sbhbczk.roa
Signing time:             Wed 01 Jan 2025 17:48:57 +0000
ROA not before:           Wed 01 Jan 2025 17:48:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     205869
IP address blocks:        185.179.140.0/24 maxlen: 24
                          185.179.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fc:26:6b:32:6d:9f:80:ee:56:08:f7:ff:ee:22:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
        Validity
            Not Before: Jan  1 17:48:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=44973a8f30324b7b966e873ab44cb4b1b85b7339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:68:41:b8:ee:77:ca:d1:68:dd:ca:08:98:e3:
                    b0:f0:04:88:11:55:82:0a:3f:be:04:07:87:0a:b0:
                    7d:04:43:55:a2:6b:5d:ae:ab:f7:f2:24:2e:16:fd:
                    39:27:39:e2:65:6a:dd:89:95:11:93:ac:2b:45:61:
                    9a:cb:a4:a2:a5:06:0f:f9:06:ed:f1:0b:0c:b5:97:
                    f3:87:2d:b4:f9:1c:c8:3f:5b:f6:04:32:f7:e4:78:
                    9e:cb:2f:9f:2a:81:6c:1a:b0:04:45:86:c5:19:76:
                    e3:71:5d:f0:31:6e:2c:ea:3a:bb:0f:7b:1f:8a:f7:
                    fe:03:1b:61:0d:99:c6:61:29:a6:29:26:9b:ef:9b:
                    79:83:28:61:36:a9:2f:95:1a:d6:d3:86:37:f4:d2:
                    2c:5e:77:cd:62:51:3a:e3:59:78:75:98:fb:95:e4:
                    34:64:5f:b1:07:f6:55:16:eb:c9:3b:6f:c5:0f:c4:
                    01:1a:af:de:9f:67:a0:74:fe:07:fc:2f:0a:3b:f3:
                    ed:06:d7:9c:31:aa:d0:98:0a:9e:7d:c1:64:f8:79:
                    be:97:5f:0b:fd:0f:65:7d:b1:16:94:5a:47:4f:5e:
                    0d:d1:07:db:c1:a9:54:e1:2c:e4:bb:08:90:58:b3:
                    26:b7:d4:0d:1b:56:d3:01:a5:97:1f:24:67:32:42:
                    13:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:97:3A:8F:30:32:4B:7B:96:6E:87:3A:B4:4C:B4:B1:B8:5B:73:39
            X509v3 Authority Key Identifier:
                keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/RJc6jzAyS3uWboc6tEy0sbhbczk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.140.0/24
                  185.179.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:c4:89:48:be:86:d7:9e:da:0a:c2:25:34:24:0c:2a:ab:ce:
         77:74:27:2b:08:0d:05:b6:3c:00:68:23:aa:62:d0:80:64:6c:
         39:89:8e:af:05:94:00:4c:9e:55:d9:2b:5d:1f:05:c8:51:7c:
         96:0c:55:9a:2f:13:08:32:a9:42:3f:16:ac:0c:25:65:43:10:
         f8:72:58:98:fa:3d:2f:ea:0e:11:71:29:03:eb:9d:c6:db:0c:
         b5:49:3b:e5:d2:c0:cb:9d:33:bb:de:07:2e:02:d4:ec:73:ba:
         29:57:a5:6c:94:14:8a:7a:b9:74:dc:b5:1c:30:52:23:03:bc:
         73:7a:50:2d:d2:7e:19:a3:15:dc:ee:19:c9:a1:85:f8:f6:af:
         fe:db:58:6b:95:76:58:c5:be:ce:38:5e:ef:45:dd:ac:69:8a:
         88:7c:26:1d:aa:33:c9:48:63:18:eb:ac:44:a9:02:74:c1:ef:
         c4:75:74:db:69:69:b3:50:d5:55:28:1f:8e:c1:e5:b2:a1:3c:
         06:ad:85:bc:7d:83:2f:44:07:fd:dc:ed:99:3c:11:d0:7d:e9:
         6a:9c:a0:ab:ba:3b:61:bf:3d:17:02:72:98:e5:82:50:a6:d0:
         e1:a8:78:6d:66:52:bd:3b:34:ef:cd:e8:5a:88:7f:3a:fa:72:
         40:79:b9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net