Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/SIolq_1_WZM4Sl_jpV4PfGa787Q.roa
File:                     SIolq_1_WZM4Sl_jpV4PfGa787Q.roa (raw, json)
Hash identifier:          j7Gukmt+3MRCWPVKoFNL04/tZ9Oo5sZf6Bgq4mKvIoA=
Subject key identifier:   48:8A:25:AB:FD:7F:59:93:38:4A:5F:E3:A5:5E:0F:7C:66:BB:F3:B4
Certificate issuer:       /CN=d9527368206e3e9a5924081df63880246e5c541a
Certificate serial:       01941FFA24DE4AF632EED8F02924B5A4DA45
Authority key identifier: D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/SIolq_1_WZM4Sl_jpV4PfGa787Q.roa
Signing time:             Wed 01 Jan 2025 03:47:54 +0000
ROA not before:           Wed 01 Jan 2025 03:47:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137
IP address blocks:        140.105.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:24:de:4a:f6:32:ee:d8:f0:29:24:b5:a4:da:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9527368206e3e9a5924081df63880246e5c541a
        Validity
            Not Before: Jan  1 03:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=488a25abfd7f5993384a5fe3a55e0f7c66bbf3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ee:67:cd:e7:e3:08:d8:8d:16:85:44:7f:2c:
                    58:d0:1d:22:31:6d:86:3d:aa:72:2e:ab:74:f7:0c:
                    a0:3f:6f:4f:e0:dd:e7:4a:16:14:48:d9:f9:ae:02:
                    23:76:74:2e:e8:c4:9a:6a:01:11:ef:0f:08:36:a1:
                    14:13:c1:c7:ae:56:c4:8e:a3:a1:09:7a:c4:7f:3f:
                    33:56:98:7c:a2:f0:99:ef:b6:49:e9:ce:0a:0a:cd:
                    52:c9:17:27:5a:56:d5:35:09:34:a7:d1:52:05:12:
                    5b:fc:35:88:24:4e:0a:19:03:88:bf:dc:41:51:96:
                    6d:e8:1c:0e:7b:f8:53:f6:3a:0b:8e:ea:2c:43:67:
                    07:a1:a1:90:b5:d3:bb:cd:ae:b7:e4:99:05:d1:e8:
                    48:24:f9:a7:be:d4:61:0f:c1:81:0c:e1:e8:00:da:
                    e0:e8:85:be:c8:00:b7:cc:71:5c:fd:71:74:09:91:
                    b2:77:c4:cc:c0:6f:c9:68:30:19:d7:0b:9d:c6:6b:
                    2d:54:6e:36:97:0c:73:51:71:b0:cb:60:9f:b6:ff:
                    13:de:0f:1b:fd:9e:c6:f3:59:95:88:6b:9e:f6:e2:
                    b1:4b:1e:5f:14:fb:5d:e2:35:26:8b:4f:28:d7:db:
                    0d:82:49:3f:6e:2c:f8:9e:e8:6c:06:b5:d5:f4:58:
                    52:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8A:25:AB:FD:7F:59:93:38:4A:5F:E3:A5:5E:0F:7C:66:BB:F3:B4
            X509v3 Authority Key Identifier:
                keyid:D9:52:73:68:20:6E:3E:9A:59:24:08:1D:F6:38:80:24:6E:5C:54:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VJzaCBuPppZJAgd9jiAJG5cVBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/SIolq_1_WZM4Sl_jpV4PfGa787Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/82129a-5263-43d2-bc63-19620615579b/1/2VJzaCBuPppZJAgd9jiAJG5cVBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.105.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d8:b1:8f:8d:5a:6f:d5:8f:fe:46:c7:80:e5:b8:a7:63:0f:78:
         d7:06:52:ff:d4:9a:98:0e:5b:fa:76:75:96:af:a1:3c:47:a2:
         45:e1:0e:b9:8e:23:15:34:93:4e:e4:69:63:3b:aa:99:42:5a:
         01:62:19:0d:91:35:46:df:f2:50:a2:c2:3c:f9:62:cd:ee:0c:
         e2:2c:63:35:fa:f4:8e:47:93:3a:69:ff:cb:00:44:19:d4:04:
         58:61:5d:fe:99:2e:a3:02:32:42:b3:bc:bd:f6:ef:d7:5f:ad:
         96:70:71:58:31:9c:40:7e:47:d6:65:2e:5e:fd:0a:f5:cb:35:
         0d:55:ca:03:c6:2d:e9:f1:bd:43:02:57:4e:3d:79:4a:a7:45:
         88:fa:3e:fd:f6:da:67:29:4d:2e:0f:e0:03:59:31:0a:47:43:
         c4:2b:db:aa:79:a2:9d:cb:0c:1f:f6:e2:9f:b5:9a:f6:84:50:
         ee:5b:c5:a2:03:cd:9b:d8:d5:8e:61:bb:15:6a:92:b2:ae:9d:
         96:a3:38:d9:08:67:09:b9:b3:79:7c:9a:26:b8:bc:74:6c:70:
         ec:50:cd:d5:29:38:48:17:b9:da:1d:01:68:5e:22:f8:42:1a:
         03:a7:e5:f0:90:83:e4:be:50:d5:9d:8f:76:57:c2:6f:98:fb:
         47:1e:48:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net