Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/te98bJGGUvJI2dvVEFniebRE2-Q.roa
File:                     te98bJGGUvJI2dvVEFniebRE2-Q.roa (raw, json)
Hash identifier:          YFZNKLPi4G/NTA6BGaRrsOjmLUpnVxIljNwYkPRZo1o=
Subject key identifier:   B5:EF:7C:6C:91:86:52:F2:48:D9:DB:D5:10:59:E2:79:B4:44:DB:E4
Certificate issuer:       /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial:       01941F8C849193E3B7068F9C41229DFBB2B9
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/te98bJGGUvJI2dvVEFniebRE2-Q.roa
Signing time:             Wed 01 Jan 2025 01:48:10 +0000
ROA not before:           Wed 01 Jan 2025 01:48:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     25498
IP address blocks:        46.232.232.0/23 maxlen: 23
                          195.22.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:84:91:93:e3:b7:06:8f:9c:41:22:9d:fb:b2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
        Validity
            Not Before: Jan  1 01:48:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b5ef7c6c918652f248d9dbd51059e279b444dbe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:ec:47:8f:fa:79:40:03:a6:e1:4e:6f:22:
                    b6:13:b3:2f:5b:32:c8:0f:2f:7d:0d:88:06:47:f4:
                    c4:c2:35:d6:0d:2c:35:b7:67:cf:9f:20:68:6c:56:
                    96:df:20:cf:fb:55:2b:57:e8:a0:98:af:34:52:55:
                    7b:83:1b:b4:45:c5:fb:91:58:40:82:bb:be:05:6b:
                    45:ab:30:4c:c1:ea:a5:89:47:2a:20:b1:a7:54:c3:
                    ee:8e:30:52:34:af:58:53:a6:61:7d:d0:4e:c4:6b:
                    2e:ed:24:82:a6:bf:d8:4f:b9:85:6b:c4:74:f3:82:
                    20:77:3d:9f:48:52:c1:f7:0a:a3:e8:f7:b1:ba:44:
                    86:11:ba:76:31:d3:d0:20:73:94:a7:20:a8:b1:26:
                    dd:5b:8d:12:73:9d:fd:8c:2f:fc:ef:bd:6d:af:cf:
                    bb:75:64:8d:82:9e:71:78:17:37:23:9e:95:89:c7:
                    69:66:af:ad:3d:d2:a0:99:80:a7:2c:4b:12:ee:5e:
                    cd:ae:d8:cc:58:08:8b:47:66:9c:23:1b:9b:d6:96:
                    cd:f1:74:52:35:43:02:8e:c3:9c:75:60:0e:f7:0c:
                    6d:ae:31:95:61:37:9d:ee:29:bd:18:d1:9c:78:7e:
                    26:b9:86:69:bb:5c:86:6e:6d:3c:67:26:c4:67:e2:
                    1d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EF:7C:6C:91:86:52:F2:48:D9:DB:D5:10:59:E2:79:B4:44:DB:E4
            X509v3 Authority Key Identifier:
                keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/te98bJGGUvJI2dvVEFniebRE2-Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.232.232.0/23
                  195.22.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:7d:f2:5e:40:e6:8b:14:65:aa:c9:37:54:41:a0:58:97:9f:
         96:f2:df:44:51:07:67:1c:c6:2a:b8:b3:a6:ef:46:45:67:96:
         65:98:2a:91:3c:49:43:11:2a:51:ab:59:e4:d0:44:8a:d1:76:
         30:f3:f5:0f:56:db:f9:90:43:18:02:67:10:bd:eb:45:c2:24:
         16:22:0c:da:ff:fe:f4:a5:76:fa:67:3a:54:9c:0d:e1:b0:a1:
         92:68:ef:cf:00:d2:01:7c:0f:09:58:3d:0a:2c:fa:4c:73:0e:
         a6:21:25:67:a0:99:88:a3:36:46:55:ef:7d:66:17:e3:15:98:
         bb:b2:3f:3a:a9:33:ec:d2:c8:55:30:18:e7:83:1b:44:c8:f0:
         93:20:60:88:6a:2c:89:cf:03:58:a1:2f:f1:2c:c1:5e:73:ef:
         10:64:8d:d6:2e:29:67:5b:09:40:6b:0a:bb:5c:b2:f0:61:63:
         bc:ab:5a:dc:71:e5:3f:9d:c8:16:d4:93:a2:f5:f1:b2:3d:05:
         d2:f9:85:fa:04:ff:10:5d:a1:5d:97:a6:01:0b:30:58:67:d7:
         8b:0a:52:fd:1f:64:7c:b8:2a:0d:71:47:bf:59:25:c9:df:24:
         9b:ad:05:8e:a7:5f:00:8b:55:a0:cc:0b:21:28:6b:26:a8:b0:
         27:d2:e2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net