Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/JvCEdLPfAAXf7WSbuJj-4ekh7Es.roa
File:                     JvCEdLPfAAXf7WSbuJj-4ekh7Es.roa (raw, json)
Hash identifier:          vnxJ3sIoSk6fiP+z46/46h6rm1KHxuwXM0sR4DgXnI4=
Subject key identifier:   26:F0:84:74:B3:DF:00:05:DF:ED:64:9B:B8:98:FE:E1:E9:21:EC:4B
Certificate issuer:       /CN=eb960982e82bf9e9875445009308de7ecbd05c54
Certificate serial:       0194244483B20D3573529B8638C388866801
Authority key identifier: EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/JvCEdLPfAAXf7WSbuJj-4ekh7Es.roa
Signing time:             Wed 01 Jan 2025 23:47:37 +0000
ROA not before:           Wed 01 Jan 2025 23:47:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     211820
IP address blocks:        94.154.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:83:b2:0d:35:73:52:9b:86:38:c3:88:86:68:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb960982e82bf9e9875445009308de7ecbd05c54
        Validity
            Not Before: Jan  1 23:47:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=26f08474b3df0005dfed649bb898fee1e921ec4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:de:a8:a9:80:6c:b2:35:67:fb:b8:f2:55:3e:
                    28:20:4d:42:c5:4e:81:33:a3:68:30:ec:ef:14:ae:
                    d6:9a:d0:4b:ac:f8:8b:8a:cf:6f:c7:82:64:0f:dd:
                    8a:eb:9d:af:c6:cb:92:01:ca:76:34:a2:5c:a0:a3:
                    18:5f:2e:85:21:b8:8d:61:77:74:08:74:d0:49:e7:
                    11:8f:13:7f:e8:79:31:ce:ee:64:8c:f5:17:58:43:
                    03:de:6f:a4:1b:9f:90:33:a2:f7:c0:df:3f:61:1f:
                    18:b6:fc:e5:ee:da:30:a9:55:be:c4:4a:27:b2:22:
                    fe:86:0b:51:27:6d:be:5c:d3:5c:2c:0a:ba:c0:62:
                    e4:f8:22:3f:60:f1:7d:24:77:aa:6f:00:db:58:67:
                    da:fd:86:27:3f:3e:3c:6a:3c:12:8b:6b:85:b9:31:
                    69:88:05:c4:ea:7b:2b:37:c6:7f:30:95:91:bf:c9:
                    15:ef:1e:04:0e:e7:19:18:75:a4:be:6c:72:54:b6:
                    c8:3e:7b:3c:6f:19:9f:0b:de:d2:68:b7:b0:90:43:
                    54:80:cb:52:0d:ac:86:31:c3:96:26:dd:e3:ff:c8:
                    ae:30:b9:fa:54:24:7d:13:13:09:0d:4e:0f:e1:1d:
                    90:53:95:85:e8:af:eb:e9:6e:5e:84:93:da:48:35:
                    58:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F0:84:74:B3:DF:00:05:DF:ED:64:9B:B8:98:FE:E1:E9:21:EC:4B
            X509v3 Authority Key Identifier:
                keyid:EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/JvCEdLPfAAXf7WSbuJj-4ekh7Es.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.154.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:90:c3:d5:c4:4f:1c:59:cc:d0:07:f0:67:29:69:00:b3:35:
         8a:71:3f:70:9a:eb:d6:e6:6e:b0:66:f1:fd:69:13:44:ea:4f:
         48:aa:a4:5e:9c:f9:6f:80:a6:46:96:4f:a5:30:61:89:65:0e:
         4b:2e:08:63:e8:f0:44:21:ae:05:7c:58:70:0c:74:06:c7:9a:
         5d:bc:74:36:52:ef:4f:05:08:f9:e9:33:cd:91:ce:1c:17:0d:
         5a:07:f5:1a:80:1c:f9:d3:00:51:70:14:ea:2c:e2:5c:ab:84:
         92:d0:b1:64:e4:99:9c:b9:26:40:7a:be:de:4a:f1:68:aa:e6:
         d4:24:58:d8:e1:40:71:63:c3:d6:e1:61:00:fb:14:ef:60:85:
         2f:cc:8f:11:dc:2e:7c:ab:60:79:de:45:90:55:25:d6:3d:35:
         9c:c6:e1:f0:36:12:57:3a:76:4b:0a:3c:01:b8:be:82:84:0b:
         51:13:7d:aa:3c:47:98:2b:67:de:88:23:5b:43:2b:82:58:55:
         cb:f0:a7:d7:04:39:28:cd:68:89:63:93:9a:bc:03:2d:b4:a3:
         1d:ae:f3:84:11:cd:ba:6d:f8:af:be:4e:84:e1:fb:1e:49:1d:
         5a:81:fc:4b:56:53:5d:b3:9c:36:28:a7:d1:37:57:cd:31:73:
         3c:ad:44:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:30 2025 by rpki-client on console.sobornost.net