Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/JnUDLpnSNZdUPTciH_SImfiQNPg.roa
File:                     JnUDLpnSNZdUPTciH_SImfiQNPg.roa (raw, json)
Hash identifier:          phKmDfTKEa4M5M2wLFu2WomQfhRDPt24TZJyLDqWijI=
Subject key identifier:   26:75:03:2E:99:D2:35:97:54:3D:37:22:1F:F4:88:99:F8:90:34:F8
Certificate issuer:       /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial:       0195321E040AD9D1BF1630A9F1829B1DCE36
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/JnUDLpnSNZdUPTciH_SImfiQNPg.roa
Signing time:             Sun 23 Feb 2025 09:23:02 +0000
ROA not before:           Sun 23 Feb 2025 09:23:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     34918
IP address blocks:        85.133.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:32:1e:04:0a:d9:d1:bf:16:30:a9:f1:82:9b:1d:ce:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
        Validity
            Not Before: Feb 23 09:23:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2675032e99d23597543d37221ff48899f89034f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c1:5c:55:b9:23:ee:59:55:a7:bc:75:b6:07:
                    f4:64:48:b4:39:0e:7d:df:36:75:18:67:0e:ff:bd:
                    bf:b5:8b:66:5a:29:97:fb:5d:7f:27:0a:45:f9:05:
                    52:92:2d:98:9c:1a:71:8c:c6:ec:5c:a7:a4:01:f7:
                    6a:8d:40:d8:81:27:04:1d:90:7a:47:63:92:60:d4:
                    f1:1a:34:d2:90:40:37:c8:53:53:12:3e:76:bb:a3:
                    d1:8d:b7:b8:2e:6b:69:4a:d6:92:43:ca:9b:99:dc:
                    15:ac:d5:a6:4e:91:5c:b3:7c:20:1f:75:dd:be:04:
                    89:34:94:30:c1:73:39:43:87:d9:4a:a8:d5:b2:22:
                    3d:25:af:d1:13:20:ab:61:b7:d6:50:3d:41:49:78:
                    58:ea:ab:a6:19:7b:02:15:ea:2e:1e:d3:ea:39:a3:
                    11:48:53:c7:a2:05:85:5a:8c:dc:f6:e5:66:5c:20:
                    34:af:96:48:ed:a6:52:b5:46:b5:f9:cb:dc:fb:09:
                    d0:06:1e:01:75:d8:be:d7:68:56:c1:21:99:1a:0a:
                    b7:d5:56:dd:31:e5:64:35:b0:31:46:c4:7d:90:91:
                    f5:b7:c9:76:4a:a3:64:83:c5:c8:4b:39:9d:d5:e7:
                    38:7d:ce:46:47:0e:b0:c9:d7:e8:d7:ce:a9:62:10:
                    6f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:75:03:2E:99:D2:35:97:54:3D:37:22:1F:F4:88:99:F8:90:34:F8
            X509v3 Authority Key Identifier:
                keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/JnUDLpnSNZdUPTciH_SImfiQNPg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.133.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:fb:7a:a0:c5:47:ee:6a:99:66:24:a2:69:18:1a:0e:aa:29:
         6e:c9:6d:ab:85:9f:4b:e9:d9:c9:a7:1e:43:ad:ef:82:53:7d:
         e3:09:0e:94:ab:70:0b:b1:71:7b:c7:6b:53:d3:a9:df:f8:fb:
         24:bf:80:6a:75:f7:9f:76:55:27:ca:5b:9e:24:2b:9c:2b:5e:
         70:41:49:e5:0b:55:1e:bd:09:70:06:92:f7:70:be:e1:d2:ec:
         78:d0:0b:00:52:1f:ba:76:ba:c7:3e:14:0b:eb:42:66:b9:20:
         56:b7:92:b7:f3:04:ca:a1:52:b5:7c:b0:a6:60:51:62:28:e0:
         65:57:5b:f9:d6:32:a4:39:15:e7:3d:5e:9a:83:48:ce:7c:61:
         70:54:1d:bd:88:59:8d:ab:06:ae:00:61:92:ba:26:ac:0b:7b:
         25:6f:b2:cf:d2:cd:08:3b:6c:82:e5:82:d6:ae:30:2e:17:06:
         34:b5:61:c1:f3:2a:e4:3d:93:fb:8c:c9:35:46:c2:89:db:f6:
         4a:a2:24:93:91:99:94:0f:17:d3:4f:2d:e0:ba:bd:c8:a8:cb:
         cd:7b:70:2a:a8:00:91:17:59:ba:24:1d:70:82:c5:1c:15:f2:
         f7:a7:4a:63:4b:b1:eb:c9:47:10:a5:70:f2:8d:36:11:37:fb:
         13:90:96:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net