Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/vsEC-C0-IZ2XJzdCqJMyLFlVXyo.roa
File:                     vsEC-C0-IZ2XJzdCqJMyLFlVXyo.roa (raw, json)
Hash identifier:          6dyvsyNO+SBB5YmEGzfWoUfWH/YqXAoOIBD3aTROXnU=
Subject key identifier:   BE:C1:02:F8:2D:3E:21:9D:97:27:37:42:A8:93:32:2C:59:55:5F:2A
Certificate issuer:       /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial:       0195F6DBBD61A71ACF03B49B148A9C10B07A
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/vsEC-C0-IZ2XJzdCqJMyLFlVXyo.roa
Signing time:             Wed 02 Apr 2025 14:15:50 +0000
ROA not before:           Wed 02 Apr 2025 14:15:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     203632
IP address blocks:        185.101.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:f6:db:bd:61:a7:1a:cf:03:b4:9b:14:8a:9c:10:b0:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
        Validity
            Not Before: Apr  2 14:15:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bec102f82d3e219d97273742a893322c59555f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:ce:fa:87:71:85:bf:70:9b:6e:e0:a9:40:
                    15:7f:fc:42:78:f0:47:fe:de:c9:28:f6:b0:20:93:
                    14:5b:71:af:2f:8d:7e:1b:e5:2c:8f:48:31:f8:b0:
                    84:34:bf:08:97:3e:49:71:89:0e:33:45:48:45:61:
                    72:7f:e4:b8:f2:4b:41:ce:46:5f:c6:6a:c2:62:9d:
                    d2:72:25:8a:45:35:b4:0f:37:bc:8d:31:bb:e5:ba:
                    16:2e:c9:6d:08:d4:5b:a6:3a:69:bb:3d:37:91:f0:
                    a6:d8:df:cb:ab:38:2f:d0:0b:98:5a:8c:63:94:e7:
                    80:0e:49:7f:79:79:b2:0b:bd:e5:05:70:ea:5b:64:
                    f3:f5:32:0a:3e:03:9e:0f:0a:f8:34:c8:e4:69:0f:
                    15:2f:e5:ff:fd:4e:87:2d:d9:78:6e:b3:52:7f:20:
                    20:ef:89:50:7a:ac:56:28:a6:46:97:15:74:a4:bd:
                    dc:9d:bb:f4:d4:bd:fd:b5:e3:50:53:af:89:c7:33:
                    2a:91:54:ca:e5:01:6c:87:53:f7:fa:fd:92:d9:a1:
                    5a:b9:80:9a:73:81:92:f7:23:98:21:19:42:eb:64:
                    1e:97:5f:b2:84:59:a6:96:e4:4c:2d:6a:af:4c:85:
                    52:d8:4d:c9:75:ac:d9:aa:08:db:a5:00:4c:1b:d7:
                    f5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C1:02:F8:2D:3E:21:9D:97:27:37:42:A8:93:32:2C:59:55:5F:2A
            X509v3 Authority Key Identifier:
                keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/vsEC-C0-IZ2XJzdCqJMyLFlVXyo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.101.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:a1:36:97:2f:79:3f:93:1b:dc:57:c1:19:bb:4f:e3:0f:57:
         2c:77:3d:5b:ad:b3:4f:86:bf:fe:f0:5c:42:57:61:36:f9:3f:
         a0:04:75:3c:85:aa:73:52:a2:a8:c6:46:a9:f7:23:9d:4b:e6:
         13:8e:ac:5c:6c:ca:8a:a2:cd:00:2d:9f:a2:32:cb:10:f2:0c:
         ea:32:8a:3c:1c:11:ff:19:7b:62:54:2a:a6:6a:26:80:33:f2:
         bc:5d:00:0a:35:0c:7e:82:7b:da:38:11:b7:a5:bc:d5:ff:26:
         e6:aa:66:c0:08:e4:21:26:45:94:42:06:db:c4:14:d6:48:64:
         85:b2:0d:42:9f:83:50:c9:be:06:12:41:f8:0d:ac:cb:3a:d0:
         d8:7e:e2:5f:8c:db:d6:95:56:7e:47:56:f3:1e:67:dc:21:34:
         9b:92:97:b9:37:9c:66:6e:23:68:c0:72:1b:c9:bc:a8:2e:e7:
         30:e3:05:3e:ab:df:03:cb:56:38:ef:14:fe:5b:03:54:f5:21:
         9a:18:ed:17:6c:f9:95:c3:da:eb:37:59:2c:9d:c8:ab:ed:65:
         f5:1b:4b:7c:7e:52:5d:6e:fc:5c:29:de:c6:fe:e8:b5:55:b8:
         17:b6:55:02:f4:2f:90:4b:71:35:57:a7:af:a7:22:7e:77:64:
         9d:ca:bc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net