Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/HoEt4y6zf8w5L0OHd11vl-inukI.roa
File:                     HoEt4y6zf8w5L0OHd11vl-inukI.roa (raw, json)
Hash identifier:          470AufFFRZgA9ydBk/s9OXGNkkDkg7YffxaoQosYMko=
Subject key identifier:   1E:81:2D:E3:2E:B3:7F:CC:39:2F:43:87:77:5D:6F:97:E8:A7:BA:42
Certificate issuer:       /CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Certificate serial:       019427B540DFBE4A97998936CE38379F2A7B
Authority key identifier: 53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/HoEt4y6zf8w5L0OHd11vl-inukI.roa
Signing time:             Thu 02 Jan 2025 15:49:37 +0000
ROA not before:           Thu 02 Jan 2025 15:49:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     1835
IP address blocks:        193.163.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:40:df:be:4a:97:99:89:36:ce:38:37:9f:2a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
        Validity
            Not Before: Jan  2 15:49:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1e812de32eb37fcc392f4387775d6f97e8a7ba42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:08:c9:fe:8d:39:9c:78:ea:b3:c0:14:09:a6:
                    17:22:2a:fe:39:ba:e3:ab:27:b7:1d:ad:02:84:44:
                    2b:fc:15:64:f3:3a:eb:1a:b6:58:0e:6b:5f:aa:8d:
                    9a:46:5a:eb:d8:bf:f0:ad:65:ba:3f:1d:16:67:05:
                    f3:58:c5:dc:6a:37:f9:75:33:c5:07:b8:43:c5:20:
                    63:8e:41:2f:c5:dd:7e:a9:23:a0:af:62:f4:78:71:
                    9b:79:15:a7:02:f2:93:34:d6:f6:cd:5f:8c:eb:0e:
                    2d:84:90:56:7c:d0:ea:26:5d:41:08:d2:0c:4d:15:
                    f7:ea:3e:20:48:d5:48:90:c9:5a:91:b6:27:55:9d:
                    74:f9:94:10:2c:e6:5c:b1:27:af:95:ad:27:46:e1:
                    8b:ec:64:f7:81:79:13:4f:c6:46:68:56:f5:17:53:
                    8c:2d:9b:24:af:86:ae:44:20:cc:70:a4:0c:17:0c:
                    a9:a5:32:79:46:35:29:b5:a6:ea:e3:01:9f:dc:a7:
                    c7:10:ac:b7:91:d0:34:f1:d9:9a:cb:20:72:59:69:
                    db:50:bd:61:81:da:12:12:73:cb:22:cc:68:b4:d7:
                    dc:90:4b:4e:bb:47:0b:ae:21:33:d0:e4:1f:f3:cf:
                    93:b8:c1:55:bc:40:d4:77:69:06:5b:fa:42:b5:5a:
                    36:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:81:2D:E3:2E:B3:7F:CC:39:2F:43:87:77:5D:6F:97:E8:A7:BA:42
            X509v3 Authority Key Identifier:
                keyid:53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/HoEt4y6zf8w5L0OHd11vl-inukI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:69:92:de:00:e2:89:a0:ef:8e:e1:d9:7c:0d:ef:86:50:cf:
         a2:a1:41:ff:e1:24:3d:50:97:35:57:98:84:54:21:1e:ee:f5:
         06:fa:51:d2:13:f7:54:9e:84:3c:89:f8:a8:1d:61:97:0d:f2:
         ac:57:51:3d:bb:93:66:7b:22:50:13:5b:9a:cb:c4:6b:79:e8:
         2e:fc:f2:83:8e:c2:e6:23:63:3e:c9:5f:0e:cd:bf:d0:4c:aa:
         68:e8:11:70:49:e4:16:fb:e5:57:a5:61:d8:2c:19:ea:02:90:
         f4:6d:d8:fb:c5:97:3f:33:d4:53:03:ab:fe:25:be:a6:a8:70:
         7e:ce:bd:24:4c:56:4e:a7:84:f3:72:05:f8:44:4d:64:98:3f:
         a0:0d:a1:12:85:84:7e:17:fc:2e:44:68:9d:f6:28:26:c0:c9:
         a4:89:08:18:5b:69:3e:f1:8d:ca:a9:2f:dc:11:96:cf:1c:3f:
         96:17:08:f5:f2:dd:16:31:20:c3:62:96:7f:cc:1a:25:61:a5:
         1b:18:56:86:21:9f:0b:db:64:1c:32:b0:0a:7e:09:e2:e3:e1:
         b9:ef:33:51:f3:7c:75:02:b8:58:60:aa:8c:1d:ab:87:29:23:
         21:5d:b2:5f:a4:8d:3f:30:b4:68:dc:2a:b0:83:a1:a4:12:dc:
         71:a4:4e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:48 2025 by rpki-client on console.sobornost.net