Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/RC7wgRAs2o4H2l1TLqn8NZUndUY.roa
File:                     RC7wgRAs2o4H2l1TLqn8NZUndUY.roa (raw, json)
Hash identifier:          SCrWR5DUqk0ILJy6T4Si10/+i7OXDOm/wTyU6YmTVRU=
Subject key identifier:   44:2E:F0:81:10:2C:DA:8E:07:DA:5D:53:2E:A9:FC:35:95:27:75:46
Certificate issuer:       /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial:       019424B3B44EB96FE3DDAA2B25C7382D9ED6
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/RC7wgRAs2o4H2l1TLqn8NZUndUY.roa
Signing time:             Thu 02 Jan 2025 01:49:04 +0000
ROA not before:           Thu 02 Jan 2025 01:49:04 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     60251
IP address blocks:        5.23.50.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:b4:4e:b9:6f:e3:dd:aa:2b:25:c7:38:2d:9e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
        Validity
            Not Before: Jan  2 01:49:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=442ef081102cda8e07da5d532ea9fc3595277546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:65:a1:2d:b4:56:65:94:e4:b0:a2:e0:52:4b:
                    1e:bf:ba:9c:67:92:04:23:47:78:72:da:ab:99:21:
                    82:d2:a5:9b:13:eb:13:9e:3d:fc:6f:55:2e:4b:24:
                    13:ec:69:35:fc:74:de:be:08:b8:34:91:22:a2:31:
                    f6:4a:26:2c:bb:84:5a:0e:75:75:53:dd:cf:7e:b2:
                    2c:38:8a:b5:d3:57:50:a8:c6:61:71:9d:a3:76:50:
                    4c:b4:6d:44:d4:51:f6:75:75:8b:1d:f7:06:63:41:
                    52:27:3a:fd:dd:ca:40:d4:52:6d:92:5a:2f:2a:70:
                    08:be:80:a8:36:bf:82:ba:69:23:d4:0f:0a:e7:88:
                    b2:ad:dd:e5:9f:0d:45:c9:b1:9f:1a:53:b4:b0:ac:
                    de:0b:fe:9e:fc:4d:a9:f5:87:89:39:fa:c2:d8:a3:
                    d7:a6:2e:8f:4d:1e:82:fa:5e:65:68:f7:3c:6e:dc:
                    b2:83:4a:9c:03:54:1e:60:78:ff:55:55:1c:f3:8e:
                    e4:67:0e:2e:90:2d:f6:14:f1:66:2c:80:dc:09:48:
                    71:33:46:2c:53:d7:73:0c:5a:6b:41:15:20:a7:f3:
                    f3:7d:7e:5b:fe:d3:1d:7e:0d:8f:60:22:9d:88:5d:
                    31:b0:fc:a7:47:99:8d:8c:e4:d4:e3:a4:8c:7d:ca:
                    3d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2E:F0:81:10:2C:DA:8E:07:DA:5D:53:2E:A9:FC:35:95:27:75:46
            X509v3 Authority Key Identifier:
                keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/RC7wgRAs2o4H2l1TLqn8NZUndUY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.23.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:fe:77:8d:e8:06:d9:fe:91:6c:b1:ba:77:1b:8d:30:5a:73:
         1b:a7:bb:ba:39:97:39:bd:37:aa:7a:0a:b5:8c:a2:8b:54:cb:
         cf:f1:c4:3e:11:2f:6d:79:ac:17:f2:5c:62:6c:50:f8:d9:18:
         a3:70:8c:22:da:cf:ef:2c:0e:2f:27:fe:ac:8c:1b:c7:46:4b:
         97:53:d9:9f:e3:66:e6:65:76:15:4c:53:60:7f:94:53:b6:d4:
         87:82:e2:f9:91:aa:b2:1a:6d:1b:cc:29:59:61:32:09:b5:e3:
         dd:3b:65:40:3f:fb:29:d2:f7:54:84:12:8a:d9:d5:de:fb:f5:
         c2:5c:d8:f3:dd:32:91:95:75:e1:f8:31:60:ae:9c:7e:fa:cf:
         c6:28:c6:02:1b:de:fa:12:d7:e2:cb:57:3d:d1:6c:dd:1e:40:
         8e:1e:73:e2:24:34:80:ed:d5:ec:d4:f1:ac:2e:86:c9:0c:96:
         92:41:f2:2c:62:21:9b:a1:a0:9f:ec:c4:aa:5b:21:f6:b6:45:
         0c:bf:3c:fa:77:bc:25:2e:05:38:c7:8d:e5:9d:b2:58:2b:88:
         de:98:d0:98:a1:ee:71:b3:7e:dd:42:af:0c:75:6b:d8:bb:ae:
         d3:6c:0a:3c:e7:18:64:80:9d:c6:76:0e:cd:c1:0b:5b:6a:86:
         65:69:b3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:06 2025 by rpki-client on console.sobornost.net