Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS46450.roa
File:                     AS46450.roa (raw, json)
Hash identifier:          wrTYBPP7CavhN6e5IZlH86RprT2CToRTwDLy8cPwye8=
Subject key identifier:   C3:4F:DE:21:D4:3C:BF:FE:11:71:D0:42:48:8D:F4:70:42:73:8E:FE
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       5262C77A8B44D3711AD660FE3DFE14575C71722B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS46450.roa
Signing time:             Wed 09 Apr 2025 15:56:58 +0000
ROA not before:           Wed 09 Apr 2025 15:51:58 +0000
ROA not after:            Wed 08 Apr 2026 15:56:58 +0000
asID:                     46450
IP address blocks:        95.135.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:62:c7:7a:8b:44:d3:71:1a:d6:60:fe:3d:fe:14:57:5c:71:72:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Apr  9 15:51:58 2025 GMT
            Not After : Apr  8 15:56:58 2026 GMT
        Subject: CN=C34FDE21D43CBFFE1171D042488DF47042738EFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a0:d1:cd:e7:f4:47:ae:59:cf:71:b9:3a:43:
                    7e:fb:95:76:f9:e2:7c:c6:e1:82:d9:37:88:0c:f2:
                    09:45:6e:84:b2:21:7d:fc:5b:00:73:04:6b:e7:bd:
                    60:53:b9:28:6c:73:28:df:ed:80:52:bd:f0:69:70:
                    a3:ab:15:18:76:0b:66:97:6f:de:75:be:9f:03:ed:
                    ca:76:96:f4:30:78:19:0a:b7:59:dd:f7:eb:15:e8:
                    23:96:4f:6d:48:04:27:58:12:bf:0b:ae:0d:62:7e:
                    b9:4b:d4:e6:c8:0f:95:0a:65:75:a5:4e:62:bc:d4:
                    4c:6e:4e:94:50:46:9f:4b:76:e5:6e:6d:65:28:6c:
                    30:aa:cd:6b:ad:5e:8c:1d:80:46:8a:70:70:6b:de:
                    41:9d:03:24:10:8b:e1:4f:a9:41:26:8f:83:7a:ff:
                    81:4d:45:12:dc:d4:e5:e8:db:7b:b9:0e:b0:ab:3c:
                    88:5b:2d:1c:a1:90:1a:be:9e:29:c6:1c:eb:fe:79:
                    22:96:61:80:4d:2a:48:a7:62:44:cd:b5:99:29:75:
                    26:21:a2:ee:94:95:f9:e0:eb:b6:72:52:ce:63:a7:
                    2a:20:c6:4c:cb:70:37:4f:4a:6b:45:b0:ab:d1:c4:
                    4b:2e:e3:5b:30:1c:d3:89:b8:d7:6b:33:90:2b:1c:
                    7c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4F:DE:21:D4:3C:BF:FE:11:71:D0:42:48:8D:F4:70:42:73:8E:FE
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS46450.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.135.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:2b:24:f2:91:40:80:1d:fe:7b:d8:17:26:da:29:70:40:66:
         54:73:d7:2c:cf:22:42:6f:5a:82:2f:59:62:fa:48:a0:b9:5e:
         2c:b3:54:d7:72:09:e6:91:a7:ee:9d:6b:0b:58:c1:62:a0:01:
         ab:fc:9c:5b:14:cc:33:3d:52:1d:50:92:09:35:87:0c:6b:4a:
         b8:b2:f6:61:a4:a0:95:c3:b0:d3:45:63:e8:44:3c:b6:4f:54:
         66:8c:33:10:c5:e9:b2:f2:6f:61:00:e0:9a:0e:0f:e2:88:8e:
         e2:12:f2:0f:1d:71:67:5f:d8:1a:b8:9a:15:62:dc:ea:49:94:
         54:49:7e:55:6c:23:5d:3a:eb:b1:41:44:8b:9f:51:ec:18:09:
         dc:f7:4a:3d:b6:5f:4f:54:cc:14:da:94:ea:3e:b2:d2:c7:cb:
         d9:eb:8e:3e:8e:75:e4:89:29:df:5d:f6:94:c8:15:9e:f8:88:
         0c:98:29:ce:ad:18:bd:ee:3a:41:0d:56:3c:f4:9a:fe:b7:87:
         43:d7:5e:01:70:55:7f:46:a3:ea:81:05:39:ca:85:7c:f8:f4:
         26:be:9e:cb:79:8c:a1:3e:91:de:76:09:70:78:89:ba:89:08:
         51:f6:ca:83:e6:98:33:8c:e1:8f:e4:0a:f0:41:a2:f4:67:88:
         f8:30:ac:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net