Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/j4Iq2zixx3mYag3J5EZ9oVMKB3Q.roa
File:                     j4Iq2zixx3mYag3J5EZ9oVMKB3Q.roa (raw, json)
Hash identifier:          /Gl9L/9VfxRkLzepVwRrDXgXI17GQGF8IKxBmlZI9QI=
Subject key identifier:   8F:82:2A:DB:38:B1:C7:79:98:6A:0D:C9:E4:46:7D:A1:53:0A:07:74
Certificate issuer:       /CN=9e4274f139bd669aaef774d6503b28d996637bbd
Certificate serial:       019423D7324FF357FEA32287475E4DC61A90
Authority key identifier: 9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/j4Iq2zixx3mYag3J5EZ9oVMKB3Q.roa
Signing time:             Wed 01 Jan 2025 21:48:13 +0000
ROA not before:           Wed 01 Jan 2025 21:48:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     9136
IP address blocks:        46.17.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:32:4f:f3:57:fe:a3:22:87:47:5e:4d:c6:1a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4274f139bd669aaef774d6503b28d996637bbd
        Validity
            Not Before: Jan  1 21:48:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8f822adb38b1c779986a0dc9e4467da1530a0774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1a:ce:e1:71:b9:dc:79:ea:85:11:69:5f:1d:
                    cc:4e:12:93:f7:f5:e9:7f:04:a3:ce:a8:e5:82:fc:
                    0d:66:4b:e5:e8:32:ba:7a:39:c3:76:10:4c:51:fc:
                    35:8c:44:9a:5d:15:07:7e:55:97:a2:ac:5a:99:b9:
                    1f:f6:64:5a:50:5c:bc:d5:67:7f:fe:b4:1f:55:b7:
                    b9:2a:66:f8:f5:cd:5c:28:9a:9f:0b:3a:01:1c:c0:
                    62:09:4e:94:6c:7e:77:ea:df:e3:35:50:82:f4:a7:
                    18:b4:da:0d:84:30:c4:45:48:b0:c6:eb:b4:32:bd:
                    57:ce:60:3f:d2:7f:88:94:19:65:87:07:26:61:97:
                    4f:e0:51:d9:21:cf:37:30:73:c0:b2:7e:6d:2d:d1:
                    2b:e3:9d:2f:f9:31:12:93:7c:58:6a:70:04:41:5d:
                    4a:3f:85:63:78:03:c7:da:0c:a1:1d:af:27:36:c6:
                    4d:6a:e2:b5:da:9c:9d:99:7d:ec:ba:97:2c:f2:85:
                    b9:ab:82:65:0b:09:46:17:1b:bb:73:98:eb:cc:13:
                    9d:27:53:a0:21:32:7e:10:ba:dc:61:ed:0a:a5:d4:
                    7c:e2:49:25:f8:30:fe:98:57:83:d3:8f:92:24:2f:
                    8d:fe:a8:ae:29:07:ff:0d:f8:ae:7b:4c:d3:de:e9:
                    7e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:82:2A:DB:38:B1:C7:79:98:6A:0D:C9:E4:46:7D:A1:53:0A:07:74
            X509v3 Authority Key Identifier:
                keyid:9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/j4Iq2zixx3mYag3J5EZ9oVMKB3Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.17.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:6d:cf:3a:6c:ed:35:98:8e:11:07:bc:33:8c:ac:33:21:b9:
         e3:58:7d:e7:55:e6:86:42:42:c3:e2:f1:a6:d7:40:4b:9d:57:
         d8:43:31:2b:c5:86:85:a3:17:14:78:b1:2c:2e:56:42:f9:85:
         5b:09:31:6b:1b:86:f6:aa:ad:f3:93:53:f9:18:b0:f3:ec:51:
         2b:57:20:d9:69:ae:89:85:3a:03:8e:69:f9:d3:ea:76:24:15:
         1d:c3:fc:d3:2d:fd:4e:e7:9e:d1:d7:bd:26:f8:03:72:a0:1d:
         56:24:56:9c:4a:b9:36:25:1c:4a:1b:7b:15:47:38:e8:77:5c:
         06:d3:dd:5f:eb:2f:9e:61:3d:03:b0:ed:01:e3:d9:a4:b6:a7:
         7b:5d:3a:b2:a2:41:6f:0a:4b:f1:0a:27:a3:3c:af:4b:fd:03:
         3d:e6:00:c4:8d:bd:a6:09:85:bb:97:a1:b3:f2:7c:67:5b:20:
         a6:e1:ef:77:6a:e8:51:1d:a8:66:0a:81:2a:43:4c:e5:71:a3:
         b4:ce:e0:47:4f:73:47:c8:e6:cd:b5:3b:6d:b7:5d:c6:26:35:
         b7:10:41:2b:9e:67:a0:1c:65:05:40:99:d2:7c:86:f0:ef:54:
         52:f9:b0:c3:29:41:b6:0d:be:32:3d:4c:3c:43:9b:13:4b:75:
         48:ce:6a:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1zJP81f+oyKHR15NxhqQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDI3NGYxMzliZDY2OWFhZWY3NzRkNjUwM2IyOGQ5OTY2
MzdiYmQwHhcNMjUwMTAxMjE0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjgyMmFkYjM4YjFjNzc5OTg2YTBkYzllNDQ2N2RhMTUzMGEwNzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhrO4XG53HnqhRFpXx3MThKT9/Xp
fwSjzqjlgvwNZkvl6DK6ejnDdhBMUfw1jESaXRUHflWXoqxambkf9mRaUFy81Wd/
/rQfVbe5Kmb49c1cKJqfCzoBHMBiCU6UbH536t/jNVCC9KcYtNoNhDDERUiwxuu0
Mr1XzmA/0n+IlBllhwcmYZdP4FHZIc83MHPAsn5tLdEr450v+TESk3xYanAEQV1K
P4VjeAPH2gyhHa8nNsZNauK12pydmX3supcs8oW5q4JlCwlGFxu7c5jrzBOdJ1Og
ITJ+ELrcYe0KpdR84kkl+DD+mFeD04+SJC+N/qiuKQf/Dfiue0zT3ul+ywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI+CKts4scd5mGoNyeRGfaFTCgd0MB8GA1UdIwQY
MBaAFJ5CdPE5vWaarvd01lA7KNmWY3u9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtKMDhUbTlacHF1OTNUV1VEc28yWlpqZTcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8zMmI2MWMtY2U4Mi00NjNjLThmNjQt
Mjc3NWRlNTIwMmZiLzEvajRJcTJ6aXh4M21ZYWczSjVFWjlvVk1LQjNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8zMmI2MWMtY2U4Mi00NjNjLThmNjQtMjc3NWRlNTIwMmZi
LzEvbmtKMDhUbTlacHF1OTNUV1VEc28yWlpqZTcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLhFsMA0G
CSqGSIb3DQEBCwUAA4IBAQB8bc86bO01mI4RB7wzjKwzIbnjWH3nVeaGQkLD4vGm
10BLnVfYQzErxYaFoxcUeLEsLlZC+YVbCTFrG4b2qq3zk1P5GLDz7FErVyDZaa6J
hToDjmn50+p2JBUdw/zTLf1O557R170m+ANyoB1WJFacSrk2JRxKG3sVRzjod1wG
091f6y+eYT0DsO0B49mktqd7XTqyokFvCkvxCiejPK9L/QM95gDEjb2mCYW7l6Gz
8nxnWyCm4e93auhRHahmCoEqQ0zlcaO0zuBHT3NHyObNtTttt13GJjW3EEErnmeg
HGUFQJnSfIbw71RS+bDDKUG2Db4yPUw8Q5sTS3VIzmr9
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net