Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/ySaeFcHOtz6rH7T-LHaZk4KLgY4.roa
File:                     ySaeFcHOtz6rH7T-LHaZk4KLgY4.roa (raw, json)
Hash identifier:          kRBm8C5K+JyK4jIZs00HDTzQAvxAZ6ZeitYKBzGUqMM=
Subject key identifier:   C9:26:9E:15:C1:CE:B7:3E:AB:1F:B4:FE:2C:76:99:93:82:8B:81:8E
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       01951E1D78BA65D3005777AA4F8A1CD834BE
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/ySaeFcHOtz6rH7T-LHaZk4KLgY4.roa
Signing time:             Wed 19 Feb 2025 12:10:02 +0000
ROA not before:           Wed 19 Feb 2025 12:10:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     4826
IP address blocks:        193.30.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:1e:1d:78:ba:65:d3:00:57:77:aa:4f:8a:1c:d8:34:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Feb 19 12:10:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c9269e15c1ceb73eab1fb4fe2c769993828b818e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dd:8d:cb:37:63:30:85:e8:72:38:6a:85:c1:
                    2e:97:96:ef:5f:48:33:63:67:1b:24:41:2e:22:82:
                    31:6e:c5:3e:4d:16:a5:0b:6f:8f:56:a4:86:37:57:
                    32:b4:48:35:c2:18:42:5f:07:89:79:1a:f2:19:42:
                    cf:05:8d:68:26:56:2d:d8:6e:d9:53:35:f6:1b:03:
                    22:5f:67:03:10:dc:70:28:af:fc:84:76:8d:7d:84:
                    6f:9c:c1:f4:c5:57:68:7f:47:5b:00:25:34:7b:bb:
                    75:cd:bf:a9:6b:de:55:1c:e8:7f:b4:c0:e5:60:b6:
                    2f:87:af:19:b4:7c:23:d1:9f:82:01:5f:b5:80:4a:
                    2b:c5:d4:c1:fc:9d:a8:a6:11:87:26:68:63:aa:59:
                    1b:46:51:0c:64:2c:14:ee:de:67:8f:8d:92:c6:fe:
                    ea:aa:ad:c3:72:33:5e:3a:de:c0:9d:cd:30:d9:35:
                    35:d4:ee:88:87:45:39:60:32:a9:49:f2:91:8c:f7:
                    bd:66:53:21:19:6f:85:23:56:9c:53:a4:b3:0c:ee:
                    1c:1d:09:35:5d:a2:45:f4:76:06:6b:e6:ab:1c:4d:
                    77:d2:a5:7d:df:27:bd:c0:a4:ce:e8:00:39:4c:f0:
                    ea:17:83:39:1b:84:1e:5b:8a:97:a9:21:9c:54:1b:
                    41:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:26:9E:15:C1:CE:B7:3E:AB:1F:B4:FE:2C:76:99:93:82:8B:81:8E
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/ySaeFcHOtz6rH7T-LHaZk4KLgY4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:a3:82:37:f6:8b:be:e4:13:78:a2:3b:8e:ef:c7:b2:b3:45:
         b3:c6:32:1c:85:9e:4f:58:58:8f:8b:b0:b9:be:72:6b:67:5d:
         43:9b:7d:5d:af:54:55:83:86:26:9a:fb:54:43:3d:7a:aa:6e:
         b3:72:60:f5:16:1f:1a:23:40:9b:ea:b1:0a:ca:2c:6d:f2:92:
         22:b7:92:42:7c:1e:74:0e:3a:ce:8b:6a:c4:11:2d:45:e5:8a:
         31:13:ae:98:54:b7:01:06:41:df:9e:99:5b:5d:25:8e:db:19:
         39:93:7b:8d:ef:24:e4:48:51:8a:2e:40:f6:1a:0d:f4:b0:ad:
         fd:ad:62:75:1c:bd:d4:7d:be:aa:e6:8a:4f:5c:4d:92:20:24:
         c0:81:3d:49:07:a4:62:09:1c:69:89:c3:fc:c8:a6:41:73:07:
         6b:03:bc:cb:c7:54:68:0d:14:1a:1e:d2:03:db:c3:c3:6c:6b:
         d2:53:d6:1f:87:cb:c5:80:7b:30:e8:59:ab:02:17:cb:99:21:
         0e:c6:cf:4a:b2:bf:3d:22:7d:2e:f7:a4:0c:4c:80:d0:27:71:
         c8:18:06:35:e3:31:60:4d:d4:51:4a:21:df:18:aa:b7:91:7e:
         e2:61:a7:d5:00:1b:a7:bd:75:cf:f7:be:3a:0d:b8:0b:3a:f9:
         fa:95:a4:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUeHXi6ZdMAV3eqT4oc2DS+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTFkYzk4NzVlMzVlYzU4MGM1NzFmZDA0MTZmNGQ1ZjVk
NDE1OGEwHhcNMjUwMjE5MTIxMDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTI2OWUxNWMxY2ViNzNlYWIxZmI0ZmUyYzc2OTk5MzgyOGI4MThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN2NyzdjMIXocjhqhcEul5bvX0gz
Y2cbJEEuIoIxbsU+TRalC2+PVqSGN1cytEg1whhCXweJeRryGULPBY1oJlYt2G7Z
UzX2GwMiX2cDENxwKK/8hHaNfYRvnMH0xVdof0dbACU0e7t1zb+pa95VHOh/tMDl
YLYvh68ZtHwj0Z+CAV+1gEorxdTB/J2ophGHJmhjqlkbRlEMZCwU7t5nj42Sxv7q
qq3DcjNeOt7Anc0w2TU11O6Ih0U5YDKpSfKRjPe9ZlMhGW+FI1acU6SzDO4cHQk1
XaJF9HYGa+arHE130qV93ye9wKTO6AA5TPDqF4M5G4QeW4qXqSGcVBtBOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMkmnhXBzrc+qx+0/ix2mZOCi4GOMB8GA1UdIwQY
MBaAFPZR3Jh1417FgMVx/QQW9NX11BWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUt
MDc1MTAzODE0MjBhLzEveVNhZUZjSE90ejZySDdULUxIYVprNEtMZ1k0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUtMDc1MTAzODE0MjBh
LzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR5lMA0G
CSqGSIb3DQEBCwUAA4IBAQBOo4I39ou+5BN4ojuO78eys0WzxjIchZ5PWFiPi7C5
vnJrZ11Dm31dr1RVg4YmmvtUQz16qm6zcmD1Fh8aI0Cb6rEKyixt8pIit5JCfB50
DjrOi2rEES1F5YoxE66YVLcBBkHfnplbXSWO2xk5k3uN7yTkSFGKLkD2Gg30sK39
rWJ1HL3Ufb6q5opPXE2SICTAgT1JB6RiCRxpicP8yKZBcwdrA7zLx1RoDRQaHtID
28PDbGvSU9Yfh8vFgHsw6FmrAhfLmSEOxs9Ksr89In0u96QMTIDQJ3HIGAY14zFg
TdRRSiHfGKq3kX7iYafVABunvXXP9746DbgLOvn6laSA
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:51 2025 by rpki-client on console.sobornost.net