Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/eer-d-fcLvelLG4V4pmzSNp8bYo.roa
File:                     eer-d-fcLvelLG4V4pmzSNp8bYo.roa (raw, json)
Hash identifier:          57pdrUijyw7X3aaJAIz94z/NxRDOdVIhHh5nf8aYnHs=
Subject key identifier:   79:EA:FE:77:E7:DC:2E:F7:A5:2C:6E:15:E2:99:B3:48:DA:7C:6D:8A
Certificate issuer:       /CN=215181b82776978ad2dbb69528dce9b2098eb07e
Certificate serial:       019423D6F312B4A4B2CD9562F740325151F4
Authority key identifier: 21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/eer-d-fcLvelLG4V4pmzSNp8bYo.roa
Signing time:             Wed 01 Jan 2025 21:47:56 +0000
ROA not before:           Wed 01 Jan 2025 21:47:56 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     206293
IP address blocks:        195.5.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:f3:12:b4:a4:b2:cd:95:62:f7:40:32:51:51:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215181b82776978ad2dbb69528dce9b2098eb07e
        Validity
            Not Before: Jan  1 21:47:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=79eafe77e7dc2ef7a52c6e15e299b348da7c6d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9c:90:59:cf:8e:dd:4e:00:8d:06:7a:7c:09:
                    54:43:6c:d7:29:2d:df:b0:37:fc:ce:f0:68:b1:79:
                    ff:01:34:a3:54:76:88:e8:43:7d:91:9e:2e:05:ac:
                    4a:a0:60:35:e6:7b:44:ae:f4:6f:c3:44:26:38:dc:
                    1f:74:2d:f0:9d:7f:0f:5d:84:50:35:1b:19:4b:c7:
                    17:9d:ad:d2:5a:88:7c:1f:5f:ca:a1:d6:00:d8:2f:
                    35:5f:75:e2:30:40:03:80:de:67:12:a2:0f:59:f1:
                    69:e4:3b:9b:b5:6a:32:94:b1:6b:6a:60:22:3e:6a:
                    4b:83:fc:6f:75:ac:8a:8d:34:ed:b0:a2:50:91:4d:
                    d0:3c:3d:92:81:7a:24:0f:e3:fa:7f:0d:14:f5:dd:
                    b1:fb:94:12:77:d8:07:f1:0c:af:25:e3:58:8f:5f:
                    26:d1:62:ca:6f:61:3b:c7:57:84:e7:9e:e5:3c:97:
                    d2:e4:5b:15:e8:bc:b4:68:e0:fa:1f:a3:66:6d:96:
                    77:0a:96:70:75:9e:de:f5:ca:9c:05:13:9c:ef:ae:
                    7f:13:a1:bb:f8:17:55:02:ad:08:98:cb:6e:dd:15:
                    87:4b:aa:5e:25:45:a6:07:b4:92:ee:64:dd:e0:4f:
                    3f:f1:36:14:e7:49:50:82:0c:d2:e5:41:02:fd:33:
                    09:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EA:FE:77:E7:DC:2E:F7:A5:2C:6E:15:E2:99:B3:48:DA:7C:6D:8A
            X509v3 Authority Key Identifier:
                keyid:21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/eer-d-fcLvelLG4V4pmzSNp8bYo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.5.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:ca:d6:7e:2d:96:07:16:b0:e2:41:ac:12:27:a9:ff:c4:6e:
         11:6d:13:0d:c8:19:27:90:5d:c5:47:48:96:44:59:f3:fc:07:
         5a:31:d2:fc:19:6e:fa:b7:e0:3f:3a:86:d4:fc:ce:d9:85:51:
         65:57:e2:7f:c2:6f:95:b2:8f:a0:23:e5:b8:75:d2:17:cf:6e:
         6b:42:55:09:49:e1:54:dd:92:77:32:e9:1f:f7:1a:ec:a0:77:
         c4:09:e2:42:22:64:e4:0c:3b:27:a2:d6:c7:06:70:ad:97:d3:
         df:e0:51:da:fb:af:86:21:b5:27:01:f6:0f:28:d3:92:2e:29:
         73:eb:b1:33:39:e6:24:bd:95:8f:68:25:e4:d4:42:7e:c4:31:
         41:d6:34:3f:f8:4b:13:d9:9f:65:00:d2:42:42:ad:2a:da:9b:
         c9:a2:2c:9d:44:94:c4:b9:24:bc:84:0c:04:d0:ba:b4:1f:54:
         6d:0e:60:a7:a8:c1:63:02:99:fe:59:6f:ef:df:5f:7c:bd:df:
         5d:e1:11:2d:99:86:57:cc:a3:bb:90:56:a7:44:e1:57:f5:c6:
         2e:ee:a8:20:b1:01:c0:61:27:6b:e1:d9:7f:4c:4f:c9:96:90:
         84:2a:a1:25:00:fb:3f:99:0e:03:91:c9:0a:ab:fa:72:80:d7:
         9e:c6:82:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1vMStKSyzZVi90AyUVH0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNTE4MWI4Mjc3Njk3OGFkMmRiYjY5NTI4ZGNlOWIyMDk4
ZWIwN2UwHhcNMjUwMTAxMjE0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWVhZmU3N2U3ZGMyZWY3YTUyYzZlMTVlMjk5YjM0OGRhN2M2ZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpyQWc+O3U4AjQZ6fAlUQ2zXKS3f
sDf8zvBosXn/ATSjVHaI6EN9kZ4uBaxKoGA15ntErvRvw0QmONwfdC3wnX8PXYRQ
NRsZS8cXna3SWoh8H1/KodYA2C81X3XiMEADgN5nEqIPWfFp5DubtWoylLFramAi
PmpLg/xvdayKjTTtsKJQkU3QPD2SgXokD+P6fw0U9d2x+5QSd9gH8QyvJeNYj18m
0WLKb2E7x1eE557lPJfS5FsV6Ly0aOD6H6NmbZZ3CpZwdZ7e9cqcBROc765/E6G7
+BdVAq0ImMtu3RWHS6peJUWmB7SS7mTd4E8/8TYU50lQggzS5UEC/TMJJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHnq/nfn3C73pSxuFeKZs0jafG2KMB8GA1UdIwQY
MBaAFCFRgbgndpeK0tu2lSjc6bIJjrB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVZHQnVDZDJsNHJTMjdhVktOenBzZ21Pc0g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hM2U5NjUtOWNmNC00MGU4LWEwODUt
NDkwMzFjNzcwNDg3LzEvZWVyLWQtZmNMdmVsTEc0VjRwbXpTTnA4YllvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hM2U5NjUtOWNmNC00MGU4LWEwODUtNDkwMzFjNzcwNDg3
LzEvSVZHQnVDZDJsNHJTMjdhVktOenBzZ21Pc0g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwW/MA0G
CSqGSIb3DQEBCwUAA4IBAQBIytZ+LZYHFrDiQawSJ6n/xG4RbRMNyBknkF3FR0iW
RFnz/AdaMdL8GW76t+A/OobU/M7ZhVFlV+J/wm+Vso+gI+W4ddIXz25rQlUJSeFU
3ZJ3Mukf9xrsoHfECeJCImTkDDsnotbHBnCtl9Pf4FHa+6+GIbUnAfYPKNOSLilz
67EzOeYkvZWPaCXk1EJ+xDFB1jQ/+EsT2Z9lANJCQq0q2pvJoiydRJTEuSS8hAwE
0Lq0H1RtDmCnqMFjApn+WW/v3198vd9d4REtmYZXzKO7kFanROFX9cYu7qggsQHA
YSdr4dl/TE/JlpCEKqElAPs/mQ4DkckKq/pygNeexoIK
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:52 2025 by rpki-client on console.sobornost.net