Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/ERW8Y_GVm4ZBd5YMAWHBqZgMOPc.roa
File:                     ERW8Y_GVm4ZBd5YMAWHBqZgMOPc.roa (raw, json)
Hash identifier:          qOxXD9G7151zXhD6uTI4Y81yVAA7x1Ic1HVC1DjI9LU=
Subject key identifier:   11:15:BC:63:F1:95:9B:86:41:77:96:0C:01:61:C1:A9:98:0C:38:F7
Certificate issuer:       /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial:       019425222B50769C08C01FCC0F509090D3DF
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/ERW8Y_GVm4ZBd5YMAWHBqZgMOPc.roa
Signing time:             Thu 02 Jan 2025 03:49:43 +0000
ROA not before:           Thu 02 Jan 2025 03:49:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49163
IP address blocks:        62.93.96.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:22:2b:50:76:9c:08:c0:1f:cc:0f:50:90:90:d3:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
        Validity
            Not Before: Jan  2 03:49:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1115bc63f1959b864177960c0161c1a9980c38f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c9:6f:42:ac:d4:3a:39:e1:92:25:29:c9:34:
                    ec:00:90:92:a4:5d:ff:d1:22:36:09:d8:f9:58:06:
                    ee:4f:4f:13:69:72:89:9c:6c:02:35:85:fa:14:67:
                    2c:3e:d3:88:b3:94:cc:54:16:48:1d:1a:c1:e1:e7:
                    89:47:6f:e0:7a:bd:e3:3d:85:4f:78:c4:d9:24:8c:
                    d4:12:21:84:69:15:ac:55:5d:63:41:44:8c:2e:b4:
                    92:71:7c:f2:be:25:e8:dc:4b:bd:3f:77:43:4e:9e:
                    64:38:d2:8c:41:6f:ab:03:b6:eb:81:92:1f:39:8a:
                    90:05:4e:9d:37:71:49:8b:05:27:42:56:88:41:1b:
                    a6:68:a4:0b:84:76:07:11:88:89:32:00:62:68:a8:
                    b4:74:bd:aa:07:c1:ce:59:6b:17:57:e1:26:b8:77:
                    5f:68:49:ac:5c:ba:d3:19:94:c6:5f:51:04:64:6e:
                    03:a1:ad:b2:e1:c3:ca:95:64:a0:74:49:7c:99:36:
                    91:1d:5c:93:01:6d:d2:be:fe:e3:5f:19:a4:8c:e7:
                    9c:a0:9f:d2:1d:35:84:d0:50:bc:7d:c7:0a:58:74:
                    1f:59:17:54:de:2a:5f:6e:6c:96:21:e0:8e:a8:44:
                    76:65:ba:38:43:c4:46:85:c8:b2:c6:35:ee:41:af:
                    ce:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:15:BC:63:F1:95:9B:86:41:77:96:0C:01:61:C1:A9:98:0C:38:F7
            X509v3 Authority Key Identifier:
                keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/ERW8Y_GVm4ZBd5YMAWHBqZgMOPc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.93.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4d:94:f3:13:04:ab:42:a2:02:0e:97:4a:d0:9e:8f:ce:bc:3c:
         18:17:ee:54:b5:c6:fd:e5:66:07:d6:c4:a6:bd:53:ac:8b:e7:
         b0:88:8c:e8:eb:57:f2:de:1a:5e:24:09:ae:81:f5:5c:c2:15:
         ec:b1:69:3c:17:44:1d:84:f2:ac:04:d6:a1:b2:5a:92:ac:32:
         86:8c:07:16:00:96:a4:b7:22:32:77:b3:8e:aa:76:fe:1c:0c:
         ec:51:b3:38:73:4f:17:6b:e5:dd:6a:71:ca:38:1b:eb:01:2e:
         62:8f:d1:f7:3e:71:fd:25:d5:95:13:ee:1e:0c:a2:70:93:52:
         61:90:f7:cd:42:2a:9f:bf:0a:66:54:bd:31:da:b5:6c:12:ef:
         e9:81:a7:3d:bc:e8:ae:bd:44:88:34:75:c6:2e:ce:38:c6:ca:
         c5:3a:23:84:96:a1:6e:f1:da:45:de:5e:fa:58:62:66:20:ba:
         f2:f5:2e:67:21:39:1e:88:e3:3a:a0:00:2a:bf:f3:81:04:b2:
         7c:49:92:cd:9a:d1:53:87:f3:2a:91:dd:3b:77:ae:34:2f:23:
         b4:1b:63:74:a8:85:74:9c:fa:d1:f8:0f:6e:50:fd:95:dc:76:
         5b:ba:25:ec:d1:a6:e4:76:80:21:3b:02:cb:23:f0:b0:22:8c:
         aa:6b:c2:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIitQdpwIwB/MD1CQkNPfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2
Y2NjYTUwHhcNMjUwMTAyMDM0OTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTE1YmM2M2YxOTU5Yjg2NDE3Nzk2MGMwMTYxYzFhOTk4MGMzOGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmslvQqzUOjnhkiUpyTTsAJCSpF3/
0SI2Cdj5WAbuT08TaXKJnGwCNYX6FGcsPtOIs5TMVBZIHRrB4eeJR2/ger3jPYVP
eMTZJIzUEiGEaRWsVV1jQUSMLrSScXzyviXo3Eu9P3dDTp5kONKMQW+rA7brgZIf
OYqQBU6dN3FJiwUnQlaIQRumaKQLhHYHEYiJMgBiaKi0dL2qB8HOWWsXV+EmuHdf
aEmsXLrTGZTGX1EEZG4Doa2y4cPKlWSgdEl8mTaRHVyTAW3Svv7jXxmkjOecoJ/S
HTWE0FC8fccKWHQfWRdU3ipfbmyWIeCOqER2Zbo4Q8RGhciyxjXuQa/O4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBEVvGPxlZuGQXeWDAFhwamYDDj3MB8GA1UdIwQY
MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt
NTMwNDYzMjM5NTFmLzEvRVJXOFlfR1ZtNFpCZDVZTUFXSEJxWmdNT1BjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm
LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDPl1gMA0G
CSqGSIb3DQEBCwUAA4IBAQBNlPMTBKtCogIOl0rQno/OvDwYF+5Utcb95WYH1sSm
vVOsi+ewiIzo61fy3hpeJAmugfVcwhXssWk8F0QdhPKsBNahslqSrDKGjAcWAJak
tyIyd7OOqnb+HAzsUbM4c08Xa+XdanHKOBvrAS5ij9H3PnH9JdWVE+4eDKJwk1Jh
kPfNQiqfvwpmVL0x2rVsEu/pgac9vOiuvUSINHXGLs44xsrFOiOElqFu8dpF3l76
WGJmILry9S5nITkeiOM6oAAqv/OBBLJ8SZLNmtFTh/Mqkd07d640LyO0G2N0qIV0
nPrR+A9uUP2V3HZbuiXs0abkdoAhOwLLI/CwIoyqa8IS
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:48:06 2025 by rpki-client on console.sobornost.net