Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/5ogK5Ex4CS4B5KsMhYCUM00RFfQ.roa
File:                     5ogK5Ex4CS4B5KsMhYCUM00RFfQ.roa (raw, json)
Hash identifier:          ZPbDvWHExMztNeKcllyDlDkCaDogTJsh9sQhQBtO6xU=
Subject key identifier:   E6:88:0A:E4:4C:78:09:2E:01:E4:AB:0C:85:80:94:33:4D:11:15:F4
Certificate issuer:       /CN=1535d24e17367e405b780f711049e5f78d101f16
Certificate serial:       0194214444C2EE0C14410ED9C6CF66EC390B
Authority key identifier: 15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/5ogK5Ex4CS4B5KsMhYCUM00RFfQ.roa
Signing time:             Wed 01 Jan 2025 09:48:29 +0000
ROA not before:           Wed 01 Jan 2025 09:48:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     62176
IP address blocks:        185.38.188.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:44:c2:ee:0c:14:41:0e:d9:c6:cf:66:ec:39:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1535d24e17367e405b780f711049e5f78d101f16
        Validity
            Not Before: Jan  1 09:48:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e6880ae44c78092e01e4ab0c858094334d1115f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:27:c1:98:e1:39:56:50:5f:98:d6:02:c6:4a:
                    9d:10:c4:a1:ac:6d:1f:ff:2b:7d:9b:b1:c8:18:31:
                    7f:11:66:02:86:5c:80:66:34:0f:9b:d6:9f:17:08:
                    93:da:e9:83:59:90:a8:5e:a2:0e:3b:33:bc:65:1d:
                    c3:1a:a9:63:16:00:25:c8:fc:5c:7a:b8:1a:1d:b2:
                    41:d8:79:0a:63:86:70:a6:fa:7c:de:7f:20:a2:98:
                    e5:b4:8b:26:f9:ee:68:b6:e0:7d:c4:42:47:04:98:
                    51:aa:37:8d:6a:38:b7:51:52:8f:72:9e:a3:21:e2:
                    75:b8:4d:ea:b4:58:13:7b:af:17:c3:b3:fe:6b:8b:
                    ee:fb:c9:09:6c:61:eb:cc:ec:9e:7c:f4:22:42:18:
                    53:b1:9f:d7:a1:7b:71:ab:74:e0:81:7f:e8:c6:03:
                    92:fc:c0:40:16:43:13:d3:b0:27:93:84:df:40:17:
                    94:5d:60:4e:8d:2c:3d:7a:ec:fe:65:e0:65:4e:aa:
                    39:47:a1:b7:6f:70:a1:31:a3:97:23:1f:eb:8d:8a:
                    14:a6:d9:5c:a5:72:0d:84:96:01:aa:06:42:9b:df:
                    a8:8d:8f:57:d6:0c:c9:44:25:89:92:a6:dc:61:07:
                    98:2e:90:f4:fd:68:29:5c:4a:96:36:c2:80:fb:c5:
                    be:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:88:0A:E4:4C:78:09:2E:01:E4:AB:0C:85:80:94:33:4D:11:15:F4
            X509v3 Authority Key Identifier:
                keyid:15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/5ogK5Ex4CS4B5KsMhYCUM00RFfQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.38.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:12:d5:c7:81:29:47:62:0c:9e:05:b5:0d:24:e5:57:a4:c0:
         f5:11:ef:e2:ce:ea:80:59:2f:c1:69:7e:39:87:2a:83:c4:6b:
         81:c9:72:78:a7:52:56:54:2f:1a:55:37:6b:8b:dd:17:25:71:
         02:3e:c3:3f:d2:e8:a6:f0:01:81:d4:cd:d6:6b:af:7f:a9:06:
         71:a7:08:c0:00:51:88:82:dd:c5:df:e6:4d:fd:e4:eb:9f:83:
         5d:29:a6:85:e4:62:dc:80:c7:bf:3d:e2:e0:de:d7:ee:d6:f7:
         d0:5b:16:09:98:95:98:48:f2:13:65:35:f0:3d:37:1a:4f:df:
         b9:2c:5c:de:4a:04:c8:90:82:95:00:bf:06:57:64:df:b8:c5:
         73:89:91:34:10:e0:2f:b6:8e:57:da:c0:9c:1b:8e:ff:a0:17:
         24:96:55:99:9d:ea:17:24:c8:27:ef:e8:13:13:4c:3f:fd:36:
         ff:ee:27:7c:9d:93:bc:05:43:ed:69:d4:57:41:21:c3:56:83:
         fe:3e:28:0e:fc:15:8f:13:87:a6:90:83:d3:f5:31:46:a9:82:
         3c:a4:66:ff:9a:6a:1a:60:51:8e:c9:5e:12:40:48:c0:50:d0:
         b4:07:c0:fa:d5:ed:b7:32:5f:e5:38:73:e6:5c:70:01:a6:4b:
         fb:85:66:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRETC7gwUQQ7Zxs9m7DkLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MzVkMjRlMTczNjdlNDA1Yjc4MGY3MTEwNDllNWY3OGQx
MDFmMTYwHhcNMjUwMTAxMDk0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjg4MGFlNDRjNzgwOTJlMDFlNGFiMGM4NTgwOTQzMzRkMTExNWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCfBmOE5VlBfmNYCxkqdEMShrG0f
/yt9m7HIGDF/EWYChlyAZjQPm9afFwiT2umDWZCoXqIOOzO8ZR3DGqljFgAlyPxc
ergaHbJB2HkKY4Zwpvp83n8gopjltIsm+e5otuB9xEJHBJhRqjeNaji3UVKPcp6j
IeJ1uE3qtFgTe68Xw7P+a4vu+8kJbGHrzOyefPQiQhhTsZ/XoXtxq3TggX/oxgOS
/MBAFkMT07Ank4TfQBeUXWBOjSw9euz+ZeBlTqo5R6G3b3ChMaOXIx/rjYoUptlc
pXINhJYBqgZCm9+ojY9X1gzJRCWJkqbcYQeYLpD0/WgpXEqWNsKA+8W+YQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOaICuRMeAkuAeSrDIWAlDNNERX0MB8GA1UdIwQY
MBaAFBU10k4XNn5AW3gPcRBJ5feNEB8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlRYU1RoYzJma0JiZUE5eEVFbmw5NDBRSHhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82YTg5ZjAtMGIyMi00NTJjLWE2NTkt
NDJhN2FmODgyZTA5LzEvNW9nSzVFeDRDUzRCNUtzTWhZQ1VNMDBSRmZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82YTg5ZjAtMGIyMi00NTJjLWE2NTktNDJhN2FmODgyZTA5
LzEvRlRYU1RoYzJma0JiZUE5eEVFbmw5NDBRSHhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSa8MA0G
CSqGSIb3DQEBCwUAA4IBAQACEtXHgSlHYgyeBbUNJOVXpMD1Ee/izuqAWS/BaX45
hyqDxGuByXJ4p1JWVC8aVTdri90XJXECPsM/0uim8AGB1M3Wa69/qQZxpwjAAFGI
gt3F3+ZN/eTrn4NdKaaF5GLcgMe/PeLg3tfu1vfQWxYJmJWYSPITZTXwPTcaT9+5
LFzeSgTIkIKVAL8GV2TfuMVziZE0EOAvto5X2sCcG47/oBckllWZneoXJMgn7+gT
E0w//Tb/7id8nZO8BUPtadRXQSHDVoP+PigO/BWPE4emkIPT9TFGqYI8pGb/mmoa
YFGOyV4SQEjAUNC0B8D61e23Ml/lOHPmXHABpkv7hWbr
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:34 2025 by rpki-client on console.sobornost.net