Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/4PshNakCSyJWMVIz_PwHTSmDr4A.roa
File:                     4PshNakCSyJWMVIz_PwHTSmDr4A.roa (raw, json)
Hash identifier:          gPtS5+JjmIaR8TinNgv3Lo1e15K/1n0v+5qSDQfcw88=
Subject key identifier:   E0:FB:21:35:A9:02:4B:22:56:31:52:33:FC:FC:07:4D:29:83:AF:80
Certificate issuer:       /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial:       019391D22B055EA3797AF255CE8D8C35ECCD
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/4PshNakCSyJWMVIz_PwHTSmDr4A.roa
Signing time:             Wed 04 Dec 2024 13:18:10 +0000
ROA not before:           Wed 04 Dec 2024 13:18:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202656
IP address blocks:        185.36.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:91:d2:2b:05:5e:a3:79:7a:f2:55:ce:8d:8c:35:ec:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
        Validity
            Not Before: Dec  4 13:18:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e0fb2135a9024b2256315233fcfc074d2983af80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3c:e9:39:d3:53:31:e0:1a:e1:b9:09:1f:ed:
                    f3:0f:95:26:4f:94:c9:f4:d5:77:27:79:05:47:19:
                    b3:d0:4a:0a:32:94:64:b4:80:4d:7d:2a:f5:17:fc:
                    99:23:28:0a:ea:22:a6:de:43:2d:9d:72:a1:cb:c1:
                    fb:0e:46:d9:36:8d:7e:94:8d:f7:d8:20:96:8b:63:
                    f3:7a:84:b2:ad:cc:26:a0:52:99:06:26:45:6a:0e:
                    49:0b:76:43:c4:65:79:76:65:4d:c2:0a:1e:bb:b2:
                    1a:7a:32:48:11:a6:47:44:f2:e5:07:cf:be:78:84:
                    24:42:13:04:c2:3f:0f:42:35:b9:3f:15:58:d2:76:
                    27:38:d7:5d:93:ad:80:37:68:77:f6:38:b5:6e:c8:
                    94:1b:c8:a9:d1:e2:30:72:b3:85:15:af:dc:42:88:
                    33:d3:11:4c:08:73:d1:45:7d:a3:4b:a7:54:47:40:
                    08:67:38:37:34:20:56:06:78:8c:a1:73:1f:dc:da:
                    eb:4a:6f:7e:e9:01:42:49:ed:a7:b6:14:bb:9e:91:
                    6f:64:8e:84:36:a4:54:e3:1d:fc:4d:70:9a:e2:5d:
                    b8:4a:c1:06:39:26:29:a2:90:95:dd:51:91:33:48:
                    33:af:86:d0:c9:aa:93:9b:01:68:6b:58:3c:bc:fa:
                    45:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FB:21:35:A9:02:4B:22:56:31:52:33:FC:FC:07:4D:29:83:AF:80
            X509v3 Authority Key Identifier:
                keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/4PshNakCSyJWMVIz_PwHTSmDr4A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.36.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:f5:74:ed:55:0d:58:4c:dc:be:c3:52:0d:9d:b8:08:40:55:
         34:69:81:6d:24:cb:dc:54:4d:1c:2f:59:5d:fe:17:ea:3c:43:
         80:b3:3c:02:4b:3f:42:96:04:ab:e3:5d:70:25:67:62:81:24:
         8c:2f:2d:1e:64:b8:46:d5:1c:3a:83:a7:f6:ed:87:09:c5:1a:
         cf:e4:46:1c:a3:d2:ef:79:3a:df:4d:c7:69:08:2a:26:4e:46:
         64:8c:83:e2:13:76:0f:96:07:5a:b9:e4:d4:a3:e5:94:49:eb:
         f2:ed:ae:08:ab:7c:3d:9e:57:de:83:c8:ab:df:6a:58:02:38:
         96:b8:55:50:0b:6a:4f:3f:4e:8c:57:d5:b4:2b:ac:58:7f:df:
         06:5d:f9:5c:fd:c5:1f:27:8b:37:4d:e0:b1:95:63:db:0e:db:
         2d:c6:81:7f:dc:f1:7f:c4:b7:26:38:52:81:8b:06:29:c9:3d:
         dc:53:2d:f2:41:8c:cb:d6:47:25:60:77:49:89:ad:e2:ff:16:
         52:6f:7c:09:02:71:9b:34:60:1f:d5:b9:bb:1a:8c:99:9c:d6:
         5c:19:67:f9:3b:85:06:23:e4:6e:c2:d5:67:68:89:89:1f:0e:
         cf:fb:5b:5c:09:4e:61:5d:30:32:3c:79:e0:4c:e5:dc:82:92:
         0f:2f:ee:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOR0isFXqN5evJVzo2MNezNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx
MjMwN2IwHhcNMjQxMjA0MTMxODEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGZiMjEzNWE5MDI0YjIyNTYzMTUyMzNmY2ZjMDc0ZDI5ODNhZjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzzpOdNTMeAa4bkJH+3zD5UmT5TJ
9NV3J3kFRxmz0EoKMpRktIBNfSr1F/yZIygK6iKm3kMtnXKhy8H7DkbZNo1+lI33
2CCWi2PzeoSyrcwmoFKZBiZFag5JC3ZDxGV5dmVNwgoeu7IaejJIEaZHRPLlB8++
eIQkQhMEwj8PQjW5PxVY0nYnONddk62AN2h39ji1bsiUG8ip0eIwcrOFFa/cQogz
0xFMCHPRRX2jS6dUR0AIZzg3NCBWBniMoXMf3NrrSm9+6QFCSe2nthS7npFvZI6E
NqRU4x38TXCa4l24SsEGOSYpopCV3VGRM0gzr4bQyaqTmwFoa1g8vPpFmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOD7ITWpAksiVjFSM/z8B00pg6+AMB8GA1UdIwQY
MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt
NWI4NzgyNWMwN2VlLzEvNFBzaE5ha0NTeUpXTVZJel9Qd0hUU21EcjRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl
LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSR8MA0G
CSqGSIb3DQEBCwUAA4IBAQCC9XTtVQ1YTNy+w1INnbgIQFU0aYFtJMvcVE0cL1ld
/hfqPEOAszwCSz9ClgSr411wJWdigSSMLy0eZLhG1Rw6g6f27YcJxRrP5EYco9Lv
eTrfTcdpCComTkZkjIPiE3YPlgdaueTUo+WUSevy7a4Iq3w9nlfeg8ir32pYAjiW
uFVQC2pPP06MV9W0K6xYf98GXflc/cUfJ4s3TeCxlWPbDtstxoF/3PF/xLcmOFKB
iwYpyT3cUy3yQYzL1kclYHdJia3i/xZSb3wJAnGbNGAf1bm7GoyZnNZcGWf5O4UG
I+RuwtVnaImJHw7P+1tcCU5hXTAyPHngTOXcgpIPL+5W
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:10 2024 by rpki-client on console.sobornost.net