Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/IT7qv4jf4oAhPVLDCIcf_fJ-0Aw.roa
File:                     IT7qv4jf4oAhPVLDCIcf_fJ-0Aw.roa (raw, json)
Hash identifier:          3ZXILRmxMVdkUKxlZwVC6rB4+PgA4m1P3M/DuN+B1DM=
Subject key identifier:   21:3E:EA:BF:88:DF:E2:80:21:3D:52:C3:08:87:1F:FD:F2:7E:D0:0C
Certificate issuer:       /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Certificate serial:       0191A77D268433C8607ACDE154E47CC2083D
Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/IT7qv4jf4oAhPVLDCIcf_fJ-0Aw.roa
Signing time:             Sat 31 Aug 2024 08:11:22 +0000
ROA not before:           Sat 31 Aug 2024 08:11:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     13335
IP address blocks:        185.201.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:a7:7d:26:84:33:c8:60:7a:cd:e1:54:e4:7c:c2:08:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
        Validity
            Not Before: Aug 31 08:11:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=213eeabf88dfe280213d52c308871ffdf27ed00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:54:9a:84:fd:82:92:e2:e1:9b:ee:5f:ee:c2:
                    d1:e4:43:cb:cb:b8:b4:b4:17:7f:11:36:9c:8a:66:
                    6a:f5:e2:96:f1:f1:75:b0:0a:58:0f:2e:9c:a9:7a:
                    68:7f:f1:eb:98:64:68:55:9d:4d:dc:22:33:fb:b4:
                    25:15:ad:ca:90:1b:16:26:0b:6f:a0:71:7b:a9:1b:
                    33:2a:1c:49:4b:d2:5c:04:12:23:3e:1b:49:b6:b8:
                    d0:e9:f2:5d:04:08:ad:41:4f:52:3f:dd:a9:4d:7d:
                    06:8f:dd:4b:e7:3c:fd:cd:47:fe:45:5a:fb:c3:77:
                    57:62:ea:c0:cf:4d:38:06:dc:e9:c3:cb:41:38:3f:
                    c2:0c:82:72:7d:48:24:6c:ee:28:90:49:25:ce:b0:
                    f6:95:0e:2c:03:c1:a3:a3:7d:7f:23:ef:3e:89:f6:
                    89:c2:c8:c5:ac:bc:a8:d5:04:46:7a:f5:3f:8d:62:
                    d5:61:4a:df:a2:7b:b3:60:85:1d:8c:2e:d3:06:09:
                    00:a8:32:37:a7:28:14:0e:d8:74:48:47:c7:d0:b6:
                    1c:2f:a8:31:b9:e5:3e:96:6b:22:56:39:91:85:bc:
                    71:5e:25:a7:98:ca:9e:4e:d1:9f:96:6f:07:a3:d4:
                    47:ec:4b:7d:88:14:9f:62:8b:12:ba:63:61:7a:a4:
                    2f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3E:EA:BF:88:DF:E2:80:21:3D:52:C3:08:87:1F:FD:F2:7E:D0:0C
            X509v3 Authority Key Identifier:
                keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/IT7qv4jf4oAhPVLDCIcf_fJ-0Aw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.201.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:53:87:d6:62:63:1c:0f:c2:d9:28:ce:02:a2:84:b9:40:42:
         0c:97:fa:ce:60:f9:a6:bf:be:b5:a0:07:37:07:7c:07:19:07:
         40:46:93:fe:85:dc:c5:8a:e9:ee:22:1e:89:5d:2d:4d:c5:2e:
         56:7a:e7:97:34:6d:de:02:7d:2d:6d:f9:a8:07:d7:17:9a:18:
         6d:4c:a2:07:52:a2:8e:89:3e:95:61:1a:f5:18:d0:fe:32:44:
         f9:6c:8d:d5:bb:07:89:c1:f9:75:76:a5:fd:13:ba:fa:ae:32:
         bc:f9:ca:7c:5a:01:1e:00:e7:69:60:0b:41:c5:3f:fe:09:5a:
         e7:05:79:b7:4a:a8:ff:b0:ec:7e:a6:93:57:7f:c3:5c:7f:c7:
         ee:b3:b5:52:e2:16:28:aa:23:3f:f6:d7:e0:d9:fd:ed:67:71:
         52:2f:bd:bc:3f:49:2a:98:b0:73:4b:9a:85:19:ae:ea:56:6d:
         9f:a7:37:00:e3:2c:cb:1b:04:a1:7c:db:56:da:b2:b7:a8:5a:
         cb:66:2a:76:c5:8e:7d:b7:49:c0:74:c2:9f:37:ab:35:fb:7f:
         f3:13:c6:26:08:d8:94:7d:37:4d:18:49:16:1e:18:25:f5:63:
         c4:0a:e6:4a:27:8e:08:3d:28:6c:89:7c:12:ed:8d:a4:90:15:
         b3:85:f8:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGnfSaEM8hges3hVOR8wgg9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjdlN2NmODE3NmUzMDI3NjRkNDgyOTlmYzIyYTliZGM2
YmE2ODMwHhcNMjQwODMxMDgxMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTNlZWFiZjg4ZGZlMjgwMjEzZDUyYzMwODg3MWZmZGYyN2VkMDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFSahP2CkuLhm+5f7sLR5EPLy7i0
tBd/ETacimZq9eKW8fF1sApYDy6cqXpof/HrmGRoVZ1N3CIz+7QlFa3KkBsWJgtv
oHF7qRszKhxJS9JcBBIjPhtJtrjQ6fJdBAitQU9SP92pTX0Gj91L5zz9zUf+RVr7
w3dXYurAz004Btzpw8tBOD/CDIJyfUgkbO4okEklzrD2lQ4sA8Gjo31/I+8+ifaJ
wsjFrLyo1QRGevU/jWLVYUrfonuzYIUdjC7TBgkAqDI3pygUDth0SEfH0LYcL6gx
ueU+lmsiVjmRhbxxXiWnmMqeTtGflm8Ho9RH7Et9iBSfYosSumNheqQv5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCE+6r+I3+KAIT1SwwiHH/3yftAMMB8GA1UdIwQY
MBaAFAP358+BduMCdk1IKZ/CKpvca6aDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hZTQ1NDctMmNhMi00Y2JkLWExYjUt
M2NmM2I0NjNhODZhLzEvSVQ3cXY0amY0b0FoUFZMRENJY2ZfZkotMEF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9hZTQ1NDctMmNhMi00Y2JkLWExYjUtM2NmM2I0NjNhODZh
LzEvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuclFMA0G
CSqGSIb3DQEBCwUAA4IBAQCtU4fWYmMcD8LZKM4CooS5QEIMl/rOYPmmv761oAc3
B3wHGQdARpP+hdzFiunuIh6JXS1NxS5WeueXNG3eAn0tbfmoB9cXmhhtTKIHUqKO
iT6VYRr1GND+MkT5bI3VuweJwfl1dqX9E7r6rjK8+cp8WgEeAOdpYAtBxT/+CVrn
BXm3Sqj/sOx+ppNXf8Ncf8fus7VS4hYoqiM/9tfg2f3tZ3FSL728P0kqmLBzS5qF
Ga7qVm2fpzcA4yzLGwShfNtW2rK3qFrLZip2xY59t0nAdMKfN6s1+3/zE8YmCNiU
fTdNGEkWHhgl9WPECuZKJ44IPShsiXwS7Y2kkBWzhfhO
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:28 2024 by rpki-client on console.sobornost.net