Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-Wlv638YaIA3Xy4jO3lsS0L07Y0.roa
File:                     1-Wlv638YaIA3Xy4jO3lsS0L07Y0.roa (raw, json)
Hash identifier:          SHcDP9PYZ5SOAfAEcMPfebzpJH+Q5mCVFYtA24QDevE=
Subject key identifier:   F9:69:6F:EB:7F:18:68:80:37:5F:2E:23:3B:79:6C:4B:42:F4:ED:8D
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       0194258FA63CC3720A324025C1957AA33A9F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-Wlv638YaIA3Xy4jO3lsS0L07Y0.roa
Signing time:             Thu 02 Jan 2025 05:49:18 +0000
ROA not before:           Thu 02 Jan 2025 05:49:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     44429
IP address blocks:        93.171.140.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:a6:3c:c3:72:0a:32:40:25:c1:95:7a:a3:3a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 05:49:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f9696feb7f186880375f2e233b796c4b42f4ed8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fc:18:51:9a:42:61:63:9a:5c:a1:68:d6:f1:
                    e4:6c:92:ed:e0:18:e9:aa:97:12:2e:74:9a:ad:9c:
                    2e:44:13:38:41:94:4d:34:6e:29:9f:12:a4:e4:2b:
                    98:d2:df:1e:11:a8:cc:b8:9a:a1:49:40:9a:65:0d:
                    a3:85:af:8c:8a:2b:24:48:e0:55:fe:dd:b4:7d:f7:
                    f3:8a:ab:31:59:60:0e:a6:21:34:14:84:d0:41:db:
                    85:0e:bb:47:d4:03:d0:8e:1e:06:66:e5:59:58:36:
                    cd:dc:5f:ab:8d:45:92:39:a7:8a:7d:50:bd:81:b2:
                    66:b0:d7:8b:95:74:76:f3:79:76:56:21:48:4e:be:
                    9a:43:2e:31:51:f1:d4:0d:b3:e3:07:b4:83:c6:a2:
                    37:8c:77:bf:4a:c9:0d:49:6f:48:41:ba:87:3d:d3:
                    27:ac:4a:b1:b2:d8:47:92:d8:5f:af:65:2b:3b:5f:
                    19:70:96:2e:90:b6:0b:4f:5b:ef:01:37:47:41:ff:
                    72:e9:4f:01:6c:0a:78:ef:d8:2d:30:da:a8:2c:a5:
                    94:80:38:85:c3:e3:04:11:d1:d2:1b:66:f2:70:d5:
                    d9:68:1e:45:fd:f1:ed:f9:b3:4b:1c:e2:fc:1a:e8:
                    18:59:ff:c5:ef:92:d6:3b:28:d4:53:3f:83:e2:53:
                    82:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:69:6F:EB:7F:18:68:80:37:5F:2E:23:3B:79:6C:4B:42:F4:ED:8D
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-Wlv638YaIA3Xy4jO3lsS0L07Y0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.171.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:15:f0:00:18:6b:86:6d:3e:c2:31:c9:4d:e3:77:c0:a5:6d:
         eb:95:8a:dd:08:07:d3:43:c7:e9:3d:3f:8d:ff:3c:a2:15:06:
         9f:46:60:53:f3:e6:f8:52:81:4b:44:6e:54:25:54:23:7d:cb:
         b0:44:b7:0f:57:ab:1e:a2:14:76:ab:19:5e:1f:ad:ae:21:74:
         36:3d:1c:93:d2:f6:66:5b:83:6c:99:6b:9f:38:80:f5:f2:bb:
         83:c6:ea:d2:ec:ee:b7:03:99:58:e4:36:79:cf:65:93:6a:33:
         c3:54:54:27:7d:73:9e:00:6a:54:1c:a8:c7:f8:68:15:4f:c5:
         86:09:60:d6:2d:97:bd:1a:c6:43:4a:56:d3:fa:87:6a:98:dd:
         dd:af:ab:a8:53:8b:ba:3f:cc:d7:63:39:90:1f:1a:e7:8b:2d:
         37:40:a5:b3:ce:f9:6b:c0:b2:61:6f:f9:93:ef:1b:9c:6d:29:
         7e:93:51:58:8f:8c:7f:b0:ee:57:a5:d2:f2:4f:aa:66:46:bb:
         73:b5:f6:bc:16:e9:bc:5f:af:eb:39:9d:2f:84:be:58:bc:28:
         f8:bc:47:cd:3e:73:0b:b8:53:ba:70:a8:ca:1c:fd:37:f4:de:
         40:73:34:0b:07:e9:45:e8:80:f8:b5:67:64:21:ad:33:48:3c:
         36:61:0d:e9
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQlj6Y8w3IKMkAlwZV6ozqfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTY5NmZlYjdmMTg2ODgwMzc1ZjJlMjMzYjc5NmM0YjQyZjRlZDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPwYUZpCYWOaXKFo1vHkbJLt4Bjp
qpcSLnSarZwuRBM4QZRNNG4pnxKk5CuY0t8eEajMuJqhSUCaZQ2jha+MiiskSOBV
/t20fffziqsxWWAOpiE0FITQQduFDrtH1APQjh4GZuVZWDbN3F+rjUWSOaeKfVC9
gbJmsNeLlXR283l2ViFITr6aQy4xUfHUDbPjB7SDxqI3jHe/SskNSW9IQbqHPdMn
rEqxsthHkthfr2UrO18ZcJYukLYLT1vvATdHQf9y6U8BbAp479gtMNqoLKWUgDiF
w+MEEdHSG2bycNXZaB5F/fHt+bNLHOL8GugYWf/F75LWOyjUUz+D4lOCQwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPlpb+t/GGiAN18uIzt5bEtC9O2NMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvMS1XbHY2MzhZYUlBM1h5NGpPM2xzUzBMMDdZMC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJl
ZC8xL2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAV2rjDAN
BgkqhkiG9w0BAQsFAAOCAQEAkBXwABhrhm0+wjHJTeN3wKVt65WK3QgH00PH6T0/
jf88ohUGn0ZgU/Pm+FKBS0RuVCVUI33LsES3D1erHqIUdqsZXh+triF0Nj0ck9L2
ZluDbJlrnziA9fK7g8bq0uzutwOZWOQ2ec9lk2ozw1RUJ31zngBqVByox/hoFU/F
hglg1i2XvRrGQ0pW0/qHapjd3a+rqFOLuj/M12M5kB8a54stN0Cls875a8CyYW/5
k+8bnG0pfpNRWI+Mf7DuV6XS8k+qZka7c7X2vBbpvF+v6zmdL4S+WLwo+LxHzT5z
C7hTunCoyhz9N/TeQHM0CwfpReiA+LVnZCGtM0g8NmEN6Q==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:26 2025 by rpki-client on console.sobornost.net