Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/DOcAbpxPtdwL2YX3p0kkzLFGXAk.roa
File:                     DOcAbpxPtdwL2YX3p0kkzLFGXAk.roa (raw, json)
Hash identifier:          ZlJHaAi6Xp4EdIUeEI9WfWx8hY9ReFJrUYthMrxLmyI=
Subject key identifier:   0C:E7:00:6E:9C:4F:B5:DC:0B:D9:85:F7:A7:49:24:CC:B1:46:5C:09
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       0194B6DD57CB18000514E64E1AD237ADD6C0
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/DOcAbpxPtdwL2YX3p0kkzLFGXAk.roa
Signing time:             Thu 30 Jan 2025 10:59:06 +0000
ROA not before:           Thu 30 Jan 2025 10:59:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     211141
IP address blocks:        185.226.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:b6:dd:57:cb:18:00:05:14:e6:4e:1a:d2:37:ad:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jan 30 10:59:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0ce7006e9c4fb5dc0bd985f7a74924ccb1465c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9b:79:ab:be:96:64:70:19:ad:8f:f1:9f:e7:
                    3b:f4:7b:cc:4e:22:be:a4:3c:94:e0:fc:3c:22:6e:
                    ac:f0:40:2f:48:7b:98:e4:64:5a:2e:61:86:16:28:
                    12:73:b0:d1:e5:08:69:55:9a:89:76:7d:bc:cb:bf:
                    1a:8b:e9:65:63:9f:0c:de:cf:ed:01:80:63:af:d2:
                    98:9e:0d:d4:80:84:a7:c7:55:96:24:41:1e:ea:7a:
                    a7:eb:1f:7c:60:fd:c7:13:c2:04:e2:a1:78:8a:22:
                    c4:61:86:b1:e5:bf:a7:86:95:0b:33:c5:d2:bd:49:
                    39:21:70:da:6e:f8:5f:53:81:49:7f:44:95:87:fa:
                    6d:6c:e0:e5:9e:01:22:20:cf:eb:32:03:ce:96:26:
                    38:a0:96:07:45:39:03:2f:7b:20:5d:18:ba:41:c5:
                    ca:eb:bb:03:7d:29:81:32:a7:c2:5d:7b:5c:d0:e6:
                    21:68:e9:65:62:52:66:65:c0:c9:c8:e6:d0:67:3d:
                    4c:38:eb:42:51:6f:90:5d:d0:f1:c7:b4:00:4b:be:
                    a4:0b:69:8a:02:57:86:be:f5:10:dd:d4:3c:0c:58:
                    ca:86:da:04:22:42:ef:78:b5:38:ca:19:e2:bf:83:
                    82:33:cd:14:e7:77:6e:c5:41:ae:e7:b9:70:f9:17:
                    c3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E7:00:6E:9C:4F:B5:DC:0B:D9:85:F7:A7:49:24:CC:B1:46:5C:09
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/DOcAbpxPtdwL2YX3p0kkzLFGXAk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:71:1c:c3:08:f0:b7:bd:19:38:22:18:3c:8e:44:ef:e6:4f:
         87:13:86:fd:db:04:a7:13:c9:40:ed:f5:2b:fe:5c:d5:37:98:
         46:79:a1:d9:58:98:24:22:ca:07:af:e7:cf:f8:6b:e6:27:ec:
         de:19:fc:df:b9:9b:1c:98:4f:c3:81:9a:69:0b:d7:0e:82:4a:
         e1:11:e6:05:6f:32:dc:9e:c9:22:47:73:f9:dd:63:76:a7:24:
         20:1f:c0:26:a2:eb:e4:8c:2a:87:1d:7d:23:71:d4:bc:05:d8:
         f1:05:46:19:50:5b:33:a7:3c:d2:82:6f:55:0a:fb:7c:ab:1f:
         40:dd:48:89:2d:ad:98:48:d6:f2:1e:b2:9b:34:65:43:d4:a9:
         dd:68:73:11:43:eb:a2:98:67:48:53:3b:99:db:34:ae:69:0e:
         9a:ac:da:9e:c3:89:50:29:cd:1b:a7:1f:22:84:07:44:fc:4a:
         3d:29:2c:e3:8b:b4:6e:bd:3e:c4:49:17:b3:6e:52:06:38:7f:
         4d:cc:28:f4:0d:9d:50:21:cf:eb:24:c6:e9:26:16:9c:47:b0:
         01:db:19:bd:dd:c3:f0:65:83:b1:f5:e2:1b:14:fb:22:a3:5f:
         dc:b9:6e:54:72:56:2b:e1:51:c1:79:19:d3:92:7b:e3:ff:c3:
         9f:30:6a:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZS23VfLGAAFFOZOGtI3rdbAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjUwMTMwMTA1OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2U3MDA2ZTljNGZiNWRjMGJkOTg1ZjdhNzQ5MjRjY2IxNDY1YzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZt5q76WZHAZrY/xn+c79HvMTiK+
pDyU4Pw8Im6s8EAvSHuY5GRaLmGGFigSc7DR5QhpVZqJdn28y78ai+llY58M3s/t
AYBjr9KYng3UgISnx1WWJEEe6nqn6x98YP3HE8IE4qF4iiLEYYax5b+nhpULM8XS
vUk5IXDabvhfU4FJf0SVh/ptbODlngEiIM/rMgPOliY4oJYHRTkDL3sgXRi6QcXK
67sDfSmBMqfCXXtc0OYhaOllYlJmZcDJyObQZz1MOOtCUW+QXdDxx7QAS76kC2mK
AleGvvUQ3dQ8DFjKhtoEIkLveLU4yhniv4OCM80U53duxUGu57lw+RfDmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAznAG6cT7XcC9mF96dJJMyxRlwJMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvRE9jQWJweFB0ZHdMMllYM3Awa2t6TEZHWEFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueLDMA0G
CSqGSIb3DQEBCwUAA4IBAQAOcRzDCPC3vRk4Ihg8jkTv5k+HE4b92wSnE8lA7fUr
/lzVN5hGeaHZWJgkIsoHr+fP+GvmJ+zeGfzfuZscmE/DgZppC9cOgkrhEeYFbzLc
nskiR3P53WN2pyQgH8AmouvkjCqHHX0jcdS8BdjxBUYZUFszpzzSgm9VCvt8qx9A
3UiJLa2YSNbyHrKbNGVD1KndaHMRQ+uimGdIUzuZ2zSuaQ6arNqew4lQKc0bpx8i
hAdE/Eo9KSzji7RuvT7ESRezblIGOH9NzCj0DZ1QIc/rJMbpJhacR7AB2xm93cPw
ZYOx9eIbFPsio1/cuW5UclYr4VHBeRnTknvj/8OfMGoi
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:49:25 2025 by rpki-client on console.sobornost.net