Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/vpxZNIbKhAWHvZIcDU6_kLIATUM.roa
File:                     vpxZNIbKhAWHvZIcDU6_kLIATUM.roa (raw, json)
Hash identifier:          ZaEkz95WVay/ZQCPxoWnxUvbR3MH6Iv2iCzXl4tWU2c=
Subject key identifier:   BE:9C:59:34:86:CA:84:05:87:BD:92:1C:0D:4E:BF:90:B2:00:4D:43
Certificate issuer:       /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial:       019427B61F59837A564DAE9894511ED21904
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/vpxZNIbKhAWHvZIcDU6_kLIATUM.roa
Signing time:             Thu 02 Jan 2025 15:50:34 +0000
ROA not before:           Thu 02 Jan 2025 15:50:34 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212361
IP address blocks:        147.234.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b6:1f:59:83:7a:56:4d:ae:98:94:51:1e:d2:19:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
        Validity
            Not Before: Jan  2 15:50:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=be9c593486ca840587bd921c0d4ebf90b2004d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d9:b5:b4:11:85:4a:98:18:19:c5:4a:7d:e6:
                    f1:7c:05:35:f2:ca:c8:c9:bb:ef:11:20:1b:64:16:
                    38:60:2f:61:34:33:b8:d9:6e:69:75:31:fa:10:97:
                    13:ff:f4:55:5e:a1:18:c2:11:f6:e4:95:44:16:9d:
                    86:a7:c4:e2:47:74:18:86:1a:43:6c:c1:be:4f:52:
                    35:16:99:91:fe:b1:9b:16:3d:7d:d3:fd:67:95:89:
                    83:40:9c:c2:b1:37:1c:0d:80:09:9d:e9:ef:2a:43:
                    36:2e:3a:84:44:8c:70:77:9e:97:47:21:ff:41:47:
                    d6:1a:e0:ef:ae:07:83:e9:97:4e:56:54:de:ec:93:
                    9e:ad:ec:4e:ee:22:15:73:e5:98:de:2a:4f:49:d3:
                    bb:d0:4c:08:a0:a2:e1:c5:a2:0b:ba:fa:be:9b:63:
                    5e:c8:6d:ec:4a:c8:40:4f:4c:34:66:ff:40:c8:b1:
                    0b:2c:99:81:1c:0b:cb:5c:a9:fb:e4:97:fc:4f:41:
                    96:ca:a6:1c:a4:b0:ea:02:5a:47:08:ef:39:45:5d:
                    d2:fc:14:2a:0d:6d:37:f9:ae:cb:aa:eb:0b:63:cd:
                    a1:71:a8:58:fa:21:71:ca:bd:62:39:85:9e:1f:25:
                    3b:2b:68:3e:66:7a:2d:6a:ad:d3:3f:1c:03:c9:a3:
                    95:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9C:59:34:86:CA:84:05:87:BD:92:1C:0D:4E:BF:90:B2:00:4D:43
            X509v3 Authority Key Identifier:
                keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/vpxZNIbKhAWHvZIcDU6_kLIATUM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.234.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:67:a6:06:2d:f3:36:37:3d:a9:0d:8f:a8:b1:88:b6:41:d8:
         fb:80:ff:9a:03:a2:98:b2:1f:08:a0:e9:1b:96:f2:9b:c4:ba:
         eb:c6:7d:18:1c:c8:59:0c:46:dd:90:4f:e6:7f:3f:1c:e1:4d:
         23:a2:ea:ad:df:62:f4:eb:a2:b1:d3:27:a3:3c:08:fb:ac:64:
         d4:49:62:b7:b6:79:12:59:97:49:62:f7:49:16:d8:68:20:f2:
         88:69:6f:81:14:97:41:93:83:33:09:de:69:d8:a7:55:b1:c6:
         b0:10:43:ea:86:48:75:45:43:95:e9:30:64:51:71:6e:d0:d6:
         2c:f9:1c:9d:6b:0f:f0:25:9a:6e:b4:7e:71:b6:c3:ce:9b:5a:
         82:2e:88:76:6a:d5:58:2e:74:6b:92:a8:5a:a1:ab:98:93:7c:
         ed:6d:1e:ba:d3:c6:8d:fd:02:2f:75:63:cd:be:40:d5:7a:3a:
         60:5d:8f:2b:8c:a8:3a:0b:9c:c1:a5:51:c9:b4:85:b9:d9:2a:
         20:5f:cb:2a:d2:ed:f8:db:10:84:eb:cf:a1:6d:ef:60:93:80:
         09:48:55:d8:c5:5b:56:c6:e4:c4:ae:4d:78:c4:3d:47:96:17:
         45:7f:21:6c:b8:c7:fc:33:51:2b:23:1b:49:7a:d0:5d:ae:ef:
         69:d3:35:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnth9Zg3pWTa6YlFEe0hkEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi
NDUwZTYwHhcNMjUwMTAyMTU1MDM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTljNTkzNDg2Y2E4NDA1ODdiZDkyMWMwZDRlYmY5MGIyMDA0ZDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9m1tBGFSpgYGcVKfebxfAU18srI
ybvvESAbZBY4YC9hNDO42W5pdTH6EJcT//RVXqEYwhH25JVEFp2Gp8TiR3QYhhpD
bMG+T1I1FpmR/rGbFj190/1nlYmDQJzCsTccDYAJnenvKkM2LjqERIxwd56XRyH/
QUfWGuDvrgeD6ZdOVlTe7JOerexO7iIVc+WY3ipPSdO70EwIoKLhxaILuvq+m2Ne
yG3sSshAT0w0Zv9AyLELLJmBHAvLXKn75Jf8T0GWyqYcpLDqAlpHCO85RV3S/BQq
DW03+a7LqusLY82hcahY+iFxyr1iOYWeHyU7K2g+Znotaq3TPxwDyaOVbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL6cWTSGyoQFh72SHA1Ov5CyAE1DMB8GA1UdIwQY
MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt
NDQzMzIyOWE4NDczLzEvdnB4Wk5JYktoQVdIdlpJY0RVNl9rTElBVFVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz
LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk+paMA0G
CSqGSIb3DQEBCwUAA4IBAQAUZ6YGLfM2Nz2pDY+osYi2Qdj7gP+aA6KYsh8IoOkb
lvKbxLrrxn0YHMhZDEbdkE/mfz8c4U0jouqt32L066Kx0yejPAj7rGTUSWK3tnkS
WZdJYvdJFthoIPKIaW+BFJdBk4MzCd5p2KdVscawEEPqhkh1RUOV6TBkUXFu0NYs
+Rydaw/wJZputH5xtsPOm1qCLoh2atVYLnRrkqhaoauYk3ztbR6608aN/QIvdWPN
vkDVejpgXY8rjKg6C5zBpVHJtIW52SogX8sq0u342xCE68+hbe9gk4AJSFXYxVtW
xuTErk14xD1HlhdFfyFsuMf8M1ErIxtJetBdru9p0zWX
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:34 2025 by rpki-client on console.sobornost.net