Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/EtFPMFFyhb5HQ3AUrbc3nrn6e7Q.roa
File:                     EtFPMFFyhb5HQ3AUrbc3nrn6e7Q.roa (raw, json)
Hash identifier:          amzFmUzQXu8Qk3jOcia7riw9XANsVxhL8nKSAMe7SvU=
Subject key identifier:   12:D1:4F:30:51:72:85:BE:47:43:70:14:AD:B7:37:9E:B9:FA:7B:B4
Certificate issuer:       /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial:       01960F358DA10400C086365DF5F023E8F6BC
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/EtFPMFFyhb5HQ3AUrbc3nrn6e7Q.roa
Signing time:             Mon 07 Apr 2025 07:44:49 +0000
ROA not before:           Mon 07 Apr 2025 07:44:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214678
IP address blocks:        89.34.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0f:35:8d:a1:04:00:c0:86:36:5d:f5:f0:23:e8:f6:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
        Validity
            Not Before: Apr  7 07:44:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=12d14f30517285be47437014adb7379eb9fa7bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:56:2b:e1:40:a7:43:20:8a:f0:35:d0:51:3f:
                    e9:cc:e3:9e:42:86:d8:2a:94:a3:d3:c7:7c:72:50:
                    3a:55:c3:6b:80:1f:b2:f6:a0:1d:48:f1:9f:24:ed:
                    f2:4e:f5:44:0c:98:6c:fa:1f:af:1d:b3:cf:e8:cf:
                    7d:f8:b4:0c:2d:33:a9:e7:16:38:cd:f7:7d:91:a7:
                    1a:d6:d6:72:ad:5a:8a:66:b0:85:96:8a:c9:22:c6:
                    48:5f:e6:a6:c3:02:10:40:c6:8a:5f:cb:b7:3a:df:
                    1e:2b:3a:98:23:07:a4:46:58:3b:7b:60:6d:2d:84:
                    58:f2:db:5d:2e:be:3f:87:b1:7c:22:08:7d:6d:07:
                    cc:1b:2c:08:54:ad:54:59:bd:4f:3c:40:37:81:12:
                    8d:1d:24:e1:52:3b:67:8f:73:18:aa:09:48:6b:99:
                    8e:2a:78:67:b0:ef:64:11:9f:04:e4:b0:bf:77:d2:
                    f5:86:41:34:6b:a3:3a:8c:ec:a4:10:b1:5f:b7:72:
                    7e:62:af:8e:a5:61:c5:17:f2:15:76:eb:1b:bf:b9:
                    ff:77:64:53:7f:b4:13:48:cf:68:ad:b2:16:0a:51:
                    76:28:bd:c6:3b:14:56:fa:14:44:5c:8e:b3:ad:8c:
                    b7:44:7d:e6:51:f7:98:91:51:bc:2c:a2:2d:65:a9:
                    e2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D1:4F:30:51:72:85:BE:47:43:70:14:AD:B7:37:9E:B9:FA:7B:B4
            X509v3 Authority Key Identifier:
                keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/EtFPMFFyhb5HQ3AUrbc3nrn6e7Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.34.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:ac:17:34:0e:cf:69:0e:f4:4c:07:df:c6:8c:74:64:47:34:
         75:61:43:b7:98:85:fb:03:b4:a9:0f:1d:d7:6b:e8:1b:15:f0:
         d6:d2:34:da:0a:1b:82:cf:b8:11:a3:14:3d:47:e3:0d:20:cd:
         64:44:b3:2f:dd:6f:bc:b1:ff:76:cc:03:b4:2f:27:43:12:eb:
         93:9c:e7:d1:8e:43:82:8f:be:47:32:0c:b6:76:b4:eb:47:fd:
         c5:0f:74:6c:7e:74:9a:8f:8c:9b:26:49:a7:78:36:ff:54:1c:
         33:5e:92:9f:08:77:c6:74:ef:56:99:6b:87:d5:9d:01:a1:69:
         9c:47:e2:9c:94:f0:2a:aa:7a:5a:49:01:ba:40:e7:9a:4d:30:
         22:d0:82:dc:b9:6a:79:f7:12:e4:68:35:be:6e:c9:47:56:e3:
         84:9d:8c:7d:4a:95:7f:83:48:07:34:cb:6c:dd:c0:af:f2:41:
         bf:0e:52:6c:10:a2:f6:d6:e1:13:67:59:40:31:a0:65:60:ae:
         d8:e9:75:e2:8b:7c:79:ce:52:2f:a8:29:b1:36:f0:16:24:e7:
         dd:92:ff:10:1c:7e:f6:2c:3b:ce:e9:79:db:ec:f3:55:9a:70:
         32:5a:d8:3e:6b:9d:68:3f:a8:6c:15:19:f3:33:26:b2:26:11:
         de:e5:00:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYPNY2hBADAhjZd9fAj6Pa8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx
OWM0NDgwHhcNMjUwNDA3MDc0NDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmQxNGYzMDUxNzI4NWJlNDc0MzcwMTRhZGI3Mzc5ZWI5ZmE3YmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlYr4UCnQyCK8DXQUT/pzOOeQobY
KpSj08d8clA6VcNrgB+y9qAdSPGfJO3yTvVEDJhs+h+vHbPP6M99+LQMLTOp5xY4
zfd9kaca1tZyrVqKZrCFlorJIsZIX+amwwIQQMaKX8u3Ot8eKzqYIwekRlg7e2Bt
LYRY8ttdLr4/h7F8Igh9bQfMGywIVK1UWb1PPEA3gRKNHSThUjtnj3MYqglIa5mO
KnhnsO9kEZ8E5LC/d9L1hkE0a6M6jOykELFft3J+Yq+OpWHFF/IVdusbv7n/d2RT
f7QTSM9orbIWClF2KL3GOxRW+hREXI6zrYy3RH3mUfeYkVG8LKItZaniVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBLRTzBRcoW+R0NwFK23N565+nu0MB8GA1UdIwQY
MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt
YWQyZmRhNDc5ODhlLzEvRXRGUE1GRnloYjVIUTNBVXJiYzNucm42ZTdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl
LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSJMMA0G
CSqGSIb3DQEBCwUAA4IBAQBTrBc0Ds9pDvRMB9/GjHRkRzR1YUO3mIX7A7SpDx3X
a+gbFfDW0jTaChuCz7gRoxQ9R+MNIM1kRLMv3W+8sf92zAO0LydDEuuTnOfRjkOC
j75HMgy2drTrR/3FD3RsfnSaj4ybJkmneDb/VBwzXpKfCHfGdO9WmWuH1Z0BoWmc
R+KclPAqqnpaSQG6QOeaTTAi0ILcuWp59xLkaDW+bslHVuOEnYx9SpV/g0gHNMts
3cCv8kG/DlJsEKL21uETZ1lAMaBlYK7Y6XXii3x5zlIvqCmxNvAWJOfdkv8QHH72
LDvO6Xnb7PNVmnAyWtg+a51oP6hsFRnzMyayJhHe5QCs
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:41 2025 by rpki-client on console.sobornost.net