Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/7EOzLcM3E8sNA4PjSFrYUsbrEd0.roa
File:                     7EOzLcM3E8sNA4PjSFrYUsbrEd0.roa (raw, json)
Hash identifier:          no++UKlw2Jo1Bu83dbRNy2X31/EQKIzfSNC5oFSK5Ew=
Subject key identifier:   EC:43:B3:2D:C3:37:13:CB:0D:03:83:E3:48:5A:D8:52:C6:EB:11:DD
Certificate issuer:       /CN=01d6ef0479f9fdfa826657dfd8e0ef3668ca1abf
Certificate serial:       019424459119F81D2E2B7BB73F71858C7F0E
Authority key identifier: 01:D6:EF:04:79:F9:FD:FA:82:66:57:DF:D8:E0:EF:36:68:CA:1A:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdbvBHn5_fqCZlff2ODvNmjKGr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/7EOzLcM3E8sNA4PjSFrYUsbrEd0.roa
Signing time:             Wed 01 Jan 2025 23:48:46 +0000
ROA not before:           Wed 01 Jan 2025 23:48:46 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     2852
IP address blocks:        147.33.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:91:19:f8:1d:2e:2b:7b:b7:3f:71:85:8c:7f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d6ef0479f9fdfa826657dfd8e0ef3668ca1abf
        Validity
            Not Before: Jan  1 23:48:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ec43b32dc33713cb0d0383e3485ad852c6eb11dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5b:a0:d9:94:72:6c:44:9d:f1:40:92:7e:8d:
                    19:d0:3d:1b:af:d6:b6:18:f4:a8:ea:7b:de:ad:be:
                    46:c1:ed:22:c8:e5:7f:48:36:49:d5:c3:8e:7c:2d:
                    f0:40:26:4f:53:d4:f6:11:c4:72:1b:ca:6d:4b:7b:
                    87:f4:54:c0:74:64:db:b4:1b:08:64:96:14:88:60:
                    98:51:27:5e:12:cc:9f:58:df:24:44:32:c3:b6:5d:
                    55:14:9c:ac:06:09:19:f8:95:81:01:d4:34:89:42:
                    e0:82:41:ee:aa:6d:1e:fc:33:a9:14:b0:37:2a:b1:
                    cb:47:2a:22:8c:3f:08:e3:ad:ab:1e:c0:6e:28:e5:
                    0e:94:7b:85:74:e8:f9:c0:72:f1:8a:f4:e5:98:cf:
                    14:4c:1c:19:39:20:d2:9a:b1:1c:ba:4b:94:13:e0:
                    65:57:03:6f:e7:e5:e7:3d:4b:bb:3b:98:04:ba:af:
                    75:58:35:cc:50:a8:40:2a:de:f6:e3:93:5c:67:7a:
                    79:da:48:98:2f:7c:7b:d0:d1:45:2c:74:b0:82:e7:
                    69:5d:c6:2a:71:5c:ef:ff:f1:d4:ae:d0:6e:65:de:
                    b4:69:6b:29:40:7e:1c:77:7d:8f:87:cc:ca:0b:a1:
                    57:29:ab:e6:41:1e:84:af:6f:41:e9:f7:a6:5e:e1:
                    f5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:43:B3:2D:C3:37:13:CB:0D:03:83:E3:48:5A:D8:52:C6:EB:11:DD
            X509v3 Authority Key Identifier:
                keyid:01:D6:EF:04:79:F9:FD:FA:82:66:57:DF:D8:E0:EF:36:68:CA:1A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdbvBHn5_fqCZlff2ODvNmjKGr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/7EOzLcM3E8sNA4PjSFrYUsbrEd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.33.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3e:7b:42:a5:04:45:3f:fa:c3:ca:9b:a4:0c:17:b1:25:9c:7e:
         11:ae:30:3d:f7:04:39:ea:89:f0:41:17:29:ca:0e:1d:3d:b7:
         f8:0b:c5:de:55:53:56:b3:a8:9e:ee:22:70:6b:5b:b0:91:d8:
         4d:3b:1b:3a:7e:86:61:c7:39:78:20:e6:e5:df:c7:20:d8:87:
         ef:21:7f:aa:17:a0:b3:e8:c4:86:74:b1:ec:00:64:6a:da:f9:
         3a:8c:75:38:20:54:5b:de:8f:68:80:7b:28:90:9f:99:fc:f2:
         d6:84:2e:a7:40:13:65:5a:b9:aa:40:4f:73:40:2f:3d:b5:7f:
         4e:b4:49:68:e7:5c:e0:ee:75:06:b0:db:0a:58:1a:be:04:85:
         08:3d:57:22:20:23:69:dd:72:ea:15:31:e7:7a:83:70:7a:ea:
         48:59:d0:53:09:96:43:d9:66:45:39:4a:e0:5e:4f:a8:41:99:
         9c:f9:38:19:34:47:ac:58:df:55:3c:95:e7:57:a9:a2:e4:80:
         d1:13:1b:64:bf:e5:e4:9e:22:83:7c:fc:f3:3d:72:81:4a:19:
         a5:7a:66:b1:fc:85:ee:d5:ee:f8:63:47:d1:e1:c2:3a:ad:7d:
         66:c8:59:ae:68:53:f0:4a:19:c1:bb:fa:17:9e:10:63:2e:51:
         ac:19:88:4d
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQkRZEZ+B0uK3u3P3GFjH8OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZDZlZjA0NzlmOWZkZmE4MjY2NTdkZmQ4ZTBlZjM2Njhj
YTFhYmYwHhcNMjUwMTAxMjM0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzQzYjMyZGMzMzcxM2NiMGQwMzgzZTM0ODVhZDg1MmM2ZWIxMWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVug2ZRybESd8UCSfo0Z0D0br9a2
GPSo6nverb5Gwe0iyOV/SDZJ1cOOfC3wQCZPU9T2EcRyG8ptS3uH9FTAdGTbtBsI
ZJYUiGCYUSdeEsyfWN8kRDLDtl1VFJysBgkZ+JWBAdQ0iULggkHuqm0e/DOpFLA3
KrHLRyoijD8I462rHsBuKOUOlHuFdOj5wHLxivTlmM8UTBwZOSDSmrEcukuUE+Bl
VwNv5+XnPUu7O5gEuq91WDXMUKhAKt7245NcZ3p52kiYL3x70NFFLHSwgudpXcYq
cVzv//HUrtBuZd60aWspQH4cd32Ph8zKC6FXKavmQR6Er29B6femXuH1dQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFOxDsy3DNxPLDQOD40ha2FLG6xHdMB8GA1UdIwQY
MBaAFAHW7wR5+f36gmZX39jg7zZoyhq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWRidkJIbjVfZnFDWmxmZjJPRHZObWpLR3I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni82ZDc0ZmQtNWJiOS00MmY4LWJiNTEt
MGQ5Y2Q3ZThmZjM2LzEvN0VPekxjTTNFOHNOQTRQalNGcllVc2JyRWQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni82ZDc0ZmQtNWJiOS00MmY4LWJiNTEtMGQ5Y2Q3ZThmZjM2
LzEvQWRidkJIbjVfZnFDWmxmZjJPRHZObWpLR3I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkyEwDQYJ
KoZIhvcNAQELBQADggEBAD57QqUERT/6w8qbpAwXsSWcfhGuMD33BDnqifBBFynK
Dh09t/gLxd5VU1azqJ7uInBrW7CR2E07Gzp+hmHHOXgg5uXfxyDYh+8hf6oXoLPo
xIZ0sewAZGra+TqMdTggVFvej2iAeyiQn5n88taELqdAE2VauapAT3NALz21f060
SWjnXODudQaw2wpYGr4EhQg9VyIgI2ndcuoVMed6g3B66khZ0FMJlkPZZkU5SuBe
T6hBmZz5OBk0R6xY31U8ledXqaLkgNETG2S/5eSeIoN8/PM9coFKGaV6ZrH8he7V
7vhjR9HhwjqtfWbIWa5oU/BKGcG7+heeEGMuUawZiE0=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net