Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/Woea8VSGgNA3cNDF8RWlevzY9Hg.roa
File:                     Woea8VSGgNA3cNDF8RWlevzY9Hg.roa (raw, json)
Hash identifier:          7c3YRutklvVu8P78YT4m9rpUu/U9zqtHnEw08R8/8Mg=
Subject key identifier:   5A:87:9A:F1:54:86:80:D0:37:70:D0:C5:F1:15:A5:7A:FC:D8:F4:78
Certificate issuer:       /CN=01471c79e9642caef6a7437f1f74c5478ae52129
Certificate serial:       01942143801AD7A327571B2E899B90A24C68
Authority key identifier: 01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/Woea8VSGgNA3cNDF8RWlevzY9Hg.roa
Signing time:             Wed 01 Jan 2025 09:47:39 +0000
ROA not before:           Wed 01 Jan 2025 09:47:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     41938
IP address blocks:        185.66.218.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:80:1a:d7:a3:27:57:1b:2e:89:9b:90:a2:4c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01471c79e9642caef6a7437f1f74c5478ae52129
        Validity
            Not Before: Jan  1 09:47:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5a879af1548680d03770d0c5f115a57afcd8f478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cf:9d:9c:92:f7:8d:98:b3:9b:cc:c9:78:72:
                    c8:94:bb:c8:f4:f6:49:c4:51:f4:39:61:4a:ef:9e:
                    f4:29:dd:e3:66:cd:ad:ef:7f:55:d8:02:27:19:86:
                    63:7a:bb:20:14:bc:4d:1b:49:94:3e:ee:9c:33:e4:
                    60:4a:ae:8d:2a:de:93:42:24:6e:e6:c5:39:89:a2:
                    23:94:0a:87:f1:f6:64:88:48:c2:c9:2e:62:00:9b:
                    96:e6:b5:cc:ce:48:8a:fd:87:46:58:59:d7:48:95:
                    d4:f2:cb:aa:aa:b0:3f:a8:0f:63:81:1b:d7:3f:e1:
                    61:de:74:d6:ed:94:4e:67:cf:95:67:56:e5:45:1c:
                    0a:f8:c4:1e:15:4f:13:55:e6:57:94:d8:79:d1:25:
                    3e:31:f7:1c:18:fd:7a:ac:b7:d1:43:ae:58:66:28:
                    bb:ef:17:b4:3b:49:8b:3f:74:bd:f4:ae:48:fe:06:
                    d5:5e:89:05:cb:39:64:bc:e3:96:52:f1:da:f4:04:
                    14:51:2c:01:e3:2e:9a:44:3a:1f:a9:b5:da:84:20:
                    d6:88:69:3f:09:25:37:e5:9e:ec:ab:b5:9c:04:83:
                    f7:e9:16:41:41:07:b1:dd:c4:50:ac:98:cb:00:64:
                    ff:41:8b:3a:11:1e:f3:0f:81:a5:9a:31:aa:80:13:
                    50:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:87:9A:F1:54:86:80:D0:37:70:D0:C5:F1:15:A5:7A:FC:D8:F4:78
            X509v3 Authority Key Identifier:
                keyid:01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/Woea8VSGgNA3cNDF8RWlevzY9Hg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.66.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:53:76:50:bb:4c:10:e5:84:92:08:81:3a:bc:2f:3d:c8:fb:
         9a:03:59:3b:9d:8b:82:84:ea:b8:aa:e9:de:24:05:3a:99:7f:
         aa:e6:9a:c3:99:de:4a:60:f5:9f:2d:9c:e7:2f:c5:1a:58:84:
         a3:07:8f:73:9a:13:9d:f4:f5:0c:0b:93:c1:bb:81:0b:d7:8d:
         63:83:b9:a8:f1:cb:63:d5:d4:c1:06:53:34:20:9a:9d:3f:1a:
         6a:40:53:bc:d2:96:af:e4:02:03:19:ee:a5:72:8a:0c:ed:03:
         d2:c1:3d:09:34:c7:32:e4:d6:1c:2c:2c:88:60:84:1c:a1:d9:
         71:02:87:98:81:a0:35:94:ee:26:de:44:07:a1:73:01:91:39:
         b6:dc:ca:6b:53:30:bc:8c:92:04:5f:f7:af:0f:bc:c6:d8:f7:
         27:21:05:1d:a4:af:2a:08:c1:c3:e9:6f:8a:b8:41:c9:30:50:
         83:1c:79:0b:81:3a:b5:d8:19:a2:5e:ef:de:e4:4e:14:7b:48:
         df:27:1e:47:c1:1e:7e:34:3f:ae:da:e8:69:12:ea:b2:de:1f:
         2c:a4:cc:c1:fe:63:1b:80:b9:db:ce:97:00:c0:e2:54:22:7a:
         1c:b1:98:a3:d8:44:38:db:ed:7f:73:df:aa:11:63:3a:c4:53:
         a0:8c:10:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ4Aa16MnVxsuiZuQokxoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNDcxYzc5ZTk2NDJjYWVmNmE3NDM3ZjFmNzRjNTQ3OGFl
NTIxMjkwHhcNMjUwMTAxMDk0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTg3OWFmMTU0ODY4MGQwMzc3MGQwYzVmMTE1YTU3YWZjZDhmNDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos+dnJL3jZizm8zJeHLIlLvI9PZJ
xFH0OWFK7570Kd3jZs2t739V2AInGYZjersgFLxNG0mUPu6cM+RgSq6NKt6TQiRu
5sU5iaIjlAqH8fZkiEjCyS5iAJuW5rXMzkiK/YdGWFnXSJXU8suqqrA/qA9jgRvX
P+Fh3nTW7ZROZ8+VZ1blRRwK+MQeFU8TVeZXlNh50SU+MfccGP16rLfRQ65YZii7
7xe0O0mLP3S99K5I/gbVXokFyzlkvOOWUvHa9AQUUSwB4y6aRDofqbXahCDWiGk/
CSU35Z7sq7WcBIP36RZBQQex3cRQrJjLAGT/QYs6ER7zD4GlmjGqgBNQIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFqHmvFUhoDQN3DQxfEVpXr82PR4MB8GA1UdIwQY
MBaAFAFHHHnpZCyu9qdDfx90xUeK5SEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVVjY2VlbGtMSzcycDBOX0gzVEZSNHJsSVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lMWEzN2QtODY4ZS00NmJiLWE3Yzgt
OWQyZDlmNmVlZTkzLzEvV29lYThWU0dnTkEzY05ERjhSV2xldnpZOUhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9lMWEzN2QtODY4ZS00NmJiLWE3YzgtOWQyZDlmNmVlZTkz
LzEvQVVjY2VlbGtMSzcycDBOX0gzVEZSNHJsSVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuULaMA0G
CSqGSIb3DQEBCwUAA4IBAQA3U3ZQu0wQ5YSSCIE6vC89yPuaA1k7nYuChOq4qune
JAU6mX+q5prDmd5KYPWfLZznL8UaWISjB49zmhOd9PUMC5PBu4EL141jg7mo8ctj
1dTBBlM0IJqdPxpqQFO80pav5AIDGe6lcooM7QPSwT0JNMcy5NYcLCyIYIQcodlx
AoeYgaA1lO4m3kQHoXMBkTm23MprUzC8jJIEX/evD7zG2PcnIQUdpK8qCMHD6W+K
uEHJMFCDHHkLgTq12BmiXu/e5E4Ue0jfJx5HwR5+ND+u2uhpEuqy3h8spMzB/mMb
gLnbzpcAwOJUInocsZij2EQ42+1/c9+qEWM6xFOgjBBm
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:43 2025 by rpki-client on console.sobornost.net