Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/6fy-RpF2xj4bRR9VT9bQ_Fryj8A.roa
File:                     6fy-RpF2xj4bRR9VT9bQ_Fryj8A.roa (raw, json)
Hash identifier:          +fjUuan9mhMoL5J+xbDDTtsP2e+9iZNf2Q6jWOsGO/g=
Subject key identifier:   E9:FC:BE:46:91:76:C6:3E:1B:45:1F:55:4F:D6:D0:FC:5A:F2:8F:C0
Certificate issuer:       /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial:       0194266A2A0445EBEF893FCF01E03130AF1A
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/6fy-RpF2xj4bRR9VT9bQ_Fryj8A.roa
Signing time:             Thu 02 Jan 2025 09:47:59 +0000
ROA not before:           Thu 02 Jan 2025 09:47:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     48557
IP address blocks:        185.138.230.0/23 maxlen: 23
                          185.138.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6a:2a:04:45:eb:ef:89:3f:cf:01:e0:31:30:af:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
        Validity
            Not Before: Jan  2 09:47:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e9fcbe469176c63e1b451f554fd6d0fc5af28fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:35:8b:ac:6f:50:31:d8:d1:1c:cf:87:56:
                    39:24:77:73:e9:47:26:f6:98:03:a3:7c:54:7d:ee:
                    1f:ab:54:a2:32:46:da:b9:fd:57:ad:33:1f:6e:f2:
                    4e:7a:c7:30:60:e4:d5:9c:e4:c9:f5:3e:08:2c:51:
                    e4:45:9e:47:25:7c:2f:b8:61:9c:d8:cd:f1:f8:0a:
                    be:e8:ad:b4:e3:a0:81:0b:6f:3d:a7:eb:7d:1c:53:
                    10:53:5d:35:74:20:1f:50:5b:9b:2b:a2:b7:a0:bf:
                    71:3c:34:87:24:bd:06:cb:00:fd:45:52:93:dd:3d:
                    74:5e:59:cd:85:42:e2:2a:29:7b:0e:87:e4:9b:ee:
                    23:bf:a0:9f:64:53:e1:03:35:fe:df:ae:b2:4b:43:
                    0e:8d:da:be:28:c8:70:b3:42:c1:70:37:3b:20:42:
                    c0:91:06:c9:82:71:b7:bb:b3:f4:6f:bd:fc:49:f2:
                    31:0a:47:6f:61:32:67:da:d7:a6:05:f9:78:f8:53:
                    9c:fe:22:4f:e5:f9:cd:eb:20:36:eb:f4:5d:d6:23:
                    c0:c1:a6:0a:d4:44:d7:3e:61:d1:09:ff:8d:29:87:
                    b3:9f:2e:6b:ec:c2:8e:ed:77:d9:27:c1:53:b9:13:
                    15:d1:f7:ab:3f:49:77:ef:35:0d:26:30:74:a4:e1:
                    c9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FC:BE:46:91:76:C6:3E:1B:45:1F:55:4F:D6:D0:FC:5A:F2:8F:C0
            X509v3 Authority Key Identifier:
                keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/6fy-RpF2xj4bRR9VT9bQ_Fryj8A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.138.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:03:fc:2f:66:ec:a5:82:95:08:9b:b5:8b:a2:c0:0c:55:9b:
         d3:d3:e8:95:9d:3c:fd:2c:c8:5b:af:0d:90:d9:24:00:8b:4a:
         c3:0f:c5:d2:84:41:38:37:f6:00:e0:35:38:0f:8c:04:98:ba:
         40:52:25:11:e9:e8:e5:4e:76:68:ac:2a:15:c5:57:13:15:c9:
         35:c3:5f:9c:3a:15:c3:75:be:87:9e:fe:94:6f:34:55:b7:0b:
         07:0a:56:8d:c0:bb:41:73:2a:55:da:eb:78:da:db:98:cc:d3:
         3c:dd:56:28:68:f3:f3:c3:64:f9:0f:ad:3d:be:44:2c:31:51:
         8a:8b:9b:e7:a4:3e:10:e4:87:79:60:fe:30:13:43:c5:eb:da:
         53:bc:7b:a0:91:41:cb:af:c7:74:2d:d4:7f:39:c6:11:fa:12:
         e1:53:bf:bc:e3:56:5c:e8:94:c8:01:6b:09:06:3c:1b:5c:21:
         47:9d:52:d1:21:8c:af:67:ae:11:ee:26:93:1a:a2:89:4c:b4:
         4a:b3:a5:47:53:b4:8b:41:52:b8:77:85:c1:d8:56:e2:c7:1f:
         9a:83:b7:1c:28:fd:8a:e7:0e:b6:50:53:4f:57:c0:e8:6c:5d:
         ec:d4:2b:3c:b6:2c:34:79:74:1a:4e:b6:61:97:7f:b6:32:82:
         8a:89:5e:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmaioERevviT/PAeAxMK8aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0
NTlmZWQwHhcNMjUwMTAyMDk0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWZjYmU0NjkxNzZjNjNlMWI0NTFmNTU0ZmQ2ZDBmYzVhZjI4ZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA41i6xvUDHY0RzPh1Y5JHdz6Ucm
9pgDo3xUfe4fq1SiMkbauf1XrTMfbvJOescwYOTVnOTJ9T4ILFHkRZ5HJXwvuGGc
2M3x+Aq+6K2046CBC289p+t9HFMQU101dCAfUFubK6K3oL9xPDSHJL0GywD9RVKT
3T10XlnNhULiKil7Dofkm+4jv6CfZFPhAzX+366yS0MOjdq+KMhws0LBcDc7IELA
kQbJgnG3u7P0b738SfIxCkdvYTJn2temBfl4+FOc/iJP5fnN6yA26/Rd1iPAwaYK
1ETXPmHRCf+NKYezny5r7MKO7XfZJ8FTuRMV0ferP0l37zUNJjB0pOHJbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOn8vkaRdsY+G0UfVU/W0Pxa8o/AMB8GA1UdIwQY
MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt
MzBmZjJjODNmMDAxLzEvNmZ5LVJwRjJ4ajRiUlI5VlQ5YlFfRnJ5ajhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx
LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYrmMA0G
CSqGSIb3DQEBCwUAA4IBAQBnA/wvZuylgpUIm7WLosAMVZvT0+iVnTz9LMhbrw2Q
2SQAi0rDD8XShEE4N/YA4DU4D4wEmLpAUiUR6ejlTnZorCoVxVcTFck1w1+cOhXD
db6Hnv6UbzRVtwsHClaNwLtBcypV2ut42tuYzNM83VYoaPPzw2T5D609vkQsMVGK
i5vnpD4Q5Id5YP4wE0PF69pTvHugkUHLr8d0LdR/OcYR+hLhU7+841Zc6JTIAWsJ
BjwbXCFHnVLRIYyvZ64R7iaTGqKJTLRKs6VHU7SLQVK4d4XB2Fbixx+ag7ccKP2K
5w62UFNPV8DobF3s1Cs8tiw0eXQaTrZhl3+2MoKKiV65
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:10 2025 by rpki-client on console.sobornost.net