Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/eUQnxtW594Ad6vU9njmKr7uq7YI.roa
File:                     eUQnxtW594Ad6vU9njmKr7uq7YI.roa (raw, json)
Hash identifier:          1w4c53hZ6iVZ5hhHMJGwGhh/v6xJyfrfdyok+gD0KR0=
Subject key identifier:   79:44:27:C6:D5:B9:F7:80:1D:EA:F5:3D:9E:39:8A:AF:BB:AA:ED:82
Certificate issuer:       /CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Certificate serial:       01942444884FF23D226F3158D6DDA6A594EB
Authority key identifier: 22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/eUQnxtW594Ad6vU9njmKr7uq7YI.roa
Signing time:             Wed 01 Jan 2025 23:47:38 +0000
ROA not before:           Wed 01 Jan 2025 23:47:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     211046
IP address blocks:        91.205.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:88:4f:f2:3d:22:6f:31:58:d6:dd:a6:a5:94:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
        Validity
            Not Before: Jan  1 23:47:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=794427c6d5b9f7801deaf53d9e398aafbbaaed82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:57:b8:89:e3:c3:8c:c9:12:93:51:0e:45:3b:
                    59:b1:40:51:df:31:63:71:4c:29:bf:e0:f1:a7:e1:
                    1a:1c:93:62:5d:40:0c:33:03:61:4a:1c:e0:0b:3c:
                    5e:8f:55:06:c7:12:c8:f6:a1:eb:94:4a:8d:20:60:
                    8a:4b:e4:50:ec:6b:18:f7:e2:60:35:a8:ae:77:c9:
                    94:56:29:bf:52:5c:91:b9:b1:3f:6b:1a:3d:77:9e:
                    d6:f0:6c:d8:cd:4d:3c:9b:f0:20:7f:16:03:6f:70:
                    b0:58:46:24:36:ac:4d:03:e5:b3:92:a8:7d:25:1f:
                    1a:89:4a:87:5b:54:43:35:5e:c1:0d:c2:e5:bc:75:
                    2c:7c:1b:6f:63:d3:a6:13:6f:17:75:46:78:9a:79:
                    a4:f8:22:93:9c:fe:b7:db:a2:b0:42:3f:4c:6b:66:
                    9f:94:cf:ec:75:06:dc:3a:39:96:26:48:34:f9:1d:
                    2e:b5:9a:c5:03:e5:06:3a:07:13:f6:a6:82:53:85:
                    c0:c2:3a:43:2f:f0:fd:e0:1a:b0:bf:85:6e:f6:1f:
                    c6:b7:f7:30:6e:e3:71:fd:ed:73:ef:62:9c:29:33:
                    fa:95:91:f1:48:d4:c4:15:17:9c:c0:57:12:af:c5:
                    47:e9:15:28:a7:83:79:55:92:09:ef:a5:04:37:c5:
                    af:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:44:27:C6:D5:B9:F7:80:1D:EA:F5:3D:9E:39:8A:AF:BB:AA:ED:82
            X509v3 Authority Key Identifier:
                keyid:22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/eUQnxtW594Ad6vU9njmKr7uq7YI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.205.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:f7:1f:ad:03:87:4d:01:ef:07:dd:23:f0:8e:3d:e6:bc:fa:
         8c:b4:8a:62:8a:58:a4:48:f9:b6:1d:41:9f:ac:ec:89:85:f4:
         d9:cb:03:12:43:07:4b:d2:13:c5:70:28:09:f0:22:ef:d6:8c:
         2e:92:83:9b:cc:38:19:87:9d:0c:02:59:97:b5:7e:7c:cb:23:
         da:16:90:c1:1f:20:03:6a:b6:3f:62:e4:de:cd:c5:40:94:14:
         e4:1a:2a:af:13:19:1f:a8:16:d1:3b:89:1e:33:93:91:8a:dd:
         c6:e8:0c:7a:81:41:e0:b4:33:e6:92:28:30:74:48:63:7c:74:
         1e:26:a4:7b:97:23:5f:d2:c0:dd:3a:9d:1d:f1:52:16:e7:3b:
         68:6b:94:76:4d:6b:a9:a5:03:c8:92:56:97:52:50:34:4a:17:
         36:9d:cb:69:0d:07:fc:1b:53:cf:d3:e8:6f:e8:63:63:1f:19:
         70:06:a9:f0:f8:59:5a:9b:3d:a6:3f:e7:dd:cf:37:0f:9f:0e:
         91:26:6c:b8:19:fa:2c:98:b4:f9:15:1c:c6:0b:49:ad:40:fa:
         9a:a5:a3:f9:91:17:e6:17:ce:eb:32:a9:ce:dd:4a:dc:c4:41:
         14:d1:cd:af:19:8c:2d:0a:ee:e0:5a:1a:49:b2:67:ef:a7:fd:
         22:2b:f0:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRIhP8j0ibzFY1t2mpZTrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYjNlNGYzOWQxYzNjMTRkODMxNjA2YmZjYTE2NjZkZGU5
YmVkNjIwHhcNMjUwMTAxMjM0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTQ0MjdjNmQ1YjlmNzgwMWRlYWY1M2Q5ZTM5OGFhZmJiYWFlZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFe4iePDjMkSk1EORTtZsUBR3zFj
cUwpv+Dxp+EaHJNiXUAMMwNhShzgCzxej1UGxxLI9qHrlEqNIGCKS+RQ7GsY9+Jg
Naiud8mUVim/UlyRubE/axo9d57W8GzYzU08m/AgfxYDb3CwWEYkNqxNA+Wzkqh9
JR8aiUqHW1RDNV7BDcLlvHUsfBtvY9OmE28XdUZ4mnmk+CKTnP6326KwQj9Ma2af
lM/sdQbcOjmWJkg0+R0utZrFA+UGOgcT9qaCU4XAwjpDL/D94Bqwv4Vu9h/Gt/cw
buNx/e1z72KcKTP6lZHxSNTEFRecwFcSr8VH6RUop4N5VZIJ76UEN8WvpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHlEJ8bVufeAHer1PZ45iq+7qu2CMB8GA1UdIwQY
MBaAFCKz5POdHDwU2DFga/yhZm3em+1iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXJQazg1MGNQQlRZTVdCcl9LRm1iZDZiN1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81MWE2NzgtMzY0NS00Y2E0LThjMGQt
ZWQ1OTQ3ZjY2YjcwLzEvZVVRbnh0VzU5NEFkNnZVOW5qbUtyN3VxN1lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS81MWE2NzgtMzY0NS00Y2E0LThjMGQtZWQ1OTQ3ZjY2Yjcw
LzEvSXJQazg1MGNQQlRZTVdCcl9LRm1iZDZiN1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW83eMA0G
CSqGSIb3DQEBCwUAA4IBAQAr9x+tA4dNAe8H3SPwjj3mvPqMtIpiilikSPm2HUGf
rOyJhfTZywMSQwdL0hPFcCgJ8CLv1owukoObzDgZh50MAlmXtX58yyPaFpDBHyAD
arY/YuTezcVAlBTkGiqvExkfqBbRO4keM5ORit3G6Ax6gUHgtDPmkigwdEhjfHQe
JqR7lyNf0sDdOp0d8VIW5ztoa5R2TWuppQPIklaXUlA0Shc2nctpDQf8G1PP0+hv
6GNjHxlwBqnw+Flamz2mP+fdzzcPnw6RJmy4GfosmLT5FRzGC0mtQPqapaP5kRfm
F87rMqnO3UrcxEEU0c2vGYwtCu7gWhpJsmfvp/0iK/BO
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:56 2025 by rpki-client on console.sobornost.net