Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/jEoFAlcS68i7ybCLLuOpRSRIdIo.roa
File:                     jEoFAlcS68i7ybCLLuOpRSRIdIo.roa (raw, json)
Hash identifier:          1WIWD7i4wcO8pxSQjsbWHw2D5cGdHFGfPJBQKzALTvI=
Subject key identifier:   8C:4A:05:02:57:12:EB:C8:BB:C9:B0:8B:2E:E3:A9:45:24:48:74:8A
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       0194258FB3CDB2C9E873C759AA2423C7D657
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/jEoFAlcS68i7ybCLLuOpRSRIdIo.roa
Signing time:             Thu 02 Jan 2025 05:49:22 +0000
ROA not before:           Thu 02 Jan 2025 05:49:22 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213751
IP address blocks:        185.177.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:b3:cd:b2:c9:e8:73:c7:59:aa:24:23:c7:d6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Jan  2 05:49:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8c4a05025712ebc8bbc9b08b2ee3a9452448748a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7b:24:fb:f0:29:1d:60:33:61:35:fc:30:f2:
                    66:16:22:c2:b2:aa:1d:b8:f9:1e:4e:96:e6:cd:85:
                    d7:3e:2a:c7:48:c8:d0:73:4f:81:80:a6:d6:d1:35:
                    4b:fd:3f:28:89:ee:95:6c:28:01:bb:7f:ac:fa:65:
                    b6:24:43:e5:7d:38:51:86:18:f4:fa:9d:ae:b1:72:
                    cf:16:8c:e2:79:d1:23:e3:04:70:f8:00:f2:89:ee:
                    15:06:34:d7:8d:6b:06:54:7d:e7:d0:b0:5a:ec:6c:
                    6a:90:b2:2c:a8:d5:d9:fb:a8:e4:5f:4a:95:3d:0d:
                    f9:d5:04:29:20:05:3b:37:37:61:54:40:96:4d:0d:
                    fc:3e:60:85:f0:61:04:01:72:b9:c4:b8:09:f3:f4:
                    69:d6:bb:36:1b:e0:4c:4f:62:32:d9:12:39:f2:9e:
                    6a:b7:0b:12:26:19:ba:1b:35:dc:f6:da:99:af:36:
                    ab:b3:4f:98:a5:e9:76:6f:8d:97:55:fe:97:32:71:
                    9c:f1:85:69:e2:b4:6d:91:06:38:3a:b9:c2:78:cd:
                    68:c0:81:45:3c:cb:72:c4:87:18:ad:94:cd:30:67:
                    3b:4d:f6:c6:03:bd:2c:83:49:64:cd:fd:01:c7:1a:
                    45:4a:b3:5b:24:4b:25:33:5b:06:46:d4:de:82:ea:
                    f4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4A:05:02:57:12:EB:C8:BB:C9:B0:8B:2E:E3:A9:45:24:48:74:8A
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/jEoFAlcS68i7ybCLLuOpRSRIdIo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:24:60:a5:26:d6:96:1d:e6:8c:b0:46:71:87:ba:f2:c1:8b:
         ef:6f:ab:91:86:f6:ff:dc:0b:f8:e3:a6:e1:3a:53:0a:a1:f5:
         04:19:4b:94:c9:c4:45:6d:2a:09:03:87:9a:c6:90:07:61:33:
         57:3c:ac:2e:2b:a0:68:3e:fc:83:dd:cb:29:48:9f:71:d6:d8:
         45:56:b0:1a:cb:85:f6:88:b6:f1:26:22:ed:ca:42:08:5e:30:
         b4:2d:2f:bb:bd:0e:e5:01:f3:e0:32:5a:56:e7:2c:64:0b:aa:
         82:c6:32:76:c4:2e:04:dd:94:b3:1f:c8:bd:96:06:bf:9f:84:
         6c:c1:f1:dc:21:a9:ce:ac:79:6c:d9:af:1c:56:41:a4:d0:78:
         05:ee:8a:89:42:69:e1:74:ff:e0:2e:66:8a:19:7c:9f:37:20:
         95:81:c1:66:88:1e:ea:89:b9:ba:a4:92:7b:e0:38:24:02:c1:
         6a:50:b9:18:df:26:80:ab:2b:95:7c:2a:1d:cd:68:6d:dc:3c:
         ee:15:27:24:4c:93:32:19:1b:42:47:d9:5e:fc:74:16:6e:0e:
         44:75:d2:22:5b:9b:5f:c9:92:52:f4:87:c7:5e:27:ed:ed:d7:
         76:f8:a0:a0:fc:c4:ab:3d:ff:d5:f9:67:34:d6:ff:47:91:ec:
         68:b5:38:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj7PNssnoc8dZqiQjx9ZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjUwMTAyMDU0OTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzRhMDUwMjU3MTJlYmM4YmJjOWIwOGIyZWUzYTk0NTI0NDg3NDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03sk+/ApHWAzYTX8MPJmFiLCsqod
uPkeTpbmzYXXPirHSMjQc0+BgKbW0TVL/T8oie6VbCgBu3+s+mW2JEPlfThRhhj0
+p2usXLPFoziedEj4wRw+ADyie4VBjTXjWsGVH3n0LBa7GxqkLIsqNXZ+6jkX0qV
PQ351QQpIAU7NzdhVECWTQ38PmCF8GEEAXK5xLgJ8/Rp1rs2G+BMT2Iy2RI58p5q
twsSJhm6GzXc9tqZrzars0+Ypel2b42XVf6XMnGc8YVp4rRtkQY4OrnCeM1owIFF
PMtyxIcYrZTNMGc7TfbGA70sg0lkzf0BxxpFSrNbJEslM1sGRtTegur0gQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIxKBQJXEuvIu8mwiy7jqUUkSHSKMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvakVvRkFsY1M2OGk3eWJDTEx1T3BSU1JJZElvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubEbMA0G
CSqGSIb3DQEBCwUAA4IBAQCiJGClJtaWHeaMsEZxh7rywYvvb6uRhvb/3Av446bh
OlMKofUEGUuUycRFbSoJA4eaxpAHYTNXPKwuK6BoPvyD3cspSJ9x1thFVrAay4X2
iLbxJiLtykIIXjC0LS+7vQ7lAfPgMlpW5yxkC6qCxjJ2xC4E3ZSzH8i9lga/n4Rs
wfHcIanOrHls2a8cVkGk0HgF7oqJQmnhdP/gLmaKGXyfNyCVgcFmiB7qibm6pJJ7
4DgkAsFqULkY3yaAqyuVfCodzWht3DzuFSckTJMyGRtCR9le/HQWbg5EddIiW5tf
yZJS9IfHXift7dd2+KCg/MSrPf/V+Wc01v9HkexotThF
-----END CERTIFICATE-----
Generated at Tue Jan 21 15:04:05 2025 by rpki-client on console.sobornost.net