Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/MWwCkyjKodNxojuXE4ToQXLtm5w.roa
File:                     MWwCkyjKodNxojuXE4ToQXLtm5w.roa (raw, json)
Hash identifier:          Ak0owLXzMtwfRek9KqA/lWNxi61mLQqKV5qpbUxSWP4=
Subject key identifier:   31:6C:02:93:28:CA:A1:D3:71:A2:3B:97:13:84:E8:41:72:ED:9B:9C
Certificate issuer:       /CN=8624f3f661f24be5fef641dc722e5cf5ac87389e
Certificate serial:       0194E0979E397421999C1F270C1E9BF1670D
Authority key identifier: 86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/MWwCkyjKodNxojuXE4ToQXLtm5w.roa
Signing time:             Fri 07 Feb 2025 13:27:00 +0000
ROA not before:           Fri 07 Feb 2025 13:27:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8584
IP address blocks:        83.169.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:e0:97:9e:39:74:21:99:9c:1f:27:0c:1e:9b:f1:67:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8624f3f661f24be5fef641dc722e5cf5ac87389e
        Validity
            Not Before: Feb  7 13:27:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=316c029328caa1d371a23b971384e84172ed9b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:93:0f:47:0a:24:66:d1:db:1d:f2:23:54:b1:
                    35:af:93:24:bb:5e:14:45:90:2f:9e:52:97:82:cc:
                    13:77:af:89:1f:c9:2e:68:ce:5d:b7:90:e2:eb:29:
                    70:0f:8a:2d:f4:82:d7:b8:26:bc:e6:4a:85:e7:cd:
                    38:92:60:9d:00:ba:41:87:a0:dc:6f:2b:60:96:56:
                    d5:53:c7:3d:4a:8d:68:37:46:3e:dd:6d:84:1b:e5:
                    c2:a4:dd:99:a8:ab:c1:42:3b:75:63:23:ee:83:73:
                    60:eb:11:c9:cf:94:95:48:3a:d0:bf:5d:00:25:bd:
                    91:32:e8:ef:b3:21:51:4e:d3:e3:b4:71:a1:9d:d9:
                    fc:b0:95:48:0e:a9:db:c1:39:91:f1:e6:d0:23:07:
                    89:38:9d:b1:ff:63:95:0c:4a:39:f2:91:39:36:b1:
                    b9:1b:68:38:35:51:91:00:de:13:0b:ff:2b:81:54:
                    d9:a0:bc:24:dd:ee:18:39:5d:62:bb:d6:e4:1d:0b:
                    34:98:12:63:d3:6e:36:b6:bc:1e:69:26:0c:61:00:
                    92:91:db:53:76:73:45:b9:73:ab:c5:bf:91:45:5e:
                    5b:39:80:12:07:16:35:36:8a:19:3e:52:af:b8:86:
                    f6:04:65:23:94:95:42:95:6a:cd:00:87:09:fe:f7:
                    4d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6C:02:93:28:CA:A1:D3:71:A2:3B:97:13:84:E8:41:72:ED:9B:9C
            X509v3 Authority Key Identifier:
                keyid:86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/MWwCkyjKodNxojuXE4ToQXLtm5w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.169.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:9d:a9:8a:82:24:48:9d:08:10:93:93:77:7b:99:ce:ba:8f:
         4f:40:ad:90:6c:4b:14:72:31:33:6f:22:6e:29:7a:1b:0e:c1:
         20:ad:46:2f:5c:48:7a:23:dc:f4:3c:fa:74:af:53:4f:d0:96:
         5b:f6:5c:b8:fc:e5:91:2d:05:24:82:6d:ce:d3:57:b3:89:00:
         20:d9:57:5a:c1:6b:7c:eb:d7:e5:dc:29:2f:2a:b0:49:54:cf:
         05:9c:63:f1:64:47:2a:f2:b4:f7:b5:06:29:e7:6c:94:e3:b3:
         cf:b2:d7:ef:41:bd:b3:17:08:fc:ff:ef:97:8d:b1:0a:57:d5:
         4d:61:28:e1:1e:a3:7e:85:d4:0a:98:06:53:7b:e5:5a:f2:04:
         a0:89:2b:a8:d2:42:31:8d:ea:cd:81:5b:46:49:f8:74:5a:83:
         98:98:19:d3:4d:06:67:b7:25:37:0b:73:24:60:bb:fc:21:6d:
         e8:37:95:84:6d:13:7c:9a:51:8f:72:19:25:26:89:22:d0:16:
         a9:c7:9b:f9:21:61:da:e6:03:a8:20:a5:3f:46:e0:c3:51:3b:
         b5:a1:e0:9e:51:19:d7:e4:15:9b:b7:9b:03:c2:ca:85:b3:a0:
         da:8b:8f:af:93:06:45:40:2b:45:6e:60:1a:4d:0e:3c:be:47:
         15:c0:d3:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTgl545dCGZnB8nDB6b8WcNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MjRmM2Y2NjFmMjRiZTVmZWY2NDFkYzcyMmU1Y2Y1YWM4
NzM4OWUwHhcNMjUwMjA3MTMyNzAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTZjMDI5MzI4Y2FhMWQzNzFhMjNiOTcxMzg0ZTg0MTcyZWQ5YjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZMPRwokZtHbHfIjVLE1r5Mku14U
RZAvnlKXgswTd6+JH8kuaM5dt5Di6ylwD4ot9ILXuCa85kqF5804kmCdALpBh6Dc
bytgllbVU8c9So1oN0Y+3W2EG+XCpN2ZqKvBQjt1YyPug3Ng6xHJz5SVSDrQv10A
Jb2RMujvsyFRTtPjtHGhndn8sJVIDqnbwTmR8ebQIweJOJ2x/2OVDEo58pE5NrG5
G2g4NVGRAN4TC/8rgVTZoLwk3e4YOV1iu9bkHQs0mBJj0242trweaSYMYQCSkdtT
dnNFuXOrxb+RRV5bOYASBxY1NooZPlKvuIb2BGUjlJVClWrNAIcJ/vdNzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDFsApMoyqHTcaI7lxOE6EFy7ZucMB8GA1UdIwQY
MBaAFIYk8/Zh8kvl/vZB3HIuXPWshzieMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGlUejltSHlTLVgtOWtIY2NpNWM5YXlIT0o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yZDk1OGMtODg3OC00MzIzLWJlZGMt
MjVlNTM1YzhhNWI5LzEvTVd3Q2t5aktvZE54b2p1WEU0VG9RWEx0bTV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8yZDk1OGMtODg3OC00MzIzLWJlZGMtMjVlNTM1YzhhNWI5
LzEvaGlUejltSHlTLVgtOWtIY2NpNWM5YXlIT0o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU6lKMA0G
CSqGSIb3DQEBCwUAA4IBAQCZnamKgiRInQgQk5N3e5nOuo9PQK2QbEsUcjEzbyJu
KXobDsEgrUYvXEh6I9z0PPp0r1NP0JZb9ly4/OWRLQUkgm3O01eziQAg2VdawWt8
69fl3CkvKrBJVM8FnGPxZEcq8rT3tQYp52yU47PPstfvQb2zFwj8/++XjbEKV9VN
YSjhHqN+hdQKmAZTe+Va8gSgiSuo0kIxjerNgVtGSfh0WoOYmBnTTQZntyU3C3Mk
YLv8IW3oN5WEbRN8mlGPchklJoki0Bapx5v5IWHa5gOoIKU/RuDDUTu1oeCeURnX
5BWbt5sDwsqFs6Dai4+vkwZFQCtFbmAaTQ48vkcVwNM4
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:58 2025 by rpki-client on console.sobornost.net