Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/2MEo2jMoegCH1A6pe5270kRxVBU.roa
File:                     2MEo2jMoegCH1A6pe5270kRxVBU.roa (raw, json)
Hash identifier:          YgKMo8+McPuffH8rbU6912C5wY/cPyLb0wIwXbLwGqw=
Subject key identifier:   D8:C1:28:DA:33:28:7A:00:87:D4:0E:A9:7B:9D:BB:D2:44:71:54:15
Certificate issuer:       /CN=14d4210a344c999493e61cf9dd735677d38bc05d
Certificate serial:       019426D9EC090ABFE94E391C04B432E68851
Authority key identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/2MEo2jMoegCH1A6pe5270kRxVBU.roa
Signing time:             Thu 02 Jan 2025 11:50:03 +0000
ROA not before:           Thu 02 Jan 2025 11:50:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212935
IP address blocks:        91.203.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:ec:09:0a:bf:e9:4e:39:1c:04:b4:32:e6:88:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14d4210a344c999493e61cf9dd735677d38bc05d
        Validity
            Not Before: Jan  2 11:50:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d8c128da33287a0087d40ea97b9dbbd244715415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:eb:e0:40:06:6d:bb:5d:26:38:65:3a:86:90:
                    94:41:dd:7b:c1:e2:c9:49:e4:7f:e6:b3:2b:29:7b:
                    72:0d:3b:d3:b7:5b:d3:bf:54:79:6a:4f:4f:22:03:
                    cb:51:a0:9e:c9:7c:f5:ef:fe:55:7c:07:41:10:fe:
                    22:ff:a4:ff:d9:81:b7:48:97:33:8b:8d:0a:97:11:
                    0b:9e:b3:9b:7b:b3:71:cd:43:cf:4d:96:5b:fc:b1:
                    09:dd:72:ef:2e:90:0d:e7:a6:ed:c0:0b:c8:aa:52:
                    72:60:62:f1:53:49:90:ff:85:1b:e3:cd:b4:f0:aa:
                    39:48:96:52:5c:d9:11:39:1d:83:77:7a:50:d6:11:
                    41:0d:b7:b3:57:d3:26:2d:53:25:b4:a0:53:8d:d1:
                    6f:7e:49:35:d4:8a:cc:32:76:29:67:3e:81:eb:ca:
                    ab:70:27:f3:1c:61:62:3f:84:bb:3d:2e:b0:46:ba:
                    9d:a3:a1:99:73:6f:74:8e:22:ca:5f:d5:55:84:cb:
                    88:6b:e8:1c:d6:84:87:4d:db:d1:67:69:59:d8:53:
                    ba:0e:b2:e2:90:51:57:55:dc:c1:38:c6:ef:0f:12:
                    6d:98:47:8f:0e:98:08:ba:88:4e:67:44:11:3a:2e:
                    62:4f:b7:f9:6b:45:be:de:88:13:6c:17:9d:e1:5d:
                    ef:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C1:28:DA:33:28:7A:00:87:D4:0E:A9:7B:9D:BB:D2:44:71:54:15
            X509v3 Authority Key Identifier:
                keyid:14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/2MEo2jMoegCH1A6pe5270kRxVBU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.203.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:0a:b9:0a:8a:8e:c5:e6:23:fc:95:9f:64:b3:98:14:53:a3:
         dc:cb:bb:e6:a6:1c:31:75:71:dc:43:3c:a9:5d:bc:32:d5:fe:
         8b:34:e5:3e:ee:af:ea:dd:af:e9:88:3a:43:99:37:d4:6e:ce:
         c4:ca:5d:06:95:64:9c:d1:b4:95:f3:e2:82:2f:5f:55:b7:66:
         61:8a:81:68:2e:bc:e8:f2:b0:ac:ce:99:8d:b0:37:a3:bc:de:
         a4:18:8b:09:a8:4c:8c:6e:e7:ea:37:7a:7e:6c:0f:fd:19:60:
         97:80:07:d7:0b:25:16:50:a2:50:4d:54:b2:66:f2:f4:bc:8c:
         53:8a:b6:a6:53:65:fe:db:df:7c:16:d0:64:dc:e6:0e:77:e8:
         cc:9e:7b:56:28:e4:e5:63:bc:fd:c0:41:bf:a5:33:8f:61:96:
         f0:51:66:3f:63:04:a2:7d:81:03:01:d7:94:86:17:98:27:c5:
         de:63:7a:19:9c:10:c3:bc:f4:ea:4f:23:02:d1:ed:3d:32:94:
         3d:8b:71:69:cc:65:bb:d1:1f:18:fe:8e:ba:61:93:18:ab:28:
         28:bd:9a:86:c6:05:1d:80:b1:f9:f5:57:49:3c:c8:51:53:b3:
         e6:11:60:39:f5:a9:a1:b1:79:53:44:48:c5:ae:0f:c4:69:f2:
         a7:98:5d:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2ewJCr/pTjkcBLQy5ohRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZDQyMTBhMzQ0Yzk5OTQ5M2U2MWNmOWRkNzM1Njc3ZDM4
YmMwNWQwHhcNMjUwMTAyMTE1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGMxMjhkYTMzMjg3YTAwODdkNDBlYTk3YjlkYmJkMjQ0NzE1NDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uvgQAZtu10mOGU6hpCUQd17weLJ
SeR/5rMrKXtyDTvTt1vTv1R5ak9PIgPLUaCeyXz17/5VfAdBEP4i/6T/2YG3SJcz
i40KlxELnrObe7NxzUPPTZZb/LEJ3XLvLpAN56btwAvIqlJyYGLxU0mQ/4Ub4820
8Ko5SJZSXNkROR2Dd3pQ1hFBDbezV9MmLVMltKBTjdFvfkk11IrMMnYpZz6B68qr
cCfzHGFiP4S7PS6wRrqdo6GZc290jiLKX9VVhMuIa+gc1oSHTdvRZ2lZ2FO6DrLi
kFFXVdzBOMbvDxJtmEePDpgIuohOZ0QROi5iT7f5a0W+3ogTbBed4V3v8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNjBKNozKHoAh9QOqXudu9JEcVQVMB8GA1UdIwQY
MBaAFBTUIQo0TJmUk+Yc+d1zVnfTi8BdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jM2VmNTQtNjdmYS00OTM5LWI2NTgt
Mzg1NDRjMmE4N2JiLzEvMk1FbzJqTW9lZ0NIMUE2cGU1Mjcwa1J4VkJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9jM2VmNTQtNjdmYS00OTM5LWI2NTgtMzg1NDRjMmE4N2Ji
LzEvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8seMA0G
CSqGSIb3DQEBCwUAA4IBAQBfCrkKio7F5iP8lZ9ks5gUU6Pcy7vmphwxdXHcQzyp
Xbwy1f6LNOU+7q/q3a/piDpDmTfUbs7Eyl0GlWSc0bSV8+KCL19Vt2ZhioFoLrzo
8rCszpmNsDejvN6kGIsJqEyMbufqN3p+bA/9GWCXgAfXCyUWUKJQTVSyZvL0vIxT
iramU2X+2998FtBk3OYOd+jMnntWKOTlY7z9wEG/pTOPYZbwUWY/YwSifYEDAdeU
hheYJ8XeY3oZnBDDvPTqTyMC0e09MpQ9i3FpzGW70R8Y/o66YZMYqygovZqGxgUd
gLH59VdJPMhRU7PmEWA59amhsXlTREjFrg/EafKnmF2j
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:00 2025 by rpki-client on console.sobornost.net