Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/1Ae_yfQHDKRNnQDwOPRaMQCngyQ.roa
File:                     1Ae_yfQHDKRNnQDwOPRaMQCngyQ.roa (raw, json)
Hash identifier:          +NTp7Q1pqxAx2whls9B3Uy3bHdVw5DZ30CWN9JliAkU=
Subject key identifier:   D4:07:BF:C9:F4:07:0C:A4:4D:9D:00:F0:38:F4:5A:31:00:A7:83:24
Certificate issuer:       /CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Certificate serial:       019422FB0E5BACF4F601A55CEA903C8E32C7
Authority key identifier: D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/1Ae_yfQHDKRNnQDwOPRaMQCngyQ.roa
Signing time:             Wed 01 Jan 2025 17:47:46 +0000
ROA not before:           Wed 01 Jan 2025 17:47:46 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     58121
IP address blocks:        193.176.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:0e:5b:ac:f4:f6:01:a5:5c:ea:90:3c:8e:32:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
        Validity
            Not Before: Jan  1 17:47:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d407bfc9f4070ca44d9d00f038f45a3100a78324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6c:4a:0f:c9:14:05:79:c6:ac:56:f5:d7:ac:
                    8a:05:0a:e8:d6:02:bf:26:25:bd:4d:96:62:0a:3a:
                    81:c8:6b:31:33:38:8c:54:2a:38:8b:ab:0f:6f:e1:
                    2c:58:49:2f:61:55:05:d8:fb:a4:01:af:67:e5:62:
                    aa:94:11:5b:68:9c:84:1f:7b:af:e2:c4:e8:16:11:
                    fc:42:71:f3:c2:94:26:a0:e5:86:92:29:7a:d3:2b:
                    d3:ab:62:b8:2a:9b:63:66:5c:78:84:95:52:fd:86:
                    60:05:33:aa:65:c8:c6:e4:bc:60:5d:10:2a:04:a5:
                    90:c8:66:8a:4c:05:9e:51:b9:95:11:9c:91:42:3d:
                    6c:a3:34:d6:d8:92:d0:b5:9b:92:06:d3:52:5e:07:
                    80:b1:29:d4:3b:06:1c:6a:0f:d2:ea:60:3c:5c:cd:
                    cc:6e:c2:3d:c8:0b:df:e6:dc:67:fd:2f:e0:61:43:
                    2a:19:06:98:58:52:9c:6f:0e:79:a8:f5:6c:bc:61:
                    e6:40:55:06:84:4b:d0:f6:7f:ad:8b:0b:67:f5:01:
                    09:0c:6a:51:c5:20:78:87:13:d5:d4:65:8a:16:a8:
                    13:c6:5b:d9:45:37:11:19:a9:80:38:e1:84:7d:2c:
                    20:84:69:c7:83:8b:dd:7b:a1:b2:b6:6b:88:88:86:
                    c7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:07:BF:C9:F4:07:0C:A4:4D:9D:00:F0:38:F4:5A:31:00:A7:83:24
            X509v3 Authority Key Identifier:
                keyid:D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/1Ae_yfQHDKRNnQDwOPRaMQCngyQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.176.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:08:92:36:0f:8e:e2:a8:ab:ff:a8:33:40:d6:62:bf:cc:5b:
         ba:49:2c:84:ff:b8:cf:ae:3a:55:a3:c4:b3:98:55:d9:7b:38:
         a8:f9:36:04:83:77:33:09:1e:24:fc:40:bf:81:20:6e:6e:99:
         83:ba:b4:31:93:b7:78:a1:a6:b0:bc:15:1b:44:ec:47:54:c6:
         a6:66:ef:af:b3:bc:b2:86:61:d0:00:d6:ff:07:b4:c7:f9:0b:
         d0:c3:26:f2:e7:15:20:4a:99:ff:ad:34:4c:47:00:ff:44:be:
         a2:b2:8d:be:ad:e0:94:eb:ed:0c:42:6f:62:a4:d3:5e:29:c9:
         18:ed:bd:16:4b:67:1b:7a:e4:35:2f:28:32:04:3c:7c:de:e0:
         26:be:5b:4d:37:c6:4f:cf:d9:76:88:d2:3d:0d:66:09:7b:f0:
         81:01:02:13:b0:ec:bd:bf:6b:9c:ba:7f:40:af:ff:35:ec:d2:
         99:d2:59:41:b4:a4:a4:aa:51:d2:f3:c8:bc:a4:97:a2:14:7f:
         21:95:b2:95:e1:74:3f:35:04:ba:6a:d8:9d:12:6a:8c:42:cb:
         f5:fd:24:f2:07:63:c9:1a:c7:2d:b0:c0:97:1f:23:c5:4f:d3:
         4b:21:5b:6d:c2:c1:04:50:a3:3c:48:e1:53:ca:ae:30:7b:3e:
         86:8b:a8:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+w5brPT2AaVc6pA8jjLHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZGQ0ZGRkNTM2ZjE4YTg3MmNiYWMxNWU1ODk1NDJhZWRj
ZDA3MzcwHhcNMjUwMTAxMTc0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDA3YmZjOWY0MDcwY2E0NGQ5ZDAwZjAzOGY0NWEzMTAwYTc4MzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomxKD8kUBXnGrFb116yKBQro1gK/
JiW9TZZiCjqByGsxMziMVCo4i6sPb+EsWEkvYVUF2PukAa9n5WKqlBFbaJyEH3uv
4sToFhH8QnHzwpQmoOWGkil60yvTq2K4KptjZlx4hJVS/YZgBTOqZcjG5LxgXRAq
BKWQyGaKTAWeUbmVEZyRQj1sozTW2JLQtZuSBtNSXgeAsSnUOwYcag/S6mA8XM3M
bsI9yAvf5txn/S/gYUMqGQaYWFKcbw55qPVsvGHmQFUGhEvQ9n+tiwtn9QEJDGpR
xSB4hxPV1GWKFqgTxlvZRTcRGamAOOGEfSwghGnHg4vde6GytmuIiIbHkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNQHv8n0BwykTZ0A8Dj0WjEAp4MkMB8GA1UdIwQY
MBaAFNLdTd1TbxiocsusFeWJVCrtzQc3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHQxTjNWTnZHS2h5eTZ3VjVZbFVLdTNOQnpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lY2EwMWMtNTIzMi00N2M1LWIwMTQt
NWIxMzJmN2QzYjQ5LzEvMUFlX3lmUUhES1JOblFEd09QUmFNUUNuZ3lRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9lY2EwMWMtNTIzMi00N2M1LWIwMTQtNWIxMzJmN2QzYjQ5
LzEvMHQxTjNWTnZHS2h5eTZ3VjVZbFVLdTNOQnpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbBhMA0G
CSqGSIb3DQEBCwUAA4IBAQClCJI2D47iqKv/qDNA1mK/zFu6SSyE/7jPrjpVo8Sz
mFXZezio+TYEg3czCR4k/EC/gSBubpmDurQxk7d4oaawvBUbROxHVMamZu+vs7yy
hmHQANb/B7TH+QvQwyby5xUgSpn/rTRMRwD/RL6iso2+reCU6+0MQm9ipNNeKckY
7b0WS2cbeuQ1LygyBDx83uAmvltNN8ZPz9l2iNI9DWYJe/CBAQITsOy9v2ucun9A
r/817NKZ0llBtKSkqlHS88i8pJeiFH8hlbKV4XQ/NQS6atidEmqMQsv1/STyB2PJ
GsctsMCXHyPFT9NLIVttwsEEUKM8SOFTyq4wez6Gi6jN
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:01 2025 by rpki-client on console.sobornost.net