Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/w4LW7zHqdRwf5xp9Nxx8wL8FDUg.roa
File:                     w4LW7zHqdRwf5xp9Nxx8wL8FDUg.roa (raw, json)
Hash identifier:          oGfzvQqO8H+H4OeaXmu0Ddzv2AJCmRw62vTi1N91LDk=
Subject key identifier:   C3:82:D6:EF:31:EA:75:1C:1F:E7:1A:7D:37:1C:7C:C0:BF:05:0D:48
Certificate issuer:       /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Certificate serial:       0193AAEC7142A0C4A247C4BEF489CD7C27BF
Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/w4LW7zHqdRwf5xp9Nxx8wL8FDUg.roa
Signing time:             Mon 09 Dec 2024 10:17:22 +0000
ROA not before:           Mon 09 Dec 2024 10:17:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48573
IP address blocks:        31.185.0.0/21 maxlen: 21
                          31.185.0.0/22 maxlen: 22
                          31.185.0.0/24 maxlen: 24
                          31.185.1.0/24 maxlen: 24
                          31.185.2.0/24 maxlen: 24
                          31.185.3.0/24 maxlen: 24
                          31.185.4.0/22 maxlen: 22
                          31.185.4.0/24 maxlen: 24
                          31.185.5.0/24 maxlen: 24
                          31.185.6.0/24 maxlen: 24
                          94.143.40.0/21 maxlen: 21
                          94.143.40.0/22 maxlen: 22
                          94.143.40.0/24 maxlen: 24
                          94.143.42.0/23 maxlen: 23
                          94.143.44.0/22 maxlen: 22
                          95.215.136.0/22 maxlen: 22
                          95.215.136.0/23 maxlen: 23
                          95.215.138.0/23 maxlen: 23
                          185.43.8.0/22 maxlen: 22
                          185.43.8.0/23 maxlen: 23
                          185.43.8.0/24 maxlen: 24
                          185.43.10.0/23 maxlen: 23
                          193.29.230.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:aa:ec:71:42:a0:c4:a2:47:c4:be:f4:89:cd:7c:27:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
        Validity
            Not Before: Dec  9 10:17:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c382d6ef31ea751c1fe71a7d371c7cc0bf050d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a6:c3:19:1c:7d:28:d0:a6:be:ac:96:4a:aa:
                    79:ee:29:db:52:06:d5:02:49:da:5c:c1:2b:69:ab:
                    86:01:19:19:d6:19:0b:16:28:2b:b3:71:11:9e:6b:
                    31:b1:de:27:04:1a:09:68:b9:67:04:e0:8a:4f:13:
                    75:bb:16:12:2c:c3:70:ef:2b:f1:64:56:1b:60:e6:
                    37:51:38:82:9a:1c:d5:eb:1d:f4:a8:3a:b3:90:01:
                    5e:3d:30:d0:38:cb:0a:2d:12:05:27:6d:6c:12:b3:
                    25:8b:db:f7:ac:35:70:51:4c:44:63:8e:ad:22:33:
                    e6:34:52:48:fd:ba:72:6c:94:8b:78:b8:78:6f:72:
                    67:7d:db:05:be:8a:0c:39:ef:93:03:0a:84:34:1f:
                    89:f4:7f:5f:90:28:06:a5:b6:f3:7b:6a:51:81:5e:
                    34:c2:f3:1d:6f:c1:5e:a8:99:41:a8:23:48:f6:4a:
                    ae:0b:09:24:26:14:f0:54:8b:2e:8a:a7:aa:a0:87:
                    a4:59:7e:6f:97:4d:3a:fc:81:6a:63:e5:de:26:81:
                    71:30:a1:a0:90:b6:25:d1:ac:75:81:34:cc:7f:2e:
                    e3:0f:06:61:b9:25:6b:2a:ba:4b:1a:57:a8:7c:6b:
                    e3:1d:c6:7f:b3:06:a7:1d:2a:c8:d2:45:3a:01:61:
                    16:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:82:D6:EF:31:EA:75:1C:1F:E7:1A:7D:37:1C:7C:C0:BF:05:0D:48
            X509v3 Authority Key Identifier:
                keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/w4LW7zHqdRwf5xp9Nxx8wL8FDUg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.185.0.0/21
                  94.143.40.0/21
                  95.215.136.0/22
                  185.43.8.0/22
                  193.29.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:d5:fc:aa:88:d9:d1:e4:5f:5b:50:f9:96:0f:3a:5f:4a:35:
         e6:ba:b3:49:c9:f0:b0:f5:3d:63:b8:2f:94:f8:de:09:cd:1f:
         d1:52:c8:b3:af:7b:91:1d:f2:a9:26:68:11:0a:8a:36:b9:ab:
         c9:c7:b4:4b:eb:b0:9c:68:99:a4:ff:6c:4d:01:56:fd:b9:21:
         a7:6d:8d:28:34:f7:f8:a1:84:a0:d1:19:a4:38:ee:81:27:17:
         ea:be:6a:29:c0:aa:90:ff:35:0a:9a:4f:8b:14:cd:0e:76:37:
         20:e4:f2:42:17:11:3b:45:b9:26:7e:f8:13:b3:7b:44:2a:1a:
         e4:3f:bf:93:a4:41:56:53:90:94:99:94:1c:8b:99:70:34:d1:
         d5:d7:61:74:94:a7:c8:20:6e:e7:d9:cd:69:d2:79:09:9e:81:
         01:4f:92:e1:3d:45:a9:bd:8f:5d:e4:3c:b8:bb:91:a4:dd:91:
         30:d1:17:f0:d0:1a:46:36:fc:31:6b:4a:3a:da:fd:bd:5a:16:
         50:26:bc:7a:43:0b:79:b1:5f:22:63:27:95:ff:12:07:0d:b2:
         e9:e4:43:f1:10:9d:c7:96:0b:ac:e9:e7:ce:54:d2:88:cc:50:
         ba:cc:d4:b6:9f:cb:56:1f:65:40:e2:b4:a4:ad:e0:9d:e0:32:
         4a:e1:d3:32
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZOq7HFCoMSiR8S+9InNfCe/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MGJjYzUwYTlhMzNiYTU2NTFlZmQxYWZlNDBiNmZkYjAy
NTU2ZjAwHhcNMjQxMjA5MTAxNzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzgyZDZlZjMxZWE3NTFjMWZlNzFhN2QzNzFjN2NjMGJmMDUwZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6bDGRx9KNCmvqyWSqp57inbUgbV
AknaXMEraauGARkZ1hkLFigrs3ERnmsxsd4nBBoJaLlnBOCKTxN1uxYSLMNw7yvx
ZFYbYOY3UTiCmhzV6x30qDqzkAFePTDQOMsKLRIFJ21sErMli9v3rDVwUUxEY46t
IjPmNFJI/bpybJSLeLh4b3JnfdsFvooMOe+TAwqENB+J9H9fkCgGpbbze2pRgV40
wvMdb8FeqJlBqCNI9kquCwkkJhTwVIsuiqeqoIekWX5vl006/IFqY+XeJoFxMKGg
kLYl0ax1gTTMfy7jDwZhuSVrKrpLGleofGvjHcZ/swanHSrI0kU6AWEW5QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFMOC1u8x6nUcH+cafTccfMC/BQ1IMB8GA1UdIwQY
MBaAFCkLzFCpozulZR79Gv5Atv2wJVbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1F2TVVLbWpPNlZsSHYwYV9rQzJfYkFsVnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80YjZlZjQtMzhlZS00YzA2LThjYjYt
NzY5ODI0OTNlYTFhLzEvdzRMVzd6SHFkUndmNXhwOU54eDh3TDhGRFVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi80YjZlZjQtMzhlZS00YzA2LThjYjYtNzY5ODI0OTNlYTFh
LzEvS1F2TVVLbWpPNlZsSHYwYV9rQzJfYkFsVnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDH7kAAwQD
Xo8oAwQCX9eIAwQCuSsIAwQBwR3mMA0GCSqGSIb3DQEBCwUAA4IBAQCn1fyqiNnR
5F9bUPmWDzpfSjXmurNJyfCw9T1juC+U+N4JzR/RUsizr3uRHfKpJmgRCoo2uavJ
x7RL67CcaJmk/2xNAVb9uSGnbY0oNPf4oYSg0RmkOO6BJxfqvmopwKqQ/zUKmk+L
FM0Odjcg5PJCFxE7RbkmfvgTs3tEKhrkP7+TpEFWU5CUmZQci5lwNNHV12F0lKfI
IG7n2c1p0nkJnoEBT5LhPUWpvY9d5Dy4u5Gk3ZEw0Rfw0BpGNvwxa0o62v29WhZQ
Jrx6Qwt5sV8iYyeV/xIHDbLp5EPxEJ3Hlgus6efOVNKIzFC6zNS2n8tWH2VA4rSk
reCd4DJK4dMy
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:06 2024 by rpki-client on console.sobornost.net