Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/g_i_LnBeFdam5EcjhX2P3LQ4FVU.roa
File:                     g_i_LnBeFdam5EcjhX2P3LQ4FVU.roa (raw, json)
Hash identifier:          9gm8nIFVfkBHC0WnoRN2oeNjKj8xNcfn6S96jzdZ2t0=
Subject key identifier:   83:F8:BF:2E:70:5E:15:D6:A6:E4:47:23:85:7D:8F:DC:B4:38:15:55
Certificate issuer:       /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial:       0196245EE170B3093AA979673F9E9B67A016
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/g_i_LnBeFdam5EcjhX2P3LQ4FVU.roa
Signing time:             Fri 11 Apr 2025 10:21:59 +0000
ROA not before:           Fri 11 Apr 2025 10:21:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137235
IP address blocks:        83.137.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:24:5e:e1:70:b3:09:3a:a9:79:67:3f:9e:9b:67:a0:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
        Validity
            Not Before: Apr 11 10:21:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=83f8bf2e705e15d6a6e44723857d8fdcb4381555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d3:53:cb:9d:0a:7a:16:b9:44:47:04:79:d8:
                    21:0b:00:93:dc:2a:37:2b:57:9a:71:9d:61:a3:45:
                    fe:79:2f:88:a1:11:37:24:73:10:06:e2:20:2b:c9:
                    a4:b4:f2:7f:49:df:a8:70:33:af:6f:b6:ae:af:e3:
                    ad:01:db:2f:89:11:78:ae:83:1c:66:48:58:fa:b4:
                    87:b3:94:f6:88:ac:b4:ef:98:64:0c:64:04:40:0b:
                    c2:1b:4c:46:59:79:d8:81:38:7e:4b:bd:f8:be:85:
                    e1:fb:4f:17:e7:d5:18:c6:03:f7:64:1c:48:56:6e:
                    8d:3f:51:c7:ae:ca:cd:50:bb:df:8a:05:15:9a:d8:
                    12:1c:df:86:eb:2f:ed:0e:02:1a:eb:f3:6f:cd:71:
                    e8:e6:56:be:47:85:63:83:be:c5:dd:b3:46:e6:8a:
                    cc:f5:de:3f:a6:fc:1d:72:99:c8:e2:8d:d2:d2:17:
                    f8:61:0a:38:dd:f2:8f:29:f6:8d:f9:d3:9a:ee:31:
                    7a:f4:07:d7:10:c3:b3:9c:29:99:e5:09:f2:96:40:
                    c7:36:a3:08:1a:b4:bb:9c:ec:5a:bd:34:26:36:b3:
                    ac:e8:7d:31:dd:94:81:f8:07:df:07:95:c3:22:cd:
                    c2:bd:af:f6:6d:e2:98:65:a1:45:38:2f:dd:13:c3:
                    26:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F8:BF:2E:70:5E:15:D6:A6:E4:47:23:85:7D:8F:DC:B4:38:15:55
            X509v3 Authority Key Identifier:
                keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/g_i_LnBeFdam5EcjhX2P3LQ4FVU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.137.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:c5:a2:c7:c6:4a:b7:2e:e7:71:21:1e:7e:e8:13:9d:3a:c0:
         3e:5c:0a:63:c3:64:e6:9d:c7:39:eb:36:d4:73:f2:da:8a:a1:
         1e:2f:87:ba:06:e5:14:a0:24:11:ba:fe:04:9b:e0:5c:58:99:
         b9:cd:03:a9:f5:db:d6:05:63:b5:ae:01:a0:98:55:37:41:f4:
         93:5c:e8:12:88:d9:ec:50:06:00:77:73:42:41:02:8b:d0:fc:
         06:6b:11:8e:5f:61:3b:dc:8b:37:9b:86:11:91:08:b2:e6:8f:
         69:67:a8:76:cd:3d:e9:1c:57:71:f7:77:41:89:b1:f5:ee:54:
         ee:7b:a6:e6:a2:4b:4c:f1:69:5a:b9:fc:55:c7:33:18:e1:5f:
         67:54:04:91:ee:01:d5:db:b4:c6:20:37:ed:e0:b6:e9:b6:b7:
         bd:9a:92:48:7e:ef:82:87:75:10:76:de:12:2c:0d:ae:8f:2f:
         00:3b:7f:81:1e:96:28:36:bb:34:34:bf:37:ba:3e:fb:eb:1d:
         e7:93:75:9a:c3:b8:b6:77:f1:c3:35:ca:65:95:1d:f3:0a:95:
         6a:42:2a:ac:77:40:ba:c1:78:63:9b:ff:91:58:be:e9:54:65:
         f1:9c:7a:7e:af:c4:a7:b8:5b:3f:4c:a6:21:af:1c:be:39:48:
         0c:da:ae:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYkXuFwswk6qXlnP56bZ6AWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjUwNDExMTAyMTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2Y4YmYyZTcwNWUxNWQ2YTZlNDQ3MjM4NTdkOGZkY2I0MzgxNTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NNTy50Keha5REcEedghCwCT3Co3
K1eacZ1ho0X+eS+IoRE3JHMQBuIgK8mktPJ/Sd+ocDOvb7aur+OtAdsviRF4roMc
ZkhY+rSHs5T2iKy075hkDGQEQAvCG0xGWXnYgTh+S734voXh+08X59UYxgP3ZBxI
Vm6NP1HHrsrNULvfigUVmtgSHN+G6y/tDgIa6/NvzXHo5la+R4Vjg77F3bNG5orM
9d4/pvwdcpnI4o3S0hf4YQo43fKPKfaN+dOa7jF69AfXEMOznCmZ5QnylkDHNqMI
GrS7nOxavTQmNrOs6H0x3ZSB+AffB5XDIs3Cva/2beKYZaFFOC/dE8Mm1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIP4vy5wXhXWpuRHI4V9j9y0OBVVMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvZ19pX0xuQmVGZGFtNUVjamhYMlAzTFE0RlZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU4mZMA0G
CSqGSIb3DQEBCwUAA4IBAQAIxaLHxkq3LudxIR5+6BOdOsA+XApjw2Tmncc56zbU
c/LaiqEeL4e6BuUUoCQRuv4Em+BcWJm5zQOp9dvWBWO1rgGgmFU3QfSTXOgSiNns
UAYAd3NCQQKL0PwGaxGOX2E73Is3m4YRkQiy5o9pZ6h2zT3pHFdx93dBibH17lTu
e6bmoktM8WlaufxVxzMY4V9nVASR7gHV27TGIDft4Lbptre9mpJIfu+Ch3UQdt4S
LA2ujy8AO3+BHpYoNrs0NL83uj776x3nk3Waw7i2d/HDNcpllR3zCpVqQiqsd0C6
wXhjm/+RWL7pVGXxnHp+r8SnuFs/TKYhrxy+OUgM2q6K
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:27 2025 by rpki-client on console.sobornost.net