Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/j16F6s_Gpt9R8p0QnSD7TJXsKMQ.roa
File:                     j16F6s_Gpt9R8p0QnSD7TJXsKMQ.roa (raw, json)
Hash identifier:          Gg6u3FGq2UjHAWfItBwsyEtYAxvwEq/JJoEUL2lSWA8=
Subject key identifier:   8F:5E:85:EA:CF:C6:A6:DF:51:F2:9D:10:9D:20:FB:4C:95:EC:28:C4
Certificate issuer:       /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial:       0190E148850E2DB501778D00F1CDF49DC83E
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/j16F6s_Gpt9R8p0QnSD7TJXsKMQ.roa
Signing time:             Tue 23 Jul 2024 20:29:04 +0000
ROA not before:           Tue 23 Jul 2024 20:29:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214528
IP address blocks:        37.114.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:e1:48:85:0e:2d:b5:01:77:8d:00:f1:cd:f4:9d:c8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
        Validity
            Not Before: Jul 23 20:29:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8f5e85eacfc6a6df51f29d109d20fb4c95ec28c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b3:7a:15:cc:f1:ce:68:2b:8e:72:f1:10:4f:
                    01:12:72:30:66:78:91:ff:41:66:65:87:37:b8:67:
                    43:54:bc:d7:e0:f0:8f:f3:6a:44:ee:d6:12:3f:c3:
                    b3:44:f0:bc:06:93:62:84:67:97:1a:ad:75:19:21:
                    5a:6d:39:24:e0:0c:08:fc:fd:ae:42:f5:bd:28:a9:
                    62:28:17:5d:98:86:33:1b:78:05:41:3a:0a:ee:f9:
                    32:a4:73:77:e2:1b:35:71:f1:78:22:d5:ce:0e:6c:
                    3a:f8:c5:a3:ea:f8:68:d5:0b:d7:a0:78:f0:ab:0f:
                    18:1b:1e:5c:0b:c9:36:97:a6:18:2c:24:89:cd:27:
                    14:6e:d9:ac:08:a1:c0:d0:d8:34:63:02:0a:e8:b3:
                    80:e6:bc:f7:a9:df:1b:89:66:fb:b1:67:40:63:82:
                    4c:2d:7f:07:97:e7:58:45:9d:6d:0c:8d:1c:92:ed:
                    a9:9d:60:37:71:8e:1d:88:ef:87:d9:3a:e0:f2:28:
                    4e:fd:9e:18:71:17:61:6c:80:da:55:e9:1b:fb:b1:
                    31:70:7d:93:d8:1e:ab:63:7c:6a:94:0f:ae:8f:a3:
                    90:d9:c5:d0:7c:29:60:98:d4:86:83:15:1c:e2:33:
                    e2:1e:81:a1:4b:31:46:ae:e1:de:10:f8:ac:aa:cc:
                    05:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5E:85:EA:CF:C6:A6:DF:51:F2:9D:10:9D:20:FB:4C:95:EC:28:C4
            X509v3 Authority Key Identifier:
                keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/j16F6s_Gpt9R8p0QnSD7TJXsKMQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.114.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:48:27:8f:33:61:40:36:28:23:55:12:44:76:3f:3b:1a:9f:
         dc:28:18:b8:eb:28:c7:9e:d2:c6:58:40:00:c4:3c:92:a4:1e:
         94:38:61:8e:06:05:b5:6f:99:9b:89:59:44:5d:68:66:26:2e:
         bf:a2:fa:df:e3:81:e8:d8:1d:a1:a3:b3:bc:7a:21:4a:dc:97:
         6f:18:ec:e7:cf:e7:4c:9f:cc:28:e0:9b:16:21:b0:71:9b:05:
         88:41:03:2e:f5:06:25:f3:bc:15:34:ab:e6:61:48:71:1b:ba:
         d9:7b:20:48:2a:d9:06:47:1c:27:af:f9:3b:b3:9b:8d:f3:bf:
         31:7f:99:23:ed:c3:cc:36:74:77:07:da:1a:21:13:0f:ac:ed:
         58:3e:fd:20:0b:36:0e:2f:91:bd:76:74:2d:20:24:11:98:21:
         ed:00:54:6c:0d:d7:ee:09:d4:8a:61:8c:b9:f8:a3:ad:a4:5b:
         86:39:cb:1d:ca:63:e1:f0:e3:08:f9:35:fc:e6:1c:1d:86:5c:
         3e:d0:77:f2:71:37:d6:01:8c:34:97:85:65:90:18:8d:66:41:
         1c:38:61:9a:c4:5d:8a:18:b0:a0:f4:82:6b:8b:ac:08:1c:5e:
         5b:5c:98:eb:d1:65:9f:96:c3:d6:ec:94:71:47:97:b5:d4:9f:
         9a:48:00:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDhSIUOLbUBd40A8c30ncg+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MDRjZTI4ZWFlNjgyYzk3YWNkMmQ4NjJmZWUyODk3YzNi
MDk2ZmQwHhcNMjQwNzIzMjAyOTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjVlODVlYWNmYzZhNmRmNTFmMjlkMTA5ZDIwZmI0Yzk1ZWMyOGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrN6FczxzmgrjnLxEE8BEnIwZniR
/0FmZYc3uGdDVLzX4PCP82pE7tYSP8OzRPC8BpNihGeXGq11GSFabTkk4AwI/P2u
QvW9KKliKBddmIYzG3gFQToK7vkypHN34hs1cfF4ItXODmw6+MWj6vho1QvXoHjw
qw8YGx5cC8k2l6YYLCSJzScUbtmsCKHA0Ng0YwIK6LOA5rz3qd8biWb7sWdAY4JM
LX8Hl+dYRZ1tDI0cku2pnWA3cY4diO+H2Trg8ihO/Z4YcRdhbIDaVekb+7ExcH2T
2B6rY3xqlA+uj6OQ2cXQfClgmNSGgxUc4jPiHoGhSzFGruHeEPisqswF0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI9eherPxqbfUfKdEJ0g+0yV7CjEMB8GA1UdIwQY
MBaAFBkEzijq5oLJes0thi/uKJfDsJb9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDkt
MTVkNWRlYjIyOGRkLzEvajE2RjZzX0dwdDlSOHAwUW5TRDdUSlhzS01RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDktMTVkNWRlYjIyOGRk
LzEvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJXKwMA0G
CSqGSIb3DQEBCwUAA4IBAQAqSCePM2FANigjVRJEdj87Gp/cKBi46yjHntLGWEAA
xDySpB6UOGGOBgW1b5mbiVlEXWhmJi6/ovrf44Ho2B2ho7O8eiFK3JdvGOznz+dM
n8wo4JsWIbBxmwWIQQMu9QYl87wVNKvmYUhxG7rZeyBIKtkGRxwnr/k7s5uN878x
f5kj7cPMNnR3B9oaIRMPrO1YPv0gCzYOL5G9dnQtICQRmCHtAFRsDdfuCdSKYYy5
+KOtpFuGOcsdymPh8OMI+TX85hwdhlw+0HfycTfWAYw0l4VlkBiNZkEcOGGaxF2K
GLCg9IJri6wIHF5bXJjr0WWflsPW7JRxR5e11J+aSADX
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:18 2024 by rpki-client on console.sobornost.net