Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/7UAk0cN_93o1IqUzEsLzy3OF8t8.roa
File:                     7UAk0cN_93o1IqUzEsLzy3OF8t8.roa (raw, json)
Hash identifier:          X/DccKCPSXNbl5PAX4IP4Kv17+DSYA35yARpxNApl1o=
Subject key identifier:   ED:40:24:D1:C3:7F:F7:7A:35:22:A5:33:12:C2:F3:CB:73:85:F2:DF
Certificate issuer:       /CN=1ab634dc74f6037ba47311d127420e76f296be54
Certificate serial:       0194FA90B57090D941CF071F10610C99BDFC
Authority key identifier: 1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/7UAk0cN_93o1IqUzEsLzy3OF8t8.roa
Signing time:             Wed 12 Feb 2025 14:29:35 +0000
ROA not before:           Wed 12 Feb 2025 14:29:35 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     31042
IP address blocks:        24.135.0.0/16 maxlen: 17
                          46.17.144.0/21 maxlen: 21
                          46.240.128.0/17 maxlen: 17
                          80.93.224.0/19 maxlen: 19
                          82.117.192.0/19 maxlen: 24
                          82.117.195.0/24 maxlen: 24
                          87.116.128.0/18 maxlen: 24
                          87.116.128.0/19 maxlen: 19
                          87.116.140.0/24 maxlen: 24
                          87.116.141.0/24 maxlen: 24
                          87.116.160.0/19 maxlen: 19
                          89.216.0.0/16 maxlen: 24
                          91.143.208.0/20 maxlen: 20
                          94.189.128.0/17 maxlen: 18
                          94.230.176.0/20 maxlen: 20
                          95.180.0.0/17 maxlen: 17
                          178.148.0.0/15 maxlen: 16
                          188.2.0.0/16 maxlen: 17
                          188.246.32.0/19 maxlen: 19
                          213.244.224.0/22 maxlen: 24
                          2a00:1dd8::/29 maxlen: 29
                          2a00:1dd8::/32 maxlen: 32
                          2a03:87c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:fa:90:b5:70:90:d9:41:cf:07:1f:10:61:0c:99:bd:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ab634dc74f6037ba47311d127420e76f296be54
        Validity
            Not Before: Feb 12 14:29:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ed4024d1c37ff77a3522a53312c2f3cb7385f2df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:86:6a:ea:13:18:c2:2f:c0:4d:d5:1b:9d:e7:
                    6e:30:35:02:39:f3:5a:74:ba:33:5f:76:fb:25:da:
                    03:a0:e7:d0:27:12:c5:bf:96:5a:c6:13:00:f1:38:
                    29:9d:89:1c:d1:07:18:e0:b7:11:44:19:c8:70:cd:
                    e9:3c:53:89:d4:37:30:cd:33:2c:82:96:67:2b:b2:
                    91:80:d0:4a:15:86:a6:8e:a3:c1:63:b7:2d:95:50:
                    ce:81:53:23:c2:bd:dd:fa:8e:a1:f5:bb:13:9d:8b:
                    d6:06:7f:9d:0b:e9:d8:6a:e7:8f:5d:a6:7c:6b:c6:
                    00:9c:a2:6c:00:21:92:24:9b:3b:f7:fc:39:d4:53:
                    b2:a0:f7:e7:c7:52:c9:46:90:a8:30:02:e3:0c:0b:
                    72:70:fe:73:4e:30:c2:71:b5:aa:81:0d:11:e3:ac:
                    07:3c:ba:50:98:96:e2:07:92:ae:39:50:83:30:06:
                    b4:e2:9e:5d:57:29:71:12:ec:c4:88:12:d2:73:55:
                    29:00:03:87:97:08:9a:9c:f6:6c:4c:7a:96:99:fe:
                    1a:a9:a7:5a:71:18:cf:c6:1b:93:23:0a:e9:bd:ca:
                    ed:52:a5:a6:1c:a1:09:5d:da:19:42:6a:78:12:3c:
                    cc:cb:cf:1f:6d:f4:be:80:48:5c:bd:95:c5:5d:13:
                    fd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:40:24:D1:C3:7F:F7:7A:35:22:A5:33:12:C2:F3:CB:73:85:F2:DF
            X509v3 Authority Key Identifier:
                keyid:1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/7UAk0cN_93o1IqUzEsLzy3OF8t8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.135.0.0/16
                  46.17.144.0/21
                  46.240.128.0/17
                  80.93.224.0/19
                  82.117.192.0/19
                  87.116.128.0/18
                  89.216.0.0/16
                  91.143.208.0/20
                  94.189.128.0/17
                  94.230.176.0/20
                  95.180.0.0/17
                  178.148.0.0/15
                  188.2.0.0/16
                  188.246.32.0/19
                  213.244.224.0/22
                IPv6:
                  2a00:1dd8::/29
                  2a03:87c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         6f:c9:f9:fd:df:8e:1d:13:e1:12:d2:fa:46:a3:0d:82:c2:7c:
         1f:e3:95:d7:92:64:47:c1:07:2f:a2:5f:23:75:b9:7a:b3:43:
         70:a8:44:d8:bc:6c:1b:89:f0:4b:a5:f3:d8:bf:7f:dc:c0:2a:
         07:c9:3a:b8:7e:6b:db:66:b7:14:47:a8:7c:a2:e8:40:56:d7:
         b4:15:17:d9:5e:9f:3b:b2:8a:2e:c7:bf:cb:a3:36:d5:a9:05:
         46:4b:0a:2c:d4:c5:32:bf:b2:69:79:34:cf:95:a9:dc:ca:1e:
         5f:ef:3e:e7:ca:52:0f:2c:2e:a6:56:9b:1d:c1:0f:b9:28:92:
         57:c1:15:14:bb:28:03:f9:4c:4a:a9:93:97:55:a4:2a:8f:e7:
         25:89:53:cd:23:6d:ec:2d:14:2a:f7:e1:40:5d:d9:b9:26:b1:
         2a:34:c3:f9:0c:a4:4a:20:bf:03:52:d7:68:15:af:48:0e:50:
         22:79:7d:97:77:a4:92:16:74:c6:e1:cd:b7:cd:80:23:c0:7d:
         a9:72:8d:d5:48:05:7d:eb:5a:05:8f:65:2f:c5:b9:e3:30:39:
         a6:17:7c:ce:88:84:4f:f7:74:81:0e:6a:f2:7e:b1:8a:2e:67:
         cc:3e:08:d4:18:14:8c:6f:53:12:ef:e4:95:41:b8:44:99:35:
         47:5d:a4:6f
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAZT6kLVwkNlBzwcfEGEMmb38MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYjYzNGRjNzRmNjAzN2JhNDczMTFkMTI3NDIwZTc2ZjI5
NmJlNTQwHhcNMjUwMjEyMTQyOTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDQwMjRkMWMzN2ZmNzdhMzUyMmE1MzMxMmMyZjNjYjczODVmMmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4Zq6hMYwi/ATdUbneduMDUCOfNa
dLozX3b7JdoDoOfQJxLFv5ZaxhMA8TgpnYkc0QcY4LcRRBnIcM3pPFOJ1DcwzTMs
gpZnK7KRgNBKFYamjqPBY7ctlVDOgVMjwr3d+o6h9bsTnYvWBn+dC+nYauePXaZ8
a8YAnKJsACGSJJs79/w51FOyoPfnx1LJRpCoMALjDAtycP5zTjDCcbWqgQ0R46wH
PLpQmJbiB5KuOVCDMAa04p5dVylxEuzEiBLSc1UpAAOHlwianPZsTHqWmf4aqada
cRjPxhuTIwrpvcrtUqWmHKEJXdoZQmp4EjzMy88fbfS+gEhcvZXFXRP9xQIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFO1AJNHDf/d6NSKlMxLC88tzhfLfMB8GA1UdIwQY
MBaAFBq2NNx09gN7pHMR0SdCDnbylr5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3JZMDNIVDJBM3VrY3hIUkowSU9kdktXdmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83YTI2ZTYtZjdhZS00ZGYwLTllY2It
ZDg3OWY3ZTcwOWQ2LzEvN1VBazBjTl85M28xSXFVekVzTHp5M09GOHQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83YTI2ZTYtZjdhZS00ZGYwLTllY2ItZDg3OWY3ZTcwOWQ2
LzEvR3JZMDNIVDJBM3VrY3hIUkowSU9kdktXdmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwXAQCAAEwVgMDABiHAwQD
LhGQAwQHLvCAAwQFUF3gAwQFUnXAAwQGV3SAAwMAWdgDBARbj9ADBAdevYADBARe
5rADBAdftAADAwGylAMDALwCAwQFvPYgAwQC1fTgMBQEAgACMA4DBQMqAB3YAwUD
KgOHwDANBgkqhkiG9w0BAQsFAAOCAQEAb8n5/d+OHRPhEtL6RqMNgsJ8H+OV15Jk
R8EHL6JfI3W5erNDcKhE2LxsG4nwS6Xz2L9/3MAqB8k6uH5r22a3FEeofKLoQFbX
tBUX2V6fO7KKLse/y6M21akFRksKLNTFMr+yaXk0z5Wp3MoeX+8+58pSDywuplab
HcEPuSiSV8EVFLsoA/lMSqmTl1WkKo/nJYlTzSNt7C0UKvfhQF3ZuSaxKjTD+Qyk
SiC/A1LXaBWvSA5QInl9l3ekkhZ0xuHNt82AI8B9qXKN1UgFfetaBY9lL8W54zA5
phd8zoiET/d0gQ5q8n6xii5nzD4I1BgUjG9TEu/klUG4RJk1R12kbw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:42 2025 by rpki-client on console.sobornost.net