Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/IXLwlzTyMBB0SXd5Azpyx1mogWw.roa
File:                     IXLwlzTyMBB0SXd5Azpyx1mogWw.roa (raw, json)
Hash identifier:          qJIrbqQp+fZDx5XbI7fGFOLTOM7ouWeAntvPbCPyQXk=
Subject key identifier:   21:72:F0:97:34:F2:30:10:74:49:77:79:03:3A:72:C7:59:A8:81:6C
Certificate issuer:       /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial:       0194228DAA565489EE109E944B3DA7207F12
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/IXLwlzTyMBB0SXd5Azpyx1mogWw.roa
Signing time:             Wed 01 Jan 2025 15:48:17 +0000
ROA not before:           Wed 01 Jan 2025 15:48:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207258
IP address blocks:        93.188.200.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:aa:56:54:89:ee:10:9e:94:4b:3d:a7:20:7f:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
        Validity
            Not Before: Jan  1 15:48:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2172f09734f2301074497779033a72c759a8816c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f3:ae:5d:3e:c1:2c:64:0a:db:00:09:dc:21:
                    b8:54:11:b6:9a:ab:68:07:bb:0c:f4:30:cc:06:d9:
                    b1:f7:db:3b:9c:d7:69:46:dd:43:e6:00:10:29:59:
                    6a:3f:20:e1:ed:38:e7:ac:f6:36:ba:cb:ef:73:43:
                    70:2b:80:59:02:f9:bc:64:03:2f:53:0e:7f:0f:af:
                    4e:84:dc:f5:da:76:a2:65:69:10:f3:77:98:17:8d:
                    f7:a6:9a:11:15:3f:ca:07:bd:fb:69:00:c8:30:84:
                    cf:d9:ae:3e:88:c3:ec:c6:be:42:3f:8a:dd:86:75:
                    e9:e1:6e:9d:b8:f9:f3:bd:a6:31:da:df:e7:6f:cb:
                    b0:65:8d:9d:e9:4a:7f:35:67:f5:57:af:ed:d4:e1:
                    d5:41:bb:ec:d6:69:77:97:58:76:b6:21:8e:c6:c0:
                    58:88:34:4b:84:c6:1a:01:ad:d1:57:64:94:58:65:
                    e7:69:48:e5:03:27:c6:bc:ed:2d:e8:2f:51:8e:5a:
                    87:f7:ef:58:d1:17:e8:fe:c4:14:a1:98:3c:9c:4b:
                    32:87:93:cb:2c:b4:57:ff:86:5c:1b:fe:ad:dc:e7:
                    5f:8a:b6:79:ab:b4:20:b3:06:30:4c:4b:dc:b2:99:
                    4c:7d:27:f4:1f:b5:ea:5e:98:b8:79:89:3b:df:29:
                    72:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:72:F0:97:34:F2:30:10:74:49:77:79:03:3A:72:C7:59:A8:81:6C
            X509v3 Authority Key Identifier:
                keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/IXLwlzTyMBB0SXd5Azpyx1mogWw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.188.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:5d:0c:61:0d:84:11:23:36:d5:34:c4:2d:49:ca:72:e0:05:
         c3:a8:74:09:17:3b:1f:35:56:da:14:54:23:bd:58:ad:21:68:
         c2:e9:9f:f5:1f:2b:38:c0:59:3c:86:2b:89:b5:8e:74:a4:1f:
         12:c2:14:3a:87:d0:51:c6:de:3a:b0:88:20:0c:2d:0e:5e:cd:
         7f:4a:a5:b4:63:a6:82:7f:2d:d9:0c:85:33:3a:f2:e0:54:c9:
         90:fa:09:b5:d6:ee:03:32:9e:59:b9:19:23:31:1e:10:24:05:
         77:d3:35:d4:b9:4d:8a:5c:25:c7:68:c1:1b:85:06:7e:b4:6e:
         9a:bc:02:76:7a:c7:a9:4f:bc:f6:40:6e:bb:7d:a5:0d:5c:17:
         d7:9f:ec:2c:fb:62:05:5b:59:90:af:f3:1c:0f:6a:75:ab:37:
         24:10:0a:54:7c:a1:13:58:a1:b4:3b:6c:59:f4:64:13:8f:45:
         73:dc:b4:84:1b:30:c1:68:20:f2:f7:f3:1c:40:37:2a:a7:4e:
         9d:6a:15:2d:56:e4:77:bd:af:0e:29:fd:d1:00:33:25:54:1e:
         8b:6c:e7:d4:aa:cb:60:c3:89:9d:17:09:ce:8a:14:15:88:be:
         fa:6c:40:37:54:d0:9a:66:15:8c:07:00:0c:48:24:4c:e4:34:
         63:cb:3d:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijapWVInuEJ6USz2nIH8SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi
Y2ZhNjEwHhcNMjUwMTAxMTU0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTcyZjA5NzM0ZjIzMDEwNzQ0OTc3NzkwMzNhNzJjNzU5YTg4MTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvOuXT7BLGQK2wAJ3CG4VBG2mqto
B7sM9DDMBtmx99s7nNdpRt1D5gAQKVlqPyDh7TjnrPY2usvvc0NwK4BZAvm8ZAMv
Uw5/D69OhNz12naiZWkQ83eYF433ppoRFT/KB737aQDIMITP2a4+iMPsxr5CP4rd
hnXp4W6duPnzvaYx2t/nb8uwZY2d6Up/NWf1V6/t1OHVQbvs1ml3l1h2tiGOxsBY
iDRLhMYaAa3RV2SUWGXnaUjlAyfGvO0t6C9RjlqH9+9Y0Rfo/sQUoZg8nEsyh5PL
LLRX/4ZcG/6t3OdfirZ5q7QgswYwTEvcsplMfSf0H7XqXpi4eYk73ylyTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCFy8Jc08jAQdEl3eQM6csdZqIFsMB8GA1UdIwQY
MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt
ZGU0YWNmNDQ3ZmFlLzEvSVhMd2x6VHlNQkIwU1hkNUF6cHl4MW1vZ1d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl
LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXbzIMA0G
CSqGSIb3DQEBCwUAA4IBAQCNXQxhDYQRIzbVNMQtScpy4AXDqHQJFzsfNVbaFFQj
vVitIWjC6Z/1Hys4wFk8hiuJtY50pB8SwhQ6h9BRxt46sIggDC0OXs1/SqW0Y6aC
fy3ZDIUzOvLgVMmQ+gm11u4DMp5ZuRkjMR4QJAV30zXUuU2KXCXHaMEbhQZ+tG6a
vAJ2esepT7z2QG67faUNXBfXn+ws+2IFW1mQr/McD2p1qzckEApUfKETWKG0O2xZ
9GQTj0Vz3LSEGzDBaCDy9/McQDcqp06dahUtVuR3va8OKf3RADMlVB6LbOfUqstg
w4mdFwnOihQViL76bEA3VNCaZhWMBwAMSCRM5DRjyz1D
-----END CERTIFICATE-----
Generated at Wed Apr 2 00:25:32 2025 by rpki-client on console.sobornost.net