Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eDqEOD5rZ-IbsvLnpDn4gZ8F8OA.roa
File:                     eDqEOD5rZ-IbsvLnpDn4gZ8F8OA.roa (raw, json)
Hash identifier:          wEgnPYE8mj7GDm0678xApA8ySKS5ZN0hEeRPU/wMZZw=
Subject key identifier:   78:3A:84:38:3E:6B:67:E2:1B:B2:F2:E7:A4:39:F8:81:9F:05:F0:E0
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       019541384A24DBDCAF5C79A645A61A5B375F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eDqEOD5rZ-IbsvLnpDn4gZ8F8OA.roa
Signing time:             Wed 26 Feb 2025 07:46:02 +0000
ROA not before:           Wed 26 Feb 2025 07:46:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213574
IP address blocks:        85.93.31.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:41:38:4a:24:db:dc:af:5c:79:a6:45:a6:1a:5b:37:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Feb 26 07:46:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=783a84383e6b67e21bb2f2e7a439f8819f05f0e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:38:b0:96:7c:b7:00:84:fd:89:0e:8d:cd:e6:
                    fa:d6:48:ee:42:59:48:67:3c:e2:53:0f:0e:52:f5:
                    a8:fe:aa:7d:58:3f:46:53:48:d2:db:2d:23:2a:1e:
                    b4:ce:2c:7b:9f:5a:7a:dd:84:56:a2:27:67:27:9e:
                    95:6d:9f:dd:c4:c0:cd:41:6a:4e:6f:c5:eb:79:aa:
                    fa:fe:b7:39:39:34:a6:ca:1e:73:d3:e6:f1:93:9c:
                    4d:78:96:c3:c2:d4:4e:9d:34:23:be:65:4e:87:52:
                    9a:d4:f7:a9:51:48:ac:5c:61:60:80:4e:04:3e:88:
                    c2:88:38:19:56:17:e9:e4:23:02:76:b9:18:98:2a:
                    c8:3f:c4:ef:1e:f4:00:26:76:d7:ab:89:9f:ed:5b:
                    cd:f1:2b:c9:5a:27:35:02:2f:33:10:0b:80:e0:cc:
                    96:ae:5d:a2:af:9e:21:a1:86:b1:93:e2:60:f9:c6:
                    d5:4e:1e:59:e6:36:8d:af:da:dd:26:f2:68:eb:b7:
                    eb:96:f8:0b:2a:de:9e:c6:86:7f:f2:e9:af:78:f5:
                    10:5d:7a:55:42:6a:ab:94:d7:df:2a:cc:cc:e2:c1:
                    4f:c3:d8:a2:6e:fc:f3:64:6b:04:63:89:19:6b:e4:
                    82:19:a2:f3:8a:fd:c8:b4:e8:bf:b2:eb:3b:22:03:
                    54:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:3A:84:38:3E:6B:67:E2:1B:B2:F2:E7:A4:39:F8:81:9F:05:F0:E0
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eDqEOD5rZ-IbsvLnpDn4gZ8F8OA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.93.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:54:a9:7a:19:85:88:09:75:6a:48:f8:ae:4f:19:76:2b:4f:
         29:a7:c2:fb:da:02:08:cf:f1:2e:e3:9d:6d:b4:4d:73:29:a9:
         a0:03:fb:4e:ac:23:00:ff:24:a4:0f:a4:01:5a:1f:45:de:08:
         0b:cf:74:27:c5:c1:88:1f:00:6d:56:17:45:5c:cd:ea:a9:10:
         ee:26:42:5a:f2:0b:0f:fe:1f:0c:f1:b5:af:7c:10:48:0f:a0:
         65:21:97:ef:06:d6:fd:ca:43:e1:c3:1a:e9:10:5f:a1:f1:a7:
         bb:9b:95:3a:ef:87:89:b1:ba:39:6e:5c:4c:f8:c4:65:e5:5d:
         48:83:77:94:01:f5:84:a8:16:f7:ab:36:50:74:9f:14:17:74:
         48:cc:0b:12:97:4d:b2:6e:d5:04:59:00:5c:8e:4f:79:03:65:
         48:ad:04:1d:8f:eb:f6:a3:44:f0:92:e2:af:d3:75:af:fa:c0:
         90:d7:b0:c9:f7:e2:b9:af:f1:4c:5e:5a:4b:d6:a2:57:66:25:
         13:b6:a5:a1:57:b5:2c:18:64:30:b9:5c:05:89:ed:4e:f4:05:
         65:df:da:c4:9e:37:94:18:05:2d:19:6c:53:f3:a2:6d:db:12:
         62:d6:99:e7:57:49:8c:23:f4:b9:97:2e:e3:8d:90:cf:4c:d5:
         b2:d5:ad:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVBOEok29yvXHmmRaYaWzdfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMjI2MDc0NjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODNhODQzODNlNmI2N2UyMWJiMmYyZTdhNDM5Zjg4MTlmMDVmMGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDiwlny3AIT9iQ6Nzeb61kjuQllI
ZzziUw8OUvWo/qp9WD9GU0jS2y0jKh60zix7n1p63YRWoidnJ56VbZ/dxMDNQWpO
b8Xrear6/rc5OTSmyh5z0+bxk5xNeJbDwtROnTQjvmVOh1Ka1PepUUisXGFggE4E
PojCiDgZVhfp5CMCdrkYmCrIP8TvHvQAJnbXq4mf7VvN8SvJWic1Ai8zEAuA4MyW
rl2ir54hoYaxk+Jg+cbVTh5Z5jaNr9rdJvJo67frlvgLKt6exoZ/8umvePUQXXpV
QmqrlNffKszM4sFPw9iibvzzZGsEY4kZa+SCGaLziv3ItOi/sus7IgNUUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHg6hDg+a2fiG7Ly56Q5+IGfBfDgMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvZURxRU9ENXJaLUlic3ZMbnBEbjRnWjhGOE9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVV0fMA0G
CSqGSIb3DQEBCwUAA4IBAQC7VKl6GYWICXVqSPiuTxl2K08pp8L72gIIz/Eu451t
tE1zKamgA/tOrCMA/ySkD6QBWh9F3ggLz3QnxcGIHwBtVhdFXM3qqRDuJkJa8gsP
/h8M8bWvfBBID6BlIZfvBtb9ykPhwxrpEF+h8ae7m5U674eJsbo5blxM+MRl5V1I
g3eUAfWEqBb3qzZQdJ8UF3RIzAsSl02ybtUEWQBcjk95A2VIrQQdj+v2o0TwkuKv
03Wv+sCQ17DJ9+K5r/FMXlpL1qJXZiUTtqWhV7UsGGQwuVwFie1O9AVl39rEnjeU
GAUtGWxT86Jt2xJi1pnnV0mMI/S5ly7jjZDPTNWy1a3m
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:28:12 2025 by rpki-client