Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/el7j1J3bDKT27ieG83FPrQYbZJc.roa
File:                     el7j1J3bDKT27ieG83FPrQYbZJc.roa (raw, json)
Hash identifier:          T0KRecSjSVtSKj2we6RG/6efDR4xy2f/rpalGX+ig90=
Subject key identifier:   7A:5E:E3:D4:9D:DB:0C:A4:F6:EE:27:86:F3:71:4F:AD:06:1B:64:97
Certificate issuer:       /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial:       019427B59A47283D4ED53417E292EA70C9CD
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/el7j1J3bDKT27ieG83FPrQYbZJc.roa
Signing time:             Thu 02 Jan 2025 15:50:00 +0000
ROA not before:           Thu 02 Jan 2025 15:50:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     216471
IP address blocks:        185.179.91.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:9a:47:28:3d:4e:d5:34:17:e2:92:ea:70:c9:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
        Validity
            Not Before: Jan  2 15:50:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7a5ee3d49ddb0ca4f6ee2786f3714fad061b6497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4b:a3:37:64:f2:cc:c7:46:4c:0e:e6:e8:05:
                    da:f8:86:b8:ae:09:d9:f3:49:e9:00:59:45:83:40:
                    e5:62:3f:1b:c9:04:59:6c:56:e6:0c:6d:da:98:95:
                    90:b8:31:8c:94:52:64:d8:cd:60:c9:ff:3a:41:7e:
                    5a:99:1d:4f:05:91:d4:01:02:bf:c1:74:a1:b9:d3:
                    5d:98:7d:d6:75:dc:79:a3:08:68:d6:2b:80:4b:c9:
                    81:dd:76:5f:50:fc:1c:01:62:1e:f6:5b:35:c9:29:
                    35:23:36:cf:62:aa:91:cd:7b:c0:c0:7b:e5:b9:70:
                    fd:8f:cf:4c:69:ed:90:47:f8:39:4b:47:66:86:da:
                    85:d4:ef:a8:da:44:b8:26:78:2f:27:d4:b7:d8:47:
                    1d:bc:64:e8:7f:d6:d4:7b:99:eb:25:0c:ba:59:13:
                    0a:51:e0:71:59:c0:28:fb:be:25:cd:1e:da:76:df:
                    ff:4e:5a:98:01:43:0c:f8:71:44:a6:22:4d:77:1d:
                    d4:aa:a1:3b:b6:ac:ab:f2:b3:e2:95:9b:da:1f:ff:
                    27:7c:95:c2:8f:eb:09:1a:17:85:9d:20:69:84:d0:
                    a8:54:7a:ac:01:3a:08:a2:9d:d7:5c:6b:34:a5:33:
                    6f:53:0a:91:e8:d9:5e:7f:54:fd:86:b0:c5:d3:c0:
                    81:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5E:E3:D4:9D:DB:0C:A4:F6:EE:27:86:F3:71:4F:AD:06:1B:64:97
            X509v3 Authority Key Identifier:
                keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/el7j1J3bDKT27ieG83FPrQYbZJc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:92:da:a5:03:bc:43:b4:ad:f5:85:ad:4d:60:be:b8:1b:c2:
         ed:6a:7e:8c:e6:00:23:89:92:ea:b2:64:a9:93:4e:c5:79:c6:
         ec:23:21:c0:a7:7b:07:4f:a9:71:54:59:79:bb:c2:e9:95:e6:
         19:b2:03:37:23:f0:bc:53:e8:ae:40:2f:87:57:6c:38:32:03:
         20:a8:84:4a:84:2e:c8:f6:35:d0:99:43:33:e1:8e:25:1b:86:
         05:09:2d:6f:fc:94:fe:47:bd:3b:f7:67:c1:65:e5:75:5b:15:
         ba:1a:f3:b6:67:35:41:44:84:af:7d:eb:7e:c5:63:ee:91:36:
         33:a7:07:4d:12:55:97:52:a1:ad:2c:84:b2:93:68:24:08:e7:
         8a:83:84:27:44:84:92:79:21:4d:f9:b7:6c:60:80:5e:df:57:
         32:67:e8:87:5e:55:f1:ad:43:30:8d:ed:b5:77:43:86:c7:7c:
         2e:e9:9d:65:9b:70:97:fe:c7:03:ba:ed:63:ef:f2:4b:dc:cd:
         e9:f6:71:95:73:b7:96:01:cb:f9:b6:21:fd:db:b4:34:96:de:
         92:4e:f6:e6:3b:84:e0:1f:fd:37:1e:bd:f6:04:a4:e3:fa:71:
         1f:ce:91:e7:e1:41:87:b3:9e:13:89:4a:bb:7a:77:c2:b3:0f:
         71:37:ba:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntZpHKD1O1TQX4pLqcMnNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMTMxMDMwMjAxOGEzODdjNjkyMTQ2YTM1ZWZkMzNhNmVk
NmIxZWYwHhcNMjUwMTAyMTU1MDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTVlZTNkNDlkZGIwY2E0ZjZlZTI3ODZmMzcxNGZhZDA2MWI2NDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEujN2TyzMdGTA7m6AXa+Ia4rgnZ
80npAFlFg0DlYj8byQRZbFbmDG3amJWQuDGMlFJk2M1gyf86QX5amR1PBZHUAQK/
wXShudNdmH3Wddx5owho1iuAS8mB3XZfUPwcAWIe9ls1ySk1IzbPYqqRzXvAwHvl
uXD9j89Mae2QR/g5S0dmhtqF1O+o2kS4JngvJ9S32EcdvGTof9bUe5nrJQy6WRMK
UeBxWcAo+74lzR7adt//TlqYAUMM+HFEpiJNdx3UqqE7tqyr8rPilZvaH/8nfJXC
j+sJGheFnSBphNCoVHqsAToIop3XXGs0pTNvUwqR6Nlef1T9hrDF08CBJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHpe49Sd2wyk9u4nhvNxT60GG2SXMB8GA1UdIwQY
MBaAFGITEDAgGKOHxpIUajXv0zpu1rHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9mNThhYzgtNTNlOS00Y2E2LWFjYjIt
YmU1N2Q3ZGZhMGRlLzEvZWw3ajFKM2JES1QyN2llRzgzRlByUVliWkpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9mNThhYzgtNTNlOS00Y2E2LWFjYjItYmU1N2Q3ZGZhMGRl
LzEvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubNbMA0G
CSqGSIb3DQEBCwUAA4IBAQA/ktqlA7xDtK31ha1NYL64G8Ltan6M5gAjiZLqsmSp
k07FecbsIyHAp3sHT6lxVFl5u8LpleYZsgM3I/C8U+iuQC+HV2w4MgMgqIRKhC7I
9jXQmUMz4Y4lG4YFCS1v/JT+R70792fBZeV1WxW6GvO2ZzVBRISvfet+xWPukTYz
pwdNElWXUqGtLISyk2gkCOeKg4QnRISSeSFN+bdsYIBe31cyZ+iHXlXxrUMwje21
d0OGx3wu6Z1lm3CX/scDuu1j7/JL3M3p9nGVc7eWAcv5tiH927Q0lt6STvbmO4Tg
H/03Hr32BKTj+nEfzpHn4UGHs54TiUq7enfCsw9xN7r0
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:44:18 2025 by rpki-client