Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/7tjVRXqKCT9ZbqPixEx7IUUHCA4.roa
File:                     7tjVRXqKCT9ZbqPixEx7IUUHCA4.roa (raw, json)
Hash identifier:          NYU/83gX44fVlVkCyAzwzk6ZarYZh2vBkpkehH8jwPg=
Subject key identifier:   EE:D8:D5:45:7A:8A:09:3F:59:6E:A3:E2:C4:4C:7B:21:45:07:08:0E
Certificate issuer:       /CN=335cd11fdbafb032534ae022abb4c8e369878a67
Certificate serial:       038836B4
Authority key identifier: 33:5C:D1:1F:DB:AF:B0:32:53:4A:E0:22:AB:B4:C8:E3:69:87:8A:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1zRH9uvsDJTSuAiq7TI42mHimc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/7tjVRXqKCT9ZbqPixEx7IUUHCA4.roa
Signing time:             Fri 24 Jun 2022 15:28:40 +0000
ROA not before:           Fri 24 Jun 2022 15:28:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22653
IP address blocks:        95.214.26.0/24 maxlen: 24
                          95.214.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59258548 (0x38836b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=335cd11fdbafb032534ae022abb4c8e369878a67
        Validity
            Not Before: Jun 24 15:28:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eed8d5457a8a093f596ea3e2c44c7b214507080e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ef:3f:bc:46:79:eb:32:95:06:3c:75:3e:bd:
                    19:41:2e:a0:ce:10:87:ba:6a:b7:7e:e6:ef:cf:ad:
                    7c:22:9d:2f:b6:ad:7e:a1:94:af:00:2e:9f:c0:ef:
                    67:3b:9f:45:c5:88:b6:53:39:90:8b:07:cc:72:ac:
                    19:6b:5b:f6:20:66:7b:be:a2:d7:e0:8d:9e:10:83:
                    f3:3e:2b:61:a8:e4:26:a1:f7:8d:7b:22:72:e6:3c:
                    23:12:17:19:bb:78:6e:92:a9:d2:70:51:d9:47:f4:
                    50:fc:e2:a3:2b:a3:6c:ac:75:d6:74:9f:cf:7c:a1:
                    16:eb:cf:50:3d:bb:56:b1:a6:07:19:9e:ef:d7:81:
                    9b:50:cd:c0:84:1c:23:ab:62:79:57:9b:8f:75:b1:
                    21:d5:f5:38:d6:0c:b7:f8:15:4a:c1:35:83:9f:01:
                    18:62:44:13:62:aa:55:70:4c:d3:3b:1b:b8:54:50:
                    2a:3b:64:e4:a8:55:6a:e2:88:88:9f:fc:4c:6a:80:
                    4a:de:8b:f7:d1:86:2b:37:ed:56:62:bf:5d:39:d0:
                    aa:1f:9b:c4:b9:b9:d6:5f:a0:ca:6a:78:e5:16:c5:
                    c2:de:28:42:73:2c:f1:ba:07:b0:e8:dd:72:86:68:
                    48:a6:61:f6:4f:a4:67:13:5d:69:be:3a:70:5b:73:
                    ae:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D8:D5:45:7A:8A:09:3F:59:6E:A3:E2:C4:4C:7B:21:45:07:08:0E
            X509v3 Authority Key Identifier:
                keyid:33:5C:D1:1F:DB:AF:B0:32:53:4A:E0:22:AB:B4:C8:E3:69:87:8A:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1zRH9uvsDJTSuAiq7TI42mHimc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/7tjVRXqKCT9ZbqPixEx7IUUHCA4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6e5e6e-c466-4539-b704-f1797cab78d4/1/M1zRH9uvsDJTSuAiq7TI42mHimc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.25.0-95.214.26.255

    Signature Algorithm: sha256WithRSAEncryption
         69:46:68:d3:9c:95:c0:41:85:6a:b0:dc:a2:7b:c1:16:df:52:
         4d:19:0f:2c:04:e5:73:b6:71:a3:57:4c:8d:4b:b3:5c:b5:22:
         e1:df:ea:63:35:02:0d:f6:6f:7d:a0:fa:b3:47:ea:88:b0:b0:
         21:72:91:d1:c8:6b:7d:4d:e7:f1:50:e3:00:73:7f:53:60:00:
         a3:b4:84:0e:51:e2:d9:14:33:70:ab:9c:95:a4:87:89:c3:92:
         9b:18:07:09:65:91:62:a1:b8:7c:36:d9:a4:e6:72:87:50:71:
         d7:08:04:45:31:b0:bf:a7:a5:95:6a:9e:81:d3:7a:cc:be:95:
         20:6e:de:c4:6c:a5:0f:6d:f7:89:ff:5a:20:66:a7:cc:b1:48:
         8c:c1:a4:c0:f4:4a:0f:b6:e6:5b:14:76:54:ca:7c:45:43:66:
         8d:cf:ee:35:12:7e:1c:f8:f8:da:55:25:82:38:00:09:cd:38:
         37:5c:01:b7:35:a3:f3:3a:7c:68:b5:5c:d0:80:59:e1:c8:57:
         bc:8a:ab:1e:2c:84:67:cd:c5:d2:07:76:30:75:6e:63:74:93:
         c0:4f:2d:e0:66:e6:3e:32:c6:ca:22:b0:ec:1d:1b:07:4a:99:
         52:42:7e:e0:5b:2c:21:87:73:38:0f:cb:55:82:14:6b:b4:fd:
         1a:0a:24:5e
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEA4g2tDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MzVjZDExZmRiYWZiMDMyNTM0YWUwMjJhYmI0YzhlMzY5ODc4YTY3MB4XDTIyMDYy
NDE1Mjg0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWVkOGQ1NDU3YThh
MDkzZjU5NmVhM2UyYzQ0YzdiMjE0NTA3MDgwZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI3vP7xGeesylQY8dT69GUEuoM4Qh7pqt37m78+tfCKdL7at
fqGUrwAun8DvZzufRcWItlM5kIsHzHKsGWtb9iBme76i1+CNnhCD8z4rYajkJqH3
jXsicuY8IxIXGbt4bpKp0nBR2Uf0UPzioyujbKx11nSfz3yhFuvPUD27VrGmBxme
79eBm1DNwIQcI6tieVebj3WxIdX1ONYMt/gVSsE1g58BGGJEE2KqVXBM0zsbuFRQ
Kjtk5KhVauKIiJ/8TGqASt6L99GGKzftVmK/XTnQqh+bxLm51l+gymp45RbFwt4o
QnMs8boHsOjdcoZoSKZh9k+kZxNdab46cFtzriMCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBTu2NVFeooJP1luo+LETHshRQcIDjAfBgNVHSMEGDAWgBQzXNEf26+wMlNK
4CKrtMjjaYeKZzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L00xelJIOXV2c0RKVFN1QWlxN1RJNDJtSGltYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmQvNmU1ZTZlLWM0NjYtNDUzOS1iNzA0LWYxNzk3Y2FiNzhkNC8x
Lzd0alZSWHFLQ1Q5WmJxUGl4RXg3SVVVSENBNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQv
NmU1ZTZlLWM0NjYtNDUzOS1iNzA0LWYxNzk3Y2FiNzhkNC8xL00xelJIOXV2c0RK
VFN1QWlxN1RJNDJtSGltYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAX9YZAwQAX9YaMA0GCSqGSIb3
DQEBCwUAA4IBAQBpRmjTnJXAQYVqsNyie8EW31JNGQ8sBOVztnGjV0yNS7NctSLh
3+pjNQIN9m99oPqzR+qIsLAhcpHRyGt9TefxUOMAc39TYACjtIQOUeLZFDNwq5yV
pIeJw5KbGAcJZZFiobh8Ntmk5nKHUHHXCARFMbC/p6WVap6B03rMvpUgbt7EbKUP
bfeJ/1ogZqfMsUiMwaTA9EoPtuZbFHZUynxFQ2aNz+41En4c+PjaVSWCOAAJzTg3
XAG3NaPzOnxotVzQgFnhyFe8iqseLIRnzcXSB3YwdW5jdJPATy3gZuY+MsbKIrDs
HRsHSplSQn7gWywhh3M4D8tVghRrtP0aCiRe
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:24 2025 by rpki-client