Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e4b824-c98f-4449-b242-d60703e5be5b/1/Eeub9NR36JTovwamY2IV6O0r2wY.roa
File:                     Eeub9NR36JTovwamY2IV6O0r2wY.roa (raw, json)
Hash identifier:          BkcBvfRdCy8Q2cuBv11ooS741GD8DiubO/KbkmTVnIg=
Subject key identifier:   11:EB:9B:F4:D4:77:E8:94:E8:BF:06:A6:63:62:15:E8:ED:2B:DB:06
Certificate issuer:       /CN=e7bb7116d9e0ae890ad22cdd435ffc5bc80dfa8a
Certificate serial:       01856E6FC2208E423CD564044A050A9FE189
Authority key identifier: E7:BB:71:16:D9:E0:AE:89:0A:D2:2C:DD:43:5F:FC:5B:C8:0D:FA:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/57txFtngrokK0izdQ1_8W8gN-oo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/e4b824-c98f-4449-b242-d60703e5be5b/1/Eeub9NR36JTovwamY2IV6O0r2wY.roa
Signing time:             Sun 01 Jan 2023 17:44:55 +0000
ROA not before:           Sun 01 Jan 2023 17:44:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     21217
IP address blocks:        185.34.102.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:6f:c2:20:8e:42:3c:d5:64:04:4a:05:0a:9f:e1:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7bb7116d9e0ae890ad22cdd435ffc5bc80dfa8a
        Validity
            Not Before: Jan  1 17:44:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11eb9bf4d477e894e8bf06a6636215e8ed2bdb06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:34:90:0f:75:2b:c8:ff:24:57:0e:26:98:cd:
                    9b:20:23:d6:2b:d7:ac:5d:a6:51:05:5b:fd:95:ca:
                    d3:87:9c:57:f3:aa:f9:53:8b:9d:2f:4d:a2:af:45:
                    1b:b1:e2:b1:5f:d9:e2:d3:b1:7c:23:d3:95:d1:c2:
                    63:a6:d6:da:c8:4f:d3:41:17:44:43:0f:cf:a4:41:
                    82:05:8a:1c:48:c1:6c:fe:fe:fa:b6:93:b2:e0:32:
                    1d:e3:1c:42:f1:76:61:52:47:12:10:14:ea:66:92:
                    3b:41:b2:c8:58:f0:34:53:80:39:26:ab:91:f0:2a:
                    46:f8:41:d8:26:ca:a9:4d:10:d0:68:26:f2:91:d1:
                    98:71:b2:24:24:60:16:8c:35:86:90:df:7d:83:33:
                    7d:5e:a3:db:41:cc:32:c6:27:3f:6b:31:77:b8:18:
                    85:21:fa:f8:36:72:fa:77:5e:6a:67:28:78:22:7a:
                    7c:e2:9c:b4:f1:ed:3c:a1:38:14:14:3a:d6:f7:54:
                    16:a8:97:7c:ab:3b:8b:32:11:1d:63:0b:98:d9:8a:
                    63:3f:ff:e0:38:d6:41:59:df:07:45:07:92:be:24:
                    cb:25:1d:e4:c9:0e:9e:19:11:1b:85:63:8b:27:36:
                    35:15:e1:9b:47:c7:91:15:9f:65:f7:bd:5b:13:76:
                    28:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EB:9B:F4:D4:77:E8:94:E8:BF:06:A6:63:62:15:E8:ED:2B:DB:06
            X509v3 Authority Key Identifier:
                keyid:E7:BB:71:16:D9:E0:AE:89:0A:D2:2C:DD:43:5F:FC:5B:C8:0D:FA:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57txFtngrokK0izdQ1_8W8gN-oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e4b824-c98f-4449-b242-d60703e5be5b/1/Eeub9NR36JTovwamY2IV6O0r2wY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e4b824-c98f-4449-b242-d60703e5be5b/1/57txFtngrokK0izdQ1_8W8gN-oo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.34.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:ef:d6:10:ba:02:9e:3f:46:c3:dc:e3:0e:35:92:4d:d1:c8:
         e3:ab:67:31:86:69:bc:96:00:81:e2:50:1e:7a:f7:fc:86:8e:
         de:cf:58:f1:fb:ae:31:7d:84:3e:11:43:40:55:b7:67:ec:02:
         66:fa:c4:c9:d6:32:2f:4a:35:9c:a2:b4:f9:24:33:84:7a:5b:
         0c:43:2b:99:e1:5a:0c:6f:d3:9f:84:ce:a8:9b:98:d3:ef:ee:
         79:80:85:61:c4:6c:78:e1:c8:56:ba:3c:22:37:0c:2a:1f:43:
         25:af:ba:02:39:af:c5:09:92:dd:5b:1b:33:6d:d9:b3:73:af:
         40:73:11:cc:ee:20:20:ea:80:7a:17:48:33:a1:46:c9:50:ed:
         6b:82:ce:c6:18:98:21:50:2f:4d:82:22:94:21:03:a1:cd:97:
         cf:5f:57:16:95:4d:e8:4e:6d:57:93:7b:1f:09:4f:5a:75:1b:
         12:cb:7f:dd:54:d6:35:92:46:9c:1e:94:44:f7:97:1f:13:44:
         89:9b:37:93:3d:0b:2f:f3:79:65:a7:45:36:34:10:e1:ff:9b:
         0d:00:ca:a0:83:39:52:1d:a9:f8:53:e9:55:13:6b:4a:94:11:
         e4:55:17:b3:83:3c:9a:ba:1f:98:02:2f:12:3e:64:a3:8b:8a:
         f3:8c:1e:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVub8IgjkI81WQESgUKn+GJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YmI3MTE2ZDllMGFlODkwYWQyMmNkZDQzNWZmYzViYzgw
ZGZhOGEwHhcNMjMwMTAxMTc0NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWViOWJmNGQ0NzdlODk0ZThiZjA2YTY2MzYyMTVlOGVkMmJkYjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjSQD3UryP8kVw4mmM2bICPWK9es
XaZRBVv9lcrTh5xX86r5U4udL02ir0UbseKxX9ni07F8I9OV0cJjptbayE/TQRdE
Qw/PpEGCBYocSMFs/v76tpOy4DId4xxC8XZhUkcSEBTqZpI7QbLIWPA0U4A5JquR
8CpG+EHYJsqpTRDQaCbykdGYcbIkJGAWjDWGkN99gzN9XqPbQcwyxic/azF3uBiF
Ifr4NnL6d15qZyh4Inp84py08e08oTgUFDrW91QWqJd8qzuLMhEdYwuY2YpjP//g
ONZBWd8HRQeSviTLJR3kyQ6eGREbhWOLJzY1FeGbR8eRFZ9l971bE3Yo5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBHrm/TUd+iU6L8GpmNiFejtK9sGMB8GA1UdIwQY
MBaAFOe7cRbZ4K6JCtIs3UNf/FvIDfqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTd0eEZ0bmdyb2tLMGl6ZFExXzhXOGdOLW9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lNGI4MjQtYzk4Zi00NDQ5LWIyNDIt
ZDYwNzAzZTViZTViLzEvRWV1YjlOUjM2SlRvdndhbVkySVY2TzByMndZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9lNGI4MjQtYzk4Zi00NDQ5LWIyNDItZDYwNzAzZTViZTVi
LzEvNTd0eEZ0bmdyb2tLMGl6ZFExXzhXOGdOLW9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSJmMA0G
CSqGSIb3DQEBCwUAA4IBAQB879YQugKeP0bD3OMONZJN0cjjq2cxhmm8lgCB4lAe
evf8ho7ez1jx+64xfYQ+EUNAVbdn7AJm+sTJ1jIvSjWcorT5JDOEelsMQyuZ4VoM
b9OfhM6om5jT7+55gIVhxGx44chWujwiNwwqH0Mlr7oCOa/FCZLdWxszbdmzc69A
cxHM7iAg6oB6F0gzoUbJUO1rgs7GGJghUC9NgiKUIQOhzZfPX1cWlU3oTm1Xk3sf
CU9adRsSy3/dVNY1kkacHpRE95cfE0SJmzeTPQsv83llp0U2NBDh/5sNAMqggzlS
Han4U+lVE2tKlBHkVRezgzyauh+YAi8SPmSji4rzjB5g
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:36:34 2025 by rpki-client