Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/8AulTmJu_x8zoaNJ6CJ_qnqGQ84.roa
File:                     8AulTmJu_x8zoaNJ6CJ_qnqGQ84.roa (raw, json)
Hash identifier:          H4fJCXnzRSk4jJAfjHPiWNbXv8LHsRx0IwIpMlBq2Ik=
Subject key identifier:   F0:0B:A5:4E:62:6E:FF:1F:33:A1:A3:49:E8:22:7F:AA:7A:86:43:CE
Certificate issuer:       /CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
Certificate serial:       092B236D
Authority key identifier: E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/8AulTmJu_x8zoaNJ6CJ_qnqGQ84.roa
Signing time:             Sun 06 Feb 2022 18:44:13 +0000
ROA not before:           Sun 06 Feb 2022 18:44:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34655
IP address blocks:        80.77.114.0/24 maxlen: 24
                          188.227.231.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153822061 (0x92b236d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
        Validity
            Not Before: Feb  6 18:44:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f00ba54e626eff1f33a1a349e8227faa7a8643ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:69:1c:1b:c5:c7:07:c5:7b:a7:e0:89:2e:
                    5e:06:8a:1d:a2:d6:fc:e6:89:f0:d2:14:f0:26:e0:
                    ba:b7:50:c8:e3:eb:f3:70:49:19:62:f7:b2:c7:8e:
                    2e:71:da:a4:ef:14:80:e3:3f:54:0b:b7:0e:5b:c7:
                    12:9d:a2:b8:4c:92:e9:e4:c9:af:4b:8b:47:63:23:
                    a7:33:d5:79:1d:1a:f9:e8:9f:40:8c:d9:29:2a:e4:
                    69:db:f0:9c:b6:17:69:71:8f:34:c9:8f:fb:35:cf:
                    37:d8:cd:c9:c5:05:3f:df:fb:4d:0b:2c:27:36:00:
                    20:54:80:13:e7:71:a0:21:64:a1:7c:7c:1c:0e:73:
                    ca:58:5c:82:ff:c2:ef:67:f8:c9:61:e6:a8:c5:91:
                    0a:4b:56:b1:64:1f:d3:7b:e9:7e:1b:c1:be:4c:10:
                    4f:ef:a6:ac:6c:be:85:9f:83:a6:9d:0b:ae:c9:f3:
                    68:55:4a:3a:08:a8:90:22:5a:f1:3c:0d:bf:eb:4c:
                    41:ce:e3:0d:4c:e2:1d:16:41:07:a7:52:73:b5:8d:
                    31:48:ac:7c:e0:45:9c:77:7e:9e:6c:d6:a8:b7:05:
                    c6:ab:31:7b:b9:2b:5e:c3:39:e4:ef:dd:49:6b:34:
                    0c:e8:8d:b8:d5:4b:31:b1:d0:d7:1e:0c:00:7c:a2:
                    47:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0B:A5:4E:62:6E:FF:1F:33:A1:A3:49:E8:22:7F:AA:7A:86:43:CE
            X509v3 Authority Key Identifier:
                keyid:E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/8AulTmJu_x8zoaNJ6CJ_qnqGQ84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.77.114.0/24
                  188.227.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:96:e5:72:6b:61:ec:cb:67:30:52:47:6b:32:c9:22:e6:f2:
         e1:c3:87:44:c2:e7:0b:cc:8a:65:e7:97:69:a5:ea:e6:4d:80:
         65:88:57:13:e8:ae:64:7b:c6:ee:11:1f:7f:d4:aa:67:8c:55:
         ac:23:8d:a3:0f:d2:cc:b1:7d:96:18:a9:fe:1a:70:e8:e1:47:
         cf:c6:6d:30:29:63:4a:19:0d:0d:7c:03:19:d5:99:6e:c0:2e:
         ba:19:d9:0e:23:31:f1:57:e4:22:28:fa:ed:34:02:a7:50:79:
         a5:2d:67:d0:9a:41:73:13:81:d3:b5:ef:34:92:fa:84:bd:e0:
         36:83:7e:c3:c5:fb:76:cc:df:0d:63:f9:c4:29:22:c8:54:3d:
         12:ad:3a:37:c0:2e:b6:de:12:43:de:49:8b:14:63:7f:f5:e3:
         82:87:81:e1:28:94:68:f3:90:42:b9:45:b1:3a:33:eb:ca:e4:
         08:88:e8:e7:13:20:4d:2b:ed:e9:df:f6:69:0a:72:6f:aa:a3:
         8e:be:3e:1c:0d:62:7c:f2:4f:2f:12:a4:08:3f:f7:b2:fe:9d:
         7d:88:86:70:3c:41:df:89:d5:d9:76:89:3d:82:38:91:b1:60:
         b2:b9:bf:9d:2c:01:dd:66:9f:cf:b6:19:9f:a0:b3:98:4e:5c:
         b9:eb:51:0b
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECSsjbTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NGJkZDZiMWViZmM5NTg5OWE1ODMzM2RjOTRjZjgyYTE5YTZiM2JlMB4XDTIyMDIw
NjE4NDQxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjAwYmE1NGU2MjZl
ZmYxZjMzYTFhMzQ5ZTgyMjdmYWE3YTg2NDNjZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALXraRwbxccHxXun4IkuXgaKHaLW/OaJ8NIU8CbgurdQyOPr
83BJGWL3sseOLnHapO8UgOM/VAu3DlvHEp2iuEyS6eTJr0uLR2MjpzPVeR0a+eif
QIzZKSrkadvwnLYXaXGPNMmP+zXPN9jNycUFP9/7TQssJzYAIFSAE+dxoCFkoXx8
HA5zylhcgv/C72f4yWHmqMWRCktWsWQf03vpfhvBvkwQT++mrGy+hZ+Dpp0Lrsnz
aFVKOgiokCJa8TwNv+tMQc7jDUziHRZBB6dSc7WNMUisfOBFnHd+nmzWqLcFxqsx
e7krXsM55O/dSWs0DOiNuNVLMbHQ1x4MAHyiRwcCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTwC6VOYm7/HzOho0noIn+qeoZDzjAfBgNVHSMEGDAWgBTkvdax6/yViZpY
Mz3JTPgqGaazvjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVMM1dzZXY4bFltYVdETTl5VXo0S2htbXM3NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWEvMmE4Zjg4LWIwNWQtNDI5MS05M2Q0LTA3ZjdkNTE5NWMyYy8x
LzhBdWxUbUp1X3g4em9hTko2Q0pfcW5xR1E4NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEv
MmE4Zjg4LWIwNWQtNDI5MS05M2Q0LTA3ZjdkNTE5NWMyYy8xLzVMM1dzZXY4bFlt
YVdETTl5VXo0S2htbXM3NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFBNcgMEALzj5zANBgkqhkiG9w0B
AQsFAAOCAQEAiJblcmth7MtnMFJHazLJIuby4cOHRMLnC8yKZeeXaaXq5k2AZYhX
E+iuZHvG7hEff9SqZ4xVrCONow/SzLF9lhip/hpw6OFHz8ZtMCljShkNDXwDGdWZ
bsAuuhnZDiMx8VfkIij67TQCp1B5pS1n0JpBcxOB07XvNJL6hL3gNoN+w8X7dszf
DWP5xCkiyFQ9Eq06N8Autt4SQ95JixRjf/XjgoeB4SiUaPOQQrlFsToz68rkCIjo
5xMgTSvt6d/2aQpyb6qjjr4+HA1ifPJPLxKkCD/3sv6dfYiGcDxB34nV2XaJPYI4
kbFgsrm/nSwB3Wafz7YZn6CzmE5cuetRCw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:42:42 2025 by rpki-client