Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/eb38d3-a4a1-4869-893f-b4605a8b24ba/1/So6G3nYIZunAcR7aCFukI3Eijew.roa
File:                     So6G3nYIZunAcR7aCFukI3Eijew.roa (raw, json)
Hash identifier:          Qw+cUrXTPJejyEXyODQ54ZaOC6QwYpNXpSn5bdiWbY0=
Subject key identifier:   4A:8E:86:DE:76:08:66:E9:C0:71:1E:DA:08:5B:A4:23:71:22:8D:EC
Certificate issuer:       /CN=a94f0a32a602d641fb284d9928d32bf84f60a4dc
Certificate serial:       6B4B35
Authority key identifier: A9:4F:0A:32:A6:02:D6:41:FB:28:4D:99:28:D3:2B:F8:4F:60:A4:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qU8KMqYC1kH7KE2ZKNMr-E9gpNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/eb38d3-a4a1-4869-893f-b4605a8b24ba/1/So6G3nYIZunAcR7aCFukI3Eijew.roa
Signing time:             Sat 01 Jan 2022 01:03:13 +0000
ROA not before:           Sat 01 Jan 2022 01:03:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50214
IP address blocks:        193.3.184.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7031605 (0x6b4b35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a94f0a32a602d641fb284d9928d32bf84f60a4dc
        Validity
            Not Before: Jan  1 01:03:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4a8e86de760866e9c0711eda085ba42371228dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1c:df:76:f1:ea:b0:3c:c8:29:29:d4:e5:d3:
                    64:9e:e1:5e:c8:af:4b:22:82:0f:6d:44:34:71:25:
                    bf:1f:45:56:c2:a9:6f:78:4c:a9:69:f9:3f:5e:8b:
                    65:55:94:5e:9e:15:a3:57:d1:c8:04:62:64:35:06:
                    fd:98:00:64:77:20:44:d1:0d:d1:d6:0f:f9:c9:c4:
                    74:4b:ea:c7:a5:2b:7c:d4:77:34:32:e1:bd:d8:5c:
                    71:4a:ed:ad:72:5a:73:73:75:3b:84:e0:49:ec:e4:
                    0b:6c:49:cd:04:66:85:a8:75:0d:e5:c8:0f:81:6e:
                    2d:56:14:2c:8f:54:6b:5e:ff:6f:35:cd:d9:04:3b:
                    8f:42:5e:80:b0:9b:8f:a5:4e:2b:08:f1:af:86:d8:
                    db:ed:72:56:a5:76:3e:b9:3e:a8:94:29:d9:e2:a5:
                    ac:4b:5c:ac:34:2f:88:93:bd:b6:8f:41:f0:2b:73:
                    64:5d:e9:17:58:6d:cd:51:a7:dc:a9:94:be:0d:b4:
                    06:67:ad:cf:b7:95:27:8a:a4:8c:c0:ca:ff:bf:54:
                    7f:ef:90:1d:83:78:38:16:c5:04:75:c6:52:fa:32:
                    81:b5:8a:e1:21:91:27:4c:74:12:65:7e:59:74:95:
                    d7:cd:e1:6e:d1:3d:c6:72:f2:96:01:ba:39:c6:44:
                    a8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8E:86:DE:76:08:66:E9:C0:71:1E:DA:08:5B:A4:23:71:22:8D:EC
            X509v3 Authority Key Identifier:
                keyid:A9:4F:0A:32:A6:02:D6:41:FB:28:4D:99:28:D3:2B:F8:4F:60:A4:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qU8KMqYC1kH7KE2ZKNMr-E9gpNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/eb38d3-a4a1-4869-893f-b4605a8b24ba/1/So6G3nYIZunAcR7aCFukI3Eijew.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/eb38d3-a4a1-4869-893f-b4605a8b24ba/1/qU8KMqYC1kH7KE2ZKNMr-E9gpNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:ec:f3:eb:34:94:03:fb:2c:27:77:36:07:b4:3c:84:1a:1f:
         e7:8c:71:cf:c4:2f:95:73:d3:b9:84:39:9b:70:6f:eb:6c:8c:
         a0:65:e4:48:ce:22:aa:d2:ff:98:e0:f6:9f:75:6e:b3:47:23:
         d6:00:23:d1:07:35:36:13:2a:bb:d5:06:23:40:72:75:12:b0:
         d3:fa:39:af:bd:33:51:86:c1:d7:db:d0:00:22:62:09:69:14:
         7d:77:22:f4:48:65:46:b9:6d:93:5a:0d:7e:9f:61:f3:c9:58:
         30:4b:1a:9e:e5:47:39:84:25:0e:54:a8:83:28:5f:5c:76:99:
         6e:31:2b:41:ff:8d:c8:a9:e0:64:5a:db:23:72:07:32:2d:ea:
         8b:f4:b5:b6:a6:a2:19:3b:b5:dc:d2:39:7f:b9:50:43:8e:06:
         25:c0:b7:2c:15:79:d8:eb:b7:b2:a4:17:b2:4c:a3:3c:43:ad:
         49:94:49:7e:a2:40:9f:41:ee:d6:1f:a5:f8:21:0a:04:ef:b2:
         37:06:3d:60:03:b3:9e:20:b0:f4:e2:57:ab:a8:4d:52:17:6a:
         57:9a:5c:2a:9e:3c:db:df:fe:e2:49:3e:bd:c9:3e:bc:f3:bf:
         14:58:e7:e9:5e:ed:aa:18:0b:59:1b:73:e8:43:40:63:a0:5f:
         04:16:1e:3d
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDa0s1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE5
NGYwYTMyYTYwMmQ2NDFmYjI4NGQ5OTI4ZDMyYmY4NGY2MGE0ZGMwHhcNMjIwMTAx
MDEwMzEzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0YThlODZkZTc2MDg2
NmU5YzA3MTFlZGEwODViYTQyMzcxMjI4ZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvxzfdvHqsDzIKSnU5dNknuFeyK9LIoIPbUQ0cSW/H0VWwqlv
eEypafk/XotlVZRenhWjV9HIBGJkNQb9mABkdyBE0Q3R1g/5ycR0S+rHpSt81Hc0
MuG92FxxSu2tclpzc3U7hOBJ7OQLbEnNBGaFqHUN5cgPgW4tVhQsj1RrXv9vNc3Z
BDuPQl6AsJuPpU4rCPGvhtjb7XJWpXY+uT6olCnZ4qWsS1ysNC+Ik722j0HwK3Nk
XekXWG3NUafcqZS+DbQGZ63Pt5UniqSMwMr/v1R/75Adg3g4FsUEdcZS+jKBtYrh
IZEnTHQSZX5ZdJXXzeFu0T3GcvKWAbo5xkSouwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFEqOht52CGbpwHEe2ghbpCNxIo3sMB8GA1UdIwQYMBaAFKlPCjKmAtZB+yhN
mSjTK/hPYKTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
cVU4S01xWUMxa0g3S0UyWktOTXItRTlncE53LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9lZC9lYjM4ZDMtYTRhMS00ODY5LTg5M2YtYjQ2MDVhOGIyNGJhLzEv
U282RzNuWUladW5BY1I3YUNGdWtJM0VpamV3LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9l
YjM4ZDMtYTRhMS00ODY5LTg5M2YtYjQ2MDVhOGIyNGJhLzEvcVU4S01xWUMxa0g3
S0UyWktOTXItRTlncE53LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQO4MA0GCSqGSIb3DQEBCwUAA4IB
AQCG7PPrNJQD+ywndzYHtDyEGh/njHHPxC+Vc9O5hDmbcG/rbIygZeRIziKq0v+Y
4PafdW6zRyPWACPRBzU2Eyq71QYjQHJ1ErDT+jmvvTNRhsHX29AAImIJaRR9dyL0
SGVGuW2TWg1+n2HzyVgwSxqe5Uc5hCUOVKiDKF9cdpluMStB/43IqeBkWtsjcgcy
LeqL9LW2pqIZO7Xc0jl/uVBDjgYlwLcsFXnY67eypBeyTKM8Q61JlEl+okCfQe7W
H6X4IQoE77I3Bj1gA7OeILD04lerqE1SF2pXmlwqnjzb3/7iST69yT68878UWOfp
Xu2qGAtZG3PoQ0BjoF8EFh49
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:29 2025 by rpki-client