Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea1380-bd6a-46d3-981e-9f7043759acc/1/gykEdXIqoOMlH-B3nogpHN8gG2U.roa
File:                     gykEdXIqoOMlH-B3nogpHN8gG2U.roa (raw, json)
Hash identifier:          6N2kqm/1V6emZhsQgeUPGlTWEPpvDB7ZXh3/Yka8Xxg=
Subject key identifier:   83:29:04:75:72:2A:A0:E3:25:1F:E0:77:9E:88:29:1C:DF:20:1B:65
Certificate issuer:       /CN=82e1aba6e8947f9238abccbeea09ba38a59d6f5c
Certificate serial:       018C3845
Authority key identifier: 82:E1:AB:A6:E8:94:7F:92:38:AB:CC:BE:EA:09:BA:38:A5:9D:6F:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/guGrpuiUf5I4q8y-6gm6OKWdb1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/ea1380-bd6a-46d3-981e-9f7043759acc/1/gykEdXIqoOMlH-B3nogpHN8gG2U.roa
Signing time:             Thu 12 May 2022 09:04:07 +0000
ROA not before:           Thu 12 May 2022 09:04:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39855
IP address blocks:        178.212.141.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25966661 (0x18c3845)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e1aba6e8947f9238abccbeea09ba38a59d6f5c
        Validity
            Not Before: May 12 09:04:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=83290475722aa0e3251fe0779e88291cdf201b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0d:cf:0e:94:45:bf:d5:d0:78:d4:fc:30:1c:
                    4e:a8:95:4f:84:82:32:b2:af:ee:95:1f:d6:87:9d:
                    ec:86:16:63:3a:7e:0f:9a:94:d9:b5:42:01:e8:c0:
                    b9:b7:95:ed:93:87:97:cb:eb:8a:32:1e:66:5a:a9:
                    6f:35:7a:f3:dc:62:75:bf:87:25:24:56:ea:c7:48:
                    ca:6e:4b:3b:7b:ab:6d:59:e4:aa:e5:d7:e0:71:11:
                    ec:aa:62:01:4e:5d:14:2f:4f:ed:e1:7c:0e:19:e1:
                    50:e2:94:03:43:e4:29:85:73:a4:7b:42:53:40:92:
                    fb:05:53:d9:b4:21:9f:be:51:9a:43:7d:e5:45:4e:
                    85:c7:e5:d4:cf:7a:a0:14:11:41:05:87:aa:89:16:
                    19:5d:f9:cd:56:c2:5d:4c:e7:20:e5:05:bf:80:75:
                    e8:ed:22:d9:a4:61:9b:f2:02:ba:1f:06:76:6b:08:
                    e0:46:7b:29:2c:45:40:22:ea:a4:11:a4:2f:29:0d:
                    96:46:00:d4:93:85:1a:a3:31:a8:dc:5e:85:88:ff:
                    12:65:c2:f5:f7:29:08:49:2a:f3:92:a8:1f:ba:96:
                    fb:d0:6d:12:e0:b0:f8:89:f9:0d:a9:87:28:2f:ea:
                    20:a6:7c:d2:b8:eb:d0:3a:63:87:20:e0:48:2a:1b:
                    df:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:29:04:75:72:2A:A0:E3:25:1F:E0:77:9E:88:29:1C:DF:20:1B:65
            X509v3 Authority Key Identifier:
                keyid:82:E1:AB:A6:E8:94:7F:92:38:AB:CC:BE:EA:09:BA:38:A5:9D:6F:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guGrpuiUf5I4q8y-6gm6OKWdb1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea1380-bd6a-46d3-981e-9f7043759acc/1/gykEdXIqoOMlH-B3nogpHN8gG2U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea1380-bd6a-46d3-981e-9f7043759acc/1/guGrpuiUf5I4q8y-6gm6OKWdb1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:12:50:9b:e0:b6:f7:22:8f:54:90:8b:6a:ee:2e:bd:34:ec:
         51:b6:82:86:e0:5e:01:c6:b7:c8:67:2e:a6:82:43:19:d3:65:
         59:24:c6:b6:0e:24:79:9a:c1:84:be:75:eb:6d:87:85:a3:ce:
         0b:ac:80:e5:4a:22:20:8a:22:03:45:90:41:90:da:f9:66:80:
         57:4d:00:8f:0a:bb:5d:09:2a:3b:1c:bd:af:c6:ec:eb:70:3c:
         8f:e3:00:2c:dc:d2:77:fd:9e:82:16:9e:4e:e9:0c:a6:e6:71:
         76:03:51:ad:8e:5e:44:c6:89:bc:41:59:c4:59:70:08:d4:7f:
         37:c2:bc:d3:a9:72:04:30:9d:9a:09:57:20:5c:fc:89:c1:aa:
         21:2e:78:17:b4:66:aa:aa:8e:fc:e9:68:1d:d8:ff:df:e6:7a:
         5a:9d:86:e6:66:89:34:bf:ad:31:1e:ef:0c:55:20:78:51:38:
         0b:00:3e:0a:29:6f:9d:7c:c5:99:69:6d:b8:8e:de:b2:70:65:
         eb:66:1b:c4:0f:59:62:64:f7:88:e6:62:e8:7c:a2:29:26:40:
         ef:6d:e9:2c:9c:0c:2d:2b:6f:ea:74:07:2f:12:ed:0a:c4:66:
         59:db:14:a4:0e:97:ff:bf:94:f5:d8:0f:81:64:53:b9:5c:c3:
         8c:28:5d:76
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAYw4RTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MmUxYWJhNmU4OTQ3ZjkyMzhhYmNjYmVlYTA5YmEzOGE1OWQ2ZjVjMB4XDTIyMDUx
MjA5MDQwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODMyOTA0NzU3MjJh
YTBlMzI1MWZlMDc3OWU4ODI5MWNkZjIwMWI2NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKENzw6URb/V0HjU/DAcTqiVT4SCMrKv7pUf1oed7IYWYzp+
D5qU2bVCAejAubeV7ZOHl8vrijIeZlqpbzV689xidb+HJSRW6sdIym5LO3urbVnk
quXX4HER7KpiAU5dFC9P7eF8DhnhUOKUA0PkKYVzpHtCU0CS+wVT2bQhn75RmkN9
5UVOhcfl1M96oBQRQQWHqokWGV35zVbCXUznIOUFv4B16O0i2aRhm/ICuh8GdmsI
4EZ7KSxFQCLqpBGkLykNlkYA1JOFGqMxqNxehYj/EmXC9fcpCEkq85KoH7qW+9Bt
EuCw+In5DamHKC/qIKZ80rjr0DpjhyDgSCob3/0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSDKQR1ciqg4yUf4HeeiCkc3yAbZTAfBgNVHSMEGDAWgBSC4aum6JR/kjir
zL7qCbo4pZ1vXDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d1R3JwdWlVZjVJNHE4eS02Z202T0tXZGIxdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjkvZWExMzgwLWJkNmEtNDZkMy05ODFlLTlmNzA0Mzc1OWFjYy8x
L2d5a0VkWElxb09NbEgtQjNub2dwSE44Z0cyVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkv
ZWExMzgwLWJkNmEtNDZkMy05ODFlLTlmNzA0Mzc1OWFjYy8xL2d1R3JwdWlVZjVJ
NHE4eS02Z202T0tXZGIxdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALLUjTANBgkqhkiG9w0BAQsFAAOC
AQEAbBJQm+C29yKPVJCLau4uvTTsUbaChuBeAca3yGcupoJDGdNlWSTGtg4keZrB
hL51622HhaPOC6yA5UoiIIoiA0WQQZDa+WaAV00Ajwq7XQkqOxy9r8bs63A8j+MA
LNzSd/2eghaeTukMpuZxdgNRrY5eRMaJvEFZxFlwCNR/N8K806lyBDCdmglXIFz8
icGqIS54F7RmqqqO/OloHdj/3+Z6Wp2G5maJNL+tMR7vDFUgeFE4CwA+CilvnXzF
mWltuI7esnBl62YbxA9ZYmT3iOZi6HyiKSZA723pLJwMLStv6nQHLxLtCsRmWdsU
pA6X/7+U9dgPgWRTuVzDjChddg==
-----END CERTIFICATE-----
Generated at Wed May 14 11:49:25 2025 by rpki-client