Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/IJ8rs8BaNUhjVpnmz_zC1v0KU68.roa
File:                     IJ8rs8BaNUhjVpnmz_zC1v0KU68.roa (raw, json)
Hash identifier:          2iYejNpCf8ocIqd6gytqK2YSHNJzT6uYevVN/Z8Bef8=
Subject key identifier:   20:9F:2B:B3:C0:5A:35:48:63:56:99:E6:CF:FC:C2:D6:FD:0A:53:AF
Certificate issuer:       /CN=c63300f1cf51e23f7d8e4da929f396d6a4e90ff8
Certificate serial:       BF648B
Authority key identifier: C6:33:00:F1:CF:51:E2:3F:7D:8E:4D:A9:29:F3:96:D6:A4:E9:0F:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xjMA8c9R4j99jk2pKfOW1qTpD_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/IJ8rs8BaNUhjVpnmz_zC1v0KU68.roa
Signing time:             Sat 01 Jan 2022 04:01:56 +0000
ROA not before:           Sat 01 Jan 2022 04:01:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        188.244.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12543115 (0xbf648b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c63300f1cf51e23f7d8e4da929f396d6a4e90ff8
        Validity
            Not Before: Jan  1 04:01:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=209f2bb3c05a3548635699e6cffcc2d6fd0a53af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fc:4e:ee:4b:be:10:f6:fb:fc:8c:46:c4:7a:
                    83:7d:40:f3:ce:a8:e8:86:0c:c3:45:8a:6d:33:ca:
                    99:9b:58:8c:96:5e:14:c1:34:c7:b4:c5:82:fb:54:
                    3b:21:55:c3:a4:a8:9a:16:80:20:a5:c3:5b:ff:38:
                    f7:56:a5:d6:02:51:09:e0:6a:29:eb:dd:c3:42:b1:
                    33:36:19:ee:74:12:dc:e6:fa:19:f7:38:6a:02:07:
                    14:95:8f:4c:56:7e:3d:d7:8a:64:cd:f8:e9:79:74:
                    49:64:46:3a:2f:38:cd:63:f9:5f:b9:93:36:f7:99:
                    4c:ba:1f:f6:26:5e:7c:c4:44:ca:6d:ba:6e:73:af:
                    8d:cb:62:5e:74:0d:c1:43:6d:d0:04:f3:fc:c2:68:
                    a7:11:d0:87:05:eb:16:9d:7c:3d:1c:b6:66:15:e8:
                    1f:48:19:99:a2:d4:5c:87:c7:54:65:35:3c:79:ea:
                    6a:32:fa:62:52:a0:81:37:8b:9a:d2:6e:3d:55:4e:
                    33:03:55:3c:cf:e2:b9:e8:3b:59:80:0f:bf:76:2b:
                    af:31:46:91:cf:fd:74:aa:0a:da:5f:ce:e9:f3:78:
                    b6:85:2c:40:25:fe:58:c7:ec:14:94:fc:21:1b:55:
                    76:06:74:22:9f:bc:23:f2:d3:9e:fd:43:5b:cf:9b:
                    9f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9F:2B:B3:C0:5A:35:48:63:56:99:E6:CF:FC:C2:D6:FD:0A:53:AF
            X509v3 Authority Key Identifier:
                keyid:C6:33:00:F1:CF:51:E2:3F:7D:8E:4D:A9:29:F3:96:D6:A4:E9:0F:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjMA8c9R4j99jk2pKfOW1qTpD_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/IJ8rs8BaNUhjVpnmz_zC1v0KU68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/xjMA8c9R4j99jk2pKfOW1qTpD_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.244.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:e9:24:b3:a1:ba:7d:cb:04:d2:19:10:94:16:70:47:b8:97:
         00:3a:cd:24:1a:72:23:9a:ba:72:44:e9:f7:29:58:be:ae:82:
         52:2a:96:fb:f6:e2:2a:ff:85:67:47:e5:a9:66:bb:a0:a5:39:
         b7:a4:c1:a9:1b:1c:6b:24:9c:99:41:99:df:b9:98:25:60:e7:
         ba:75:b4:5f:2a:9b:bd:11:42:a6:df:43:4b:9e:68:29:3c:49:
         92:9b:f2:27:49:5b:19:08:26:0e:d5:21:8e:ab:b0:c4:82:30:
         9c:a1:24:f5:02:73:2c:4e:22:c3:94:1c:89:c6:83:b4:9b:3f:
         9c:d6:b9:b4:d7:51:3f:3f:d9:35:09:25:0a:77:d5:bc:8f:ae:
         1c:55:ce:a7:19:f1:73:ea:b6:3e:56:9a:44:06:f4:5f:35:4a:
         66:76:08:dd:f2:93:34:e0:32:25:c3:61:df:24:04:2f:46:3f:
         51:4d:c7:a0:93:9f:a6:e8:0a:e5:f8:7a:c1:d4:79:e1:60:6a:
         3a:95:eb:7d:75:9b:d4:8a:13:27:6b:f6:de:dd:48:d1:96:a4:
         94:a3:6f:14:41:7f:c5:b5:60:b9:ad:6d:5e:e3:d4:3e:ee:3f:
         ed:18:1c:e3:d5:d8:99:df:39:3e:fd:aa:30:eb:ba:dd:93:88:
         e9:f1:0b:84
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAL9kizANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NjMzMDBmMWNmNTFlMjNmN2Q4ZTRkYTkyOWYzOTZkNmE0ZTkwZmY4MB4XDTIyMDEw
MTA0MDE1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjA5ZjJiYjNjMDVh
MzU0ODYzNTY5OWU2Y2ZmY2MyZDZmZDBhNTNhZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK/8Tu5LvhD2+/yMRsR6g31A886o6IYMw0WKbTPKmZtYjJZe
FME0x7TFgvtUOyFVw6SomhaAIKXDW/8491al1gJRCeBqKevdw0KxMzYZ7nQS3Ob6
Gfc4agIHFJWPTFZ+PdeKZM346Xl0SWRGOi84zWP5X7mTNveZTLof9iZefMREym26
bnOvjctiXnQNwUNt0ATz/MJopxHQhwXrFp18PRy2ZhXoH0gZmaLUXIfHVGU1PHnq
ajL6YlKggTeLmtJuPVVOMwNVPM/iueg7WYAPv3YrrzFGkc/9dKoK2l/O6fN4toUs
QCX+WMfsFJT8IRtVdgZ0Ip+8I/LTnv1DW8+bnw8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQgnyuzwFo1SGNWmebP/MLW/QpTrzAfBgNVHSMEGDAWgBTGMwDxz1HiP32O
Takp85bWpOkP+DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hqTUE4YzlSNGo5OWprMnBLZk9XMXFUcERfZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2IvYTNiNWEwLTg5ZGEtNGZmOC1iMGM4LWJjMmFiMjg0MjQ4MS8x
L0lKOHJzOEJhTlVoalZwbm16X3pDMXYwS1U2OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Iv
YTNiNWEwLTg5ZGEtNGZmOC1iMGM4LWJjMmFiMjg0MjQ4MS8xL3hqTUE4YzlSNGo5
OWprMnBLZk9XMXFUcERfZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALz0fTANBgkqhkiG9w0BAQsFAAOC
AQEAxekks6G6fcsE0hkQlBZwR7iXADrNJBpyI5q6ckTp9ylYvq6CUiqW+/biKv+F
Z0flqWa7oKU5t6TBqRscayScmUGZ37mYJWDnunW0XyqbvRFCpt9DS55oKTxJkpvy
J0lbGQgmDtUhjquwxIIwnKEk9QJzLE4iw5QcicaDtJs/nNa5tNdRPz/ZNQklCnfV
vI+uHFXOpxnxc+q2PlaaRAb0XzVKZnYI3fKTNOAyJcNh3yQEL0Y/UU3HoJOfpugK
5fh6wdR54WBqOpXrfXWb1IoTJ2v23t1I0ZaklKNvFEF/xbVgua1tXuPUPu4/7Rgc
49XYmd85Pv2qMOu63ZOI6fELhA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:09 2024 by rpki-client on console-fra.rpki-client.org