Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/jTggmcA7NMM2TsJuA3fVpEBEBUQ.roa
File:                     jTggmcA7NMM2TsJuA3fVpEBEBUQ.roa (raw, json)
Hash identifier:          xiqy96MHSJ3+aC1vVu8l/B4N0EU9EgIqqO2tDLBDwrs=
Subject key identifier:   8D:38:20:99:C0:3B:34:C3:36:4E:C2:6E:03:77:D5:A4:40:44:05:44
Certificate issuer:       /CN=33980d41e32a5616382e906840264945af02d67e
Certificate serial:       DF8D8B
Authority key identifier: 33:98:0D:41:E3:2A:56:16:38:2E:90:68:40:26:49:45:AF:02:D6:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M5gNQeMqVhY4LpBoQCZJRa8C1n4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/jTggmcA7NMM2TsJuA3fVpEBEBUQ.roa
Signing time:             Sat 01 Jan 2022 04:55:01 +0000
ROA not before:           Sat 01 Jan 2022 04:55:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211193
IP address blocks:        94.103.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14650763 (0xdf8d8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33980d41e32a5616382e906840264945af02d67e
        Validity
            Not Before: Jan  1 04:55:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8d382099c03b34c3364ec26e0377d5a440440544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:96:7c:15:9e:15:65:aa:74:1b:24:29:20:bd:
                    21:34:1b:b6:05:cf:89:5f:81:ec:2e:52:65:80:10:
                    a2:46:69:59:92:e5:ec:10:76:79:8e:86:ba:9d:f5:
                    6d:eb:75:17:fa:88:7a:c9:c3:f6:41:25:64:aa:95:
                    2e:8a:e2:19:cc:f0:cc:9b:65:c6:2e:f0:d8:09:44:
                    ae:7c:27:ee:31:ca:09:ba:94:ba:6a:3d:5e:62:d8:
                    64:20:02:29:f8:e6:bb:3d:43:36:2b:74:c6:99:6c:
                    1a:96:94:d8:29:ec:35:eb:ba:c8:cc:83:d4:19:28:
                    af:e7:a4:67:a4:c6:b1:14:4c:00:b7:9d:63:b7:7b:
                    27:dd:a2:b2:57:b5:ae:5b:06:70:86:83:77:eb:9a:
                    21:59:d1:7f:a2:7a:ea:d4:15:39:58:a9:61:b1:d9:
                    bc:5e:d1:e5:11:45:a8:0f:96:e9:c0:a7:1c:20:f8:
                    17:73:71:60:35:9e:6c:9b:f7:51:29:20:29:66:1d:
                    41:2b:6e:30:4d:3b:c6:d0:9c:ed:df:f2:80:84:50:
                    88:7c:5e:f0:59:51:08:82:60:bb:51:e2:e2:ac:23:
                    a3:57:c6:de:26:0d:9d:89:98:06:61:10:4f:88:ab:
                    d6:c7:c7:07:4f:c5:75:8b:13:89:5e:9a:60:d2:98:
                    c9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:38:20:99:C0:3B:34:C3:36:4E:C2:6E:03:77:D5:A4:40:44:05:44
            X509v3 Authority Key Identifier:
                keyid:33:98:0D:41:E3:2A:56:16:38:2E:90:68:40:26:49:45:AF:02:D6:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5gNQeMqVhY4LpBoQCZJRa8C1n4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/jTggmcA7NMM2TsJuA3fVpEBEBUQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/M5gNQeMqVhY4LpBoQCZJRa8C1n4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:6c:30:11:ae:a3:c8:38:f1:8b:f9:58:fc:21:8f:56:5a:c0:
         dc:1d:b6:39:7e:3f:77:7a:b8:38:c9:99:5f:17:94:80:28:e3:
         d3:b9:9f:35:23:05:4d:43:70:b4:19:b7:ea:00:32:0d:b2:21:
         49:51:dd:1f:0d:13:cf:dc:99:32:de:2c:0a:a8:f0:35:02:3c:
         af:1b:33:b3:b5:cf:dd:f9:08:1b:3e:a1:f1:45:64:14:ff:11:
         c9:a8:5e:c7:d6:e6:05:bf:bf:d9:c1:b5:1f:66:ef:12:21:32:
         ab:77:c5:48:2f:26:94:00:df:0a:2f:46:3b:ed:82:dd:41:f6:
         ed:62:d0:17:87:34:e5:96:9b:c2:d1:ef:fe:19:90:bf:f0:06:
         31:3e:37:f3:f6:60:89:b1:13:d9:ac:ce:f6:e8:92:d4:d1:dc:
         d6:ee:be:bd:3d:6e:0a:a2:5e:e9:7e:3d:9d:62:85:ec:62:a9:
         32:91:67:b8:df:57:e8:1d:e5:5d:45:0c:99:7f:f9:76:7b:b2:
         b8:59:93:d6:0a:62:b1:a3:b9:45:8b:e2:9e:a2:f3:a9:3c:58:
         fa:55:69:e7:e6:ad:ef:d3:ef:aa:30:7e:74:67:74:a0:04:64:
         90:b3:f6:a9:59:f7:45:fb:71:62:85:34:0a:a9:65:f8:a4:7f:
         0a:ee:dc:6e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAN+NizANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
Mzk4MGQ0MWUzMmE1NjE2MzgyZTkwNjg0MDI2NDk0NWFmMDJkNjdlMB4XDTIyMDEw
MTA0NTUwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGQzODIwOTljMDNi
MzRjMzM2NGVjMjZlMDM3N2Q1YTQ0MDQ0MDU0NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIWWfBWeFWWqdBskKSC9ITQbtgXPiV+B7C5SZYAQokZpWZLl
7BB2eY6Gup31bet1F/qIesnD9kElZKqVLoriGczwzJtlxi7w2AlErnwn7jHKCbqU
umo9XmLYZCACKfjmuz1DNit0xplsGpaU2CnsNeu6yMyD1Bkor+ekZ6TGsRRMALed
Y7d7J92isle1rlsGcIaDd+uaIVnRf6J66tQVOVipYbHZvF7R5RFFqA+W6cCnHCD4
F3NxYDWebJv3USkgKWYdQStuME07xtCc7d/ygIRQiHxe8FlRCIJgu1Hi4qwjo1fG
3iYNnYmYBmEQT4ir1sfHB0/FdYsTiV6aYNKYyT0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSNOCCZwDs0wzZOwm4Dd9WkQEQFRDAfBgNVHSMEGDAWgBQzmA1B4ypWFjgu
kGhAJklFrwLWfjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L001Z05RZU1xVmhZNExwQm9RQ1pKUmE4QzFuNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjAvNWEzMzc0LTIyMGQtNGRjNi04OTAwLTJhM2ZmYjdhMjE4YS8x
L2pUZ2dtY0E3Tk1NMlRzSnVBM2ZWcEVCRUJVUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAv
NWEzMzc0LTIyMGQtNGRjNi04OTAwLTJhM2ZmYjdhMjE4YS8xL001Z05RZU1xVmhZ
NExwQm9RQ1pKUmE4QzFuNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF5nsTANBgkqhkiG9w0BAQsFAAOC
AQEAX2wwEa6jyDjxi/lY/CGPVlrA3B22OX4/d3q4OMmZXxeUgCjj07mfNSMFTUNw
tBm36gAyDbIhSVHdHw0Tz9yZMt4sCqjwNQI8rxszs7XP3fkIGz6h8UVkFP8Ryahe
x9bmBb+/2cG1H2bvEiEyq3fFSC8mlADfCi9GO+2C3UH27WLQF4c05ZabwtHv/hmQ
v/AGMT438/ZgibET2azO9uiS1NHc1u6+vT1uCqJe6X49nWKF7GKpMpFnuN9X6B3l
XUUMmX/5dnuyuFmT1gpisaO5RYvinqLzqTxY+lVp5+at79PvqjB+dGd0oARkkLP2
qVn3RftxYoU0Cqll+KR/Cu7cbg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:07 2024 by rpki-client on console-fra.rpki-client.org