Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/ysFLubMWWh_ZlhoH18jSBZaUATo.roa
File:                     ysFLubMWWh_ZlhoH18jSBZaUATo.roa (raw, json)
Hash identifier:          lKdYrRBs7XsZXNBIpxB0cRFc9ENFRkipUIZr/3XDgEk=
Subject key identifier:   CA:C1:4B:B9:B3:16:5A:1F:D9:96:1A:07:D7:C8:D2:05:96:94:01:3A
Certificate issuer:       /CN=006e643d0b67f4b333feacdc4616d4e4f3de32cd
Certificate serial:       0CDD7207
Authority key identifier: 00:6E:64:3D:0B:67:F4:B3:33:FE:AC:DC:46:16:D4:E4:F3:DE:32:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AG5kPQtn9LMz_qzcRhbU5PPeMs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/ysFLubMWWh_ZlhoH18jSBZaUATo.roa
Signing time:             Fri 06 May 2022 14:59:01 +0000
ROA not before:           Fri 06 May 2022 14:59:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204703
IP address blocks:        185.153.93.0/24 maxlen: 32
                          2a0c:f280::/29 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215839239 (0xcdd7207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006e643d0b67f4b333feacdc4616d4e4f3de32cd
        Validity
            Not Before: May  6 14:59:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cac14bb9b3165a1fd9961a07d7c8d2059694013a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:06:91:5d:c6:4e:a0:f2:e4:d5:44:04:82:85:
                    80:2b:fd:46:d9:a5:5b:0c:8a:05:19:6a:46:fd:96:
                    53:b8:8f:a1:c1:eb:7c:4c:10:de:a2:d2:5b:7c:3f:
                    20:78:57:78:95:15:e1:b5:d4:43:74:5f:b0:98:13:
                    ad:c9:46:4f:ab:eb:6c:e3:f0:24:ab:f6:04:a9:7b:
                    dc:08:1b:36:97:71:ea:c6:02:55:44:ea:77:e5:aa:
                    be:e0:f2:28:a0:42:77:f0:de:7c:e1:73:5c:44:1c:
                    83:f7:62:70:83:df:d0:0f:aa:5e:a5:87:50:01:14:
                    cd:c7:44:b2:a1:89:b5:11:d4:a7:2f:17:2c:c4:77:
                    7c:41:89:12:3c:da:fe:c0:7a:02:e2:95:e8:63:4f:
                    74:58:02:82:51:f5:d4:c4:3c:04:ee:5a:5e:84:93:
                    a5:e9:09:b6:91:b9:6c:27:92:aa:b1:c6:48:49:85:
                    62:94:03:96:f3:0f:a4:55:50:87:88:c1:7f:77:1d:
                    9e:cc:5b:d1:f7:8f:9c:72:c2:49:5c:f0:6d:17:e8:
                    0f:ae:b6:e7:60:91:5e:df:2d:79:fd:e1:26:fc:83:
                    54:c8:9e:fc:7f:d1:5c:b9:3e:81:df:c9:82:e2:94:
                    cf:47:db:d7:da:9d:7c:fa:f1:bc:ce:5d:c2:08:36:
                    31:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C1:4B:B9:B3:16:5A:1F:D9:96:1A:07:D7:C8:D2:05:96:94:01:3A
            X509v3 Authority Key Identifier:
                keyid:00:6E:64:3D:0B:67:F4:B3:33:FE:AC:DC:46:16:D4:E4:F3:DE:32:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AG5kPQtn9LMz_qzcRhbU5PPeMs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/ysFLubMWWh_ZlhoH18jSBZaUATo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/AG5kPQtn9LMz_qzcRhbU5PPeMs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.153.93.0/24
                IPv6:
                  2a0c:f280::/29

    Signature Algorithm: sha256WithRSAEncryption
         75:23:77:10:22:28:fb:c7:23:b1:2c:4f:c4:87:11:88:dd:6f:
         13:42:48:6b:15:09:aa:50:c0:60:fd:7b:6c:6f:aa:2d:e7:05:
         0f:13:2b:30:cf:69:8d:19:99:2e:1a:08:6e:df:79:bb:e7:7b:
         60:66:21:5c:a7:27:58:19:99:ee:75:70:c2:af:96:f7:d1:6c:
         55:00:c6:bc:b4:00:ab:27:e7:b4:41:78:f1:f1:32:57:09:8d:
         fe:e9:0b:d6:a6:7d:86:02:e3:86:49:bf:ec:3e:7f:e2:9b:95:
         41:00:94:6e:87:68:cf:4a:c1:aa:b8:2f:e4:3f:d3:80:3b:e5:
         d8:a2:be:61:a6:a0:88:4d:08:d1:9c:5b:19:87:3e:81:74:34:
         c5:2d:7a:8c:b7:79:c1:65:1f:14:0b:39:a9:af:5b:21:fc:b9:
         c4:fb:39:19:27:e9:48:dd:0d:f3:5e:53:b6:86:8c:cb:8c:08:
         b6:2c:d5:fe:8d:da:25:13:ac:6d:dc:fe:88:c7:5b:d5:c5:41:
         24:44:9d:d1:9b:f0:ab:b8:3b:cc:01:d1:b8:81:37:84:9a:ce:
         03:f7:0b:b0:9f:c4:80:08:25:c6:d0:38:7e:96:99:1e:d8:c8:
         92:18:60:92:f1:af:f6:28:a6:23:05:b7:0a:8b:fb:81:37:88:
         40:d7:6a:31
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEDN1yBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MDZlNjQzZDBiNjdmNGIzMzNmZWFjZGM0NjE2ZDRlNGYzZGUzMmNkMB4XDTIyMDUw
NjE0NTkwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2FjMTRiYjliMzE2
NWExZmQ5OTYxYTA3ZDdjOGQyMDU5Njk0MDEzYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOIGkV3GTqDy5NVEBIKFgCv9RtmlWwyKBRlqRv2WU7iPocHr
fEwQ3qLSW3w/IHhXeJUV4bXUQ3RfsJgTrclGT6vrbOPwJKv2BKl73AgbNpdx6sYC
VUTqd+WqvuDyKKBCd/DefOFzXEQcg/dicIPf0A+qXqWHUAEUzcdEsqGJtRHUpy8X
LMR3fEGJEjza/sB6AuKV6GNPdFgCglH11MQ8BO5aXoSTpekJtpG5bCeSqrHGSEmF
YpQDlvMPpFVQh4jBf3cdnsxb0fePnHLCSVzwbRfoD66252CRXt8tef3hJvyDVMie
/H/RXLk+gd/JguKUz0fb19qdfPrxvM5dwgg2MUUCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTKwUu5sxZaH9mWGgfXyNIFlpQBOjAfBgNVHSMEGDAWgBQAbmQ9C2f0szP+
rNxGFtTk894yzTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0FHNWtQUXRuOUxNel9xemNSaGJVNVBQZU1zMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjAvYjdhYTdiLTk3YzItNGJkOC04Y2FhLWRjY2UyOGU5MzQ2YS8x
L3lzRkx1Yk1XV2hfWmxob0gxOGpTQlphVUFUby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAv
YjdhYTdiLTk3YzItNGJkOC04Y2FhLWRjY2UyOGU5MzQ2YS8xL0FHNWtQUXRuOUxN
el9xemNSaGJVNVBQZU1zMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEALmZXTANBAIAAjAHAwUDKgzygDAN
BgkqhkiG9w0BAQsFAAOCAQEAdSN3ECIo+8cjsSxPxIcRiN1vE0JIaxUJqlDAYP17
bG+qLecFDxMrMM9pjRmZLhoIbt95u+d7YGYhXKcnWBmZ7nVwwq+W99FsVQDGvLQA
qyfntEF48fEyVwmN/ukL1qZ9hgLjhkm/7D5/4puVQQCUbodoz0rBqrgv5D/TgDvl
2KK+YaagiE0I0ZxbGYc+gXQ0xS16jLd5wWUfFAs5qa9bIfy5xPs5GSfpSN0N815T
toaMy4wItizV/o3aJROsbdz+iMdb1cVBJESd0Zvwq7g7zAHRuIE3hJrOA/cLsJ/E
gAglxtA4fpaZHtjIkhhgkvGv9iimIwW3Cov7gTeIQNdqMQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:10 2024 by rpki-client on console-fra.rpki-client.org