Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d40dc2-5736-4444-8d56-d41bbd1d6fe8/1/Vhp5mTK_u920QlBq0MfzfdrmsUQ.roa
File:                     Vhp5mTK_u920QlBq0MfzfdrmsUQ.roa (raw, json)
Hash identifier:          sXV2BrUO8QCVlkUzzpdybSRsp7lTlpiyKQK26QotIAM=
Subject key identifier:   56:1A:79:99:32:BF:BB:DD:B4:42:50:6A:D0:C7:F3:7D:DA:E6:B1:44
Certificate issuer:       /CN=6c9a34c521ea6073e09c204934f7ce0ea086ba1b
Certificate serial:       E5BEA4
Authority key identifier: 6C:9A:34:C5:21:EA:60:73:E0:9C:20:49:34:F7:CE:0E:A0:86:BA:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bJo0xSHqYHPgnCBJNPfODqCGuhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/d40dc2-5736-4444-8d56-d41bbd1d6fe8/1/Vhp5mTK_u920QlBq0MfzfdrmsUQ.roa
Signing time:             Fri 18 Feb 2022 20:46:31 +0000
ROA not before:           Fri 18 Feb 2022 20:46:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48031
IP address blocks:        109.205.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15056548 (0xe5bea4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c9a34c521ea6073e09c204934f7ce0ea086ba1b
        Validity
            Not Before: Feb 18 20:46:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=561a799932bfbbddb442506ad0c7f37ddae6b144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3e:af:1d:8b:2b:ed:3f:f4:9e:40:43:6a:fc:
                    11:d2:9d:4b:b3:a1:5e:cc:c7:d9:88:84:d7:fd:6f:
                    1b:91:c3:71:74:85:32:53:84:04:89:cd:00:58:09:
                    54:5f:fd:bb:14:84:a7:00:6d:d2:3b:6f:6d:30:17:
                    b4:d0:d1:38:13:8a:bc:97:3f:dc:23:22:dc:9a:5d:
                    ab:f6:c1:69:64:44:42:91:43:be:5e:34:44:ae:67:
                    1b:a3:72:f5:83:0e:4e:ff:d2:28:ec:79:53:b3:9d:
                    eb:8c:30:4a:1f:1b:b6:db:f2:ea:88:fe:fd:4a:3b:
                    03:03:17:b4:be:10:30:87:e6:5e:ca:52:f2:84:b9:
                    b0:e1:a5:ba:6a:a7:71:68:7a:07:87:93:13:e5:8e:
                    a3:e9:2e:21:54:a0:22:b8:e8:b6:11:b1:ab:b5:07:
                    66:4b:3c:38:d4:d6:05:a7:e2:02:55:6c:46:94:38:
                    48:dc:b1:74:53:6b:4b:3c:26:88:24:99:ca:d6:9e:
                    70:8f:aa:af:6a:3f:da:fe:e6:54:4b:17:f0:fc:97:
                    51:99:03:55:d5:67:12:8c:3f:be:da:70:62:ea:1f:
                    c3:0d:a1:f5:2f:14:4c:41:5c:6d:6c:f7:cf:b4:99:
                    80:02:10:bd:e0:5e:a8:8e:a3:e6:57:74:39:50:b6:
                    08:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1A:79:99:32:BF:BB:DD:B4:42:50:6A:D0:C7:F3:7D:DA:E6:B1:44
            X509v3 Authority Key Identifier:
                keyid:6C:9A:34:C5:21:EA:60:73:E0:9C:20:49:34:F7:CE:0E:A0:86:BA:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJo0xSHqYHPgnCBJNPfODqCGuhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d40dc2-5736-4444-8d56-d41bbd1d6fe8/1/Vhp5mTK_u920QlBq0MfzfdrmsUQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d40dc2-5736-4444-8d56-d41bbd1d6fe8/1/bJo0xSHqYHPgnCBJNPfODqCGuhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.205.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:7d:90:62:2d:51:43:c2:a2:c1:b1:b4:64:6c:85:db:b4:c7:
         3d:8a:d3:9e:82:15:c0:8e:f2:12:78:a9:36:36:b9:55:04:af:
         0e:50:e2:29:72:5d:5b:33:47:d2:77:e0:3a:25:24:c8:db:ea:
         0f:fe:07:fb:d8:8f:4e:78:01:a7:11:75:c9:39:f2:3d:4a:23:
         ad:11:26:dd:38:97:1a:80:e9:0a:95:68:be:35:4d:d7:4e:24:
         28:27:92:e2:3e:de:1a:db:45:ce:b1:e9:af:39:8d:12:66:d6:
         c0:d8:33:d3:fd:8b:8a:e6:e0:e1:4b:0c:ef:21:2f:d8:c9:76:
         24:9f:da:e0:45:94:d5:56:34:77:85:56:4b:b0:d1:76:0a:e0:
         59:bc:2b:0f:ed:a9:71:04:1c:16:d4:56:7d:57:98:b7:8f:71:
         aa:d9:28:f7:60:0f:c4:94:00:08:ce:8c:b6:f0:9a:9b:06:57:
         49:23:5b:48:db:76:24:9d:99:3d:28:e5:77:62:9f:1a:77:01:
         c8:15:47:57:5e:28:69:3e:0c:c4:95:72:9f:79:0f:10:cb:18:
         d5:c8:87:93:ae:b6:2c:a5:9f:10:b6:44:e0:b4:50:40:43:10:
         15:a2:cf:63:60:f5:1f:ea:78:dd:e1:a0:02:74:51:90:73:53:
         0e:58:e7:7a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAOW+pDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzlhMzRjNTIxZWE2MDczZTA5YzIwNDkzNGY3Y2UwZWEwODZiYTFiMB4XDTIyMDIx
ODIwNDYzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTYxYTc5OTkzMmJm
YmJkZGI0NDI1MDZhZDBjN2YzN2RkYWU2YjE0NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANI+rx2LK+0/9J5AQ2r8EdKdS7OhXszH2YiE1/1vG5HDcXSF
MlOEBInNAFgJVF/9uxSEpwBt0jtvbTAXtNDROBOKvJc/3CMi3Jpdq/bBaWREQpFD
vl40RK5nG6Ny9YMOTv/SKOx5U7Od64wwSh8bttvy6oj+/Uo7AwMXtL4QMIfmXspS
8oS5sOGlumqncWh6B4eTE+WOo+kuIVSgIrjothGxq7UHZks8ONTWBafiAlVsRpQ4
SNyxdFNrSzwmiCSZytaecI+qr2o/2v7mVEsX8PyXUZkDVdVnEow/vtpwYuofww2h
9S8UTEFcbWz3z7SZgAIQveBeqI6j5ld0OVC2CF0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRWGnmZMr+73bRCUGrQx/N92uaxRDAfBgNVHSMEGDAWgBRsmjTFIepgc+Cc
IEk0984OoIa6GzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JKbzB4U0hxWUhQZ25DQkpOUGZPRHFDR3Vocy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjAvZDQwZGMyLTU3MzYtNDQ0NC04ZDU2LWQ0MWJiZDFkNmZlOC8x
L1ZocDVtVEtfdTkyMFFsQnEwTWZ6ZmRybXNVUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAv
ZDQwZGMyLTU3MzYtNDQ0NC04ZDU2LWQ0MWJiZDFkNmZlOC8xL2JKbzB4U0hxWUhQ
Z25DQkpOUGZPRHFDR3Vocy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG3NuDANBgkqhkiG9w0BAQsFAAOC
AQEAGH2QYi1RQ8KiwbG0ZGyF27THPYrTnoIVwI7yEnipNja5VQSvDlDiKXJdWzNH
0nfgOiUkyNvqD/4H+9iPTngBpxF1yTnyPUojrREm3TiXGoDpCpVovjVN104kKCeS
4j7eGttFzrHprzmNEmbWwNgz0/2Liubg4UsM7yEv2Ml2JJ/a4EWU1VY0d4VWS7DR
dgrgWbwrD+2pcQQcFtRWfVeYt49xqtko92APxJQACM6MtvCamwZXSSNbSNt2JJ2Z
PSjld2KfGncByBVHV14oaT4MxJVyn3kPEMsY1ciHk662LKWfELZE4LRQQEMQFaLP
Y2D1H+p43eGgAnRRkHNTDljneg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:11 2024 by rpki-client on console-fra.rpki-client.org