Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/sA5Xbgf5BGEjR-kO6uVhLbR4CCQ.roa
File:                     sA5Xbgf5BGEjR-kO6uVhLbR4CCQ.roa (raw, json)
Hash identifier:          lhjGNHYWnfFvkNUNpGgooqUwzoi4zVYWdVMc3qSsYJU=
Subject key identifier:   B0:0E:57:6E:07:F9:04:61:23:47:E9:0E:EA:E5:61:2D:B4:78:08:24
Certificate issuer:       /CN=6b4b5e69148a3310c34871324bc56fe84b891dff
Certificate serial:       447867
Authority key identifier: 6B:4B:5E:69:14:8A:33:10:C3:48:71:32:4B:C5:6F:E8:4B:89:1D:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0teaRSKMxDDSHEyS8Vv6EuJHf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/sA5Xbgf5BGEjR-kO6uVhLbR4CCQ.roa
Signing time:             Sat 01 Jan 2022 03:01:39 +0000
ROA not before:           Sat 01 Jan 2022 03:01:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31732
IP address blocks:        212.23.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4487271 (0x447867)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4b5e69148a3310c34871324bc56fe84b891dff
        Validity
            Not Before: Jan  1 03:01:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b00e576e07f904612347e90eeae5612db4780824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bb:0a:f4:cc:a6:0a:f9:30:5f:d0:e6:b6:b5:
                    3b:99:6e:62:8b:a8:26:43:5a:b5:b0:c7:01:45:91:
                    88:52:e6:a7:a3:29:56:e9:61:4e:80:6b:cc:1b:54:
                    3e:b9:80:eb:fc:49:55:05:9a:30:f9:f0:d0:ba:b8:
                    f2:a9:97:9f:9f:1e:7c:e3:f5:92:c3:4b:76:07:40:
                    08:6d:cc:06:9b:77:05:2f:c0:6b:25:ec:65:9b:c8:
                    c4:59:41:c3:12:f1:5b:d9:7b:9b:f6:30:65:11:7c:
                    13:74:36:a4:9e:47:a9:29:b8:7c:e3:a1:bc:7b:62:
                    ab:c4:26:9d:80:d7:52:2f:94:39:d2:b7:88:bf:f9:
                    ee:a7:22:3d:3d:34:ec:7a:04:cf:1c:f5:d7:c3:e7:
                    3d:5b:d7:d9:ff:5b:9f:73:5a:26:ad:1b:f1:35:56:
                    c9:80:c2:1a:de:d3:96:ff:c4:c7:dd:74:0d:94:cf:
                    ec:bf:38:ba:f6:25:79:37:75:c5:de:87:c3:48:33:
                    a6:65:4c:f3:81:b4:d5:c0:c2:c3:9b:41:0e:3a:af:
                    c7:59:60:1e:d6:5d:c9:60:ab:04:fd:d7:e9:41:4b:
                    47:3e:c7:10:f2:07:dd:ba:2a:46:59:6e:82:2b:0f:
                    52:d7:bd:23:17:8d:a5:ca:97:3f:af:86:62:2f:4a:
                    9a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0E:57:6E:07:F9:04:61:23:47:E9:0E:EA:E5:61:2D:B4:78:08:24
            X509v3 Authority Key Identifier:
                keyid:6B:4B:5E:69:14:8A:33:10:C3:48:71:32:4B:C5:6F:E8:4B:89:1D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0teaRSKMxDDSHEyS8Vv6EuJHf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/sA5Xbgf5BGEjR-kO6uVhLbR4CCQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/a0teaRSKMxDDSHEyS8Vv6EuJHf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.23.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:d2:d5:31:9e:c2:f2:cb:a1:6e:b3:a1:05:8f:9e:64:53:af:
         f5:ed:80:8e:2c:9e:17:97:98:23:df:16:bd:a2:a6:17:ef:68:
         7d:94:af:0b:38:97:ff:dd:d4:83:01:f2:02:12:d1:1b:35:4f:
         b0:13:3e:5a:61:cd:78:fd:53:d5:86:b4:84:3f:68:c2:57:27:
         aa:14:d5:db:24:61:c5:65:ed:ab:31:fb:c2:a4:23:14:06:6a:
         11:7c:83:d2:0f:0f:ab:ec:f0:64:e1:47:65:61:e2:a0:66:0e:
         0c:d3:c7:50:24:3a:3a:22:e9:0d:a4:55:c6:21:00:08:ad:f0:
         7f:68:79:00:7d:a2:07:5f:26:db:6f:bd:58:15:cf:35:44:31:
         3e:4f:47:8e:62:7b:3a:54:22:e8:f0:69:5a:5b:d9:3b:61:fd:
         22:49:56:c3:c5:84:f3:9c:91:64:57:f2:92:ce:6b:bc:b3:55:
         48:73:10:55:7c:83:b0:72:50:3b:0a:a7:5c:4d:39:f1:3e:33:
         7d:1e:ef:6a:7b:17:04:f0:67:6b:94:24:70:92:bc:15:5e:ca:
         ba:b2:77:7d:94:df:59:a8:de:32:43:ba:6b:63:68:67:3c:8d:
         13:66:38:08:d7:1b:7c:b4:72:88:1c:7e:97:5c:3d:96:a2:96:
         20:97:3b:72
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDRHhnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZi
NGI1ZTY5MTQ4YTMzMTBjMzQ4NzEzMjRiYzU2ZmU4NGI4OTFkZmYwHhcNMjIwMTAx
MDMwMTM5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiMDBlNTc2ZTA3Zjkw
NDYxMjM0N2U5MGVlYWU1NjEyZGI0NzgwODI0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl7sK9MymCvkwX9DmtrU7mW5ii6gmQ1q1sMcBRZGIUuanoylW
6WFOgGvMG1Q+uYDr/ElVBZow+fDQurjyqZefnx584/WSw0t2B0AIbcwGm3cFL8Br
Jexlm8jEWUHDEvFb2Xub9jBlEXwTdDaknkepKbh846G8e2KrxCadgNdSL5Q50reI
v/nupyI9PTTsegTPHPXXw+c9W9fZ/1ufc1omrRvxNVbJgMIa3tOW/8TH3XQNlM/s
vzi69iV5N3XF3ofDSDOmZUzzgbTVwMLDm0EOOq/HWWAe1l3JYKsE/dfpQUtHPscQ
8gfduipGWW6CKw9S170jF42lypc/r4ZiL0qa1QIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFLAOV24H+QRhI0fpDurlYS20eAgkMB8GA1UdIwQYMBaAFGtLXmkUijMQw0hx
MkvFb+hLiR3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
YTB0ZWFSU0tNeEREU0hFeVM4VnY2RXVKSGY4LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8wMy8zNmM3YjktYmUyOS00NmM3LTgzNGMtM2Q4ZjM5MDIyZTQ0LzEv
c0E1WGJnZjVCR0VqUi1rTzZ1VmhMYlI0Q0NRLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8z
NmM3YjktYmUyOS00NmM3LTgzNGMtM2Q4ZjM5MDIyZTQ0LzEvYTB0ZWFSU0tNeERE
U0hFeVM4VnY2RXVKSGY4LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BfWMA0GCSqGSIb3DQEBCwUAA4IB
AQBF0tUxnsLyy6Fus6EFj55kU6/17YCOLJ4Xl5gj3xa9oqYX72h9lK8LOJf/3dSD
AfICEtEbNU+wEz5aYc14/VPVhrSEP2jCVyeqFNXbJGHFZe2rMfvCpCMUBmoRfIPS
Dw+r7PBk4UdlYeKgZg4M08dQJDo6IukNpFXGIQAIrfB/aHkAfaIHXybbb71YFc81
RDE+T0eOYns6VCLo8GlaW9k7Yf0iSVbDxYTznJFkV/KSzmu8s1VIcxBVfIOwclA7
CqdcTTnxPjN9Hu9qexcE8GdrlCRwkrwVXsq6snd9lN9ZqN4yQ7prY2hnPI0TZjgI
1xt8tHKIHH6XXD2WopYglzty
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:53 2024 by rpki-client on console-fra.rpki-client.org