Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2e0c9a-66e1-4850-9abb-cc3efec187b9/1/6ffrNQi0BlslB0NCbskNJn4mTCg.roa
File:                     6ffrNQi0BlslB0NCbskNJn4mTCg.roa (raw, json)
Hash identifier:          gbpNjqrxZNlWIulE5CAbl2eT9/JNgbL2LN5x3Yt1WGQ=
Subject key identifier:   E9:F7:EB:35:08:B4:06:5B:25:07:43:42:6E:C9:0D:26:7E:26:4C:28
Certificate issuer:       /CN=40f16e506ae0ec6c41ef0437b855110474ba47dc
Certificate serial:       0186811B54D32E20205FD5EA77F9E473498F
Authority key identifier: 40:F1:6E:50:6A:E0:EC:6C:41:EF:04:37:B8:55:11:04:74:BA:47:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPFuUGrg7GxB7wQ3uFURBHS6R9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/2e0c9a-66e1-4850-9abb-cc3efec187b9/1/6ffrNQi0BlslB0NCbskNJn4mTCg.roa
Signing time:             Fri 24 Feb 2023 01:48:17 +0000
ROA not before:           Fri 24 Feb 2023 01:48:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        194.145.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:81:1b:54:d3:2e:20:20:5f:d5:ea:77:f9:e4:73:49:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f16e506ae0ec6c41ef0437b855110474ba47dc
        Validity
            Not Before: Feb 24 01:48:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e9f7eb3508b4065b250743426ec90d267e264c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2b:73:7f:10:a0:00:f1:2b:df:cc:fd:71:28:
                    f8:37:68:49:3a:a5:0d:ba:2b:7f:79:37:6f:ad:cd:
                    6e:58:77:92:ab:48:a4:71:88:98:b8:b2:8c:79:2f:
                    3f:82:53:6e:1b:56:33:08:0e:33:67:a2:97:f7:04:
                    d4:0a:cc:76:74:48:c0:99:cf:a9:b2:b1:60:40:78:
                    3e:1c:68:7f:d7:b3:98:fb:66:42:de:26:49:40:0f:
                    8e:af:ed:54:ef:43:8c:94:25:81:9c:c4:33:28:1c:
                    5b:62:f8:47:e1:35:47:2e:f6:d9:82:46:b0:72:da:
                    7a:96:45:52:26:81:7a:65:1d:06:a7:40:18:14:c9:
                    2d:0a:e7:6e:ec:18:39:f6:10:3d:7a:05:a5:10:99:
                    a8:cd:30:0f:eb:47:f8:86:d8:53:ee:94:94:36:8b:
                    6d:0f:d0:08:19:3e:47:3e:9e:41:b9:31:6b:44:0d:
                    ca:25:bf:5d:fa:3a:90:a4:71:5b:99:92:12:d3:a5:
                    b7:77:e8:7b:9b:2a:d1:bf:e2:f8:9e:43:a1:59:c6:
                    13:4e:28:cb:29:81:27:06:cd:28:b6:e1:a0:99:21:
                    e0:62:7e:15:50:4a:c2:92:1b:a9:76:33:a7:0e:42:
                    20:fd:0e:7f:c8:c5:6c:a0:67:f9:ea:cc:21:47:ec:
                    b2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F7:EB:35:08:B4:06:5B:25:07:43:42:6E:C9:0D:26:7E:26:4C:28
            X509v3 Authority Key Identifier:
                keyid:40:F1:6E:50:6A:E0:EC:6C:41:EF:04:37:B8:55:11:04:74:BA:47:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPFuUGrg7GxB7wQ3uFURBHS6R9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2e0c9a-66e1-4850-9abb-cc3efec187b9/1/6ffrNQi0BlslB0NCbskNJn4mTCg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2e0c9a-66e1-4850-9abb-cc3efec187b9/1/QPFuUGrg7GxB7wQ3uFURBHS6R9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.145.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:0e:cf:62:39:16:66:14:57:7e:08:8a:70:f0:dc:e4:b6:b6:
         f9:d8:66:d6:a5:1b:e7:a8:34:e9:1a:96:4f:2c:57:f2:58:48:
         e1:a0:ab:15:1e:e0:04:e3:4c:3e:a8:d2:ad:03:55:2f:cd:0e:
         61:0d:ff:f9:32:4a:3f:11:0d:e3:a7:1c:0f:9b:15:d5:bf:71:
         7c:6a:97:15:44:c1:cc:d9:4c:97:1a:82:f0:62:25:c7:7c:df:
         e0:f5:f5:de:2a:ef:de:2d:aa:b5:64:a3:37:b2:5b:02:26:c9:
         76:76:1b:bd:e6:57:c1:3d:61:ae:b1:83:6f:90:d6:ea:16:35:
         ed:33:b5:33:08:c9:a9:23:0c:8a:85:69:b1:f7:d3:fa:22:9d:
         84:6e:83:ee:7c:ea:fe:9a:2a:87:18:cb:81:24:be:14:8d:97:
         95:a4:d1:51:40:01:ea:31:a3:9d:fe:e1:36:e0:0c:4e:0d:36:
         56:ab:d1:28:76:99:00:90:ce:8e:e0:37:8f:30:01:5e:ca:95:
         d8:b3:61:f9:50:d8:75:7f:09:1f:4b:55:19:ca:5c:32:6c:fd:
         1e:f9:d5:fa:e0:df:94:38:0c:79:85:4b:97:d4:af:a7:15:59:
         4f:68:8d:62:59:c9:99:04:5b:38:c8:26:5c:ed:77:75:32:f0:
         76:a7:0d:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaBG1TTLiAgX9Xqd/nkc0mPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZjE2ZTUwNmFlMGVjNmM0MWVmMDQzN2I4NTUxMTA0NzRi
YTQ3ZGMwHhcNMjMwMjI0MDE0ODE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWY3ZWIzNTA4YjQwNjViMjUwNzQzNDI2ZWM5MGQyNjdlMjY0YzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0itzfxCgAPEr38z9cSj4N2hJOqUN
uit/eTdvrc1uWHeSq0ikcYiYuLKMeS8/glNuG1YzCA4zZ6KX9wTUCsx2dEjAmc+p
srFgQHg+HGh/17OY+2ZC3iZJQA+Or+1U70OMlCWBnMQzKBxbYvhH4TVHLvbZgkaw
ctp6lkVSJoF6ZR0Gp0AYFMktCudu7Bg59hA9egWlEJmozTAP60f4hthT7pSUNott
D9AIGT5HPp5BuTFrRA3KJb9d+jqQpHFbmZIS06W3d+h7myrRv+L4nkOhWcYTTijL
KYEnBs0otuGgmSHgYn4VUErCkhupdjOnDkIg/Q5/yMVsoGf56swhR+yyAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOn36zUItAZbJQdDQm7JDSZ+JkwoMB8GA1UdIwQY
MBaAFEDxblBq4OxsQe8EN7hVEQR0ukfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVBGdVVHcmc3R3hCN3dRM3VGVVJCSFM2Ujl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yZTBjOWEtNjZlMS00ODUwLTlhYmIt
Y2MzZWZlYzE4N2I5LzEvNmZmck5RaTBCbHNsQjBOQ2Jza05KbjRtVENnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8yZTBjOWEtNjZlMS00ODUwLTlhYmItY2MzZWZlYzE4N2I5
LzEvUVBGdVVHcmc3R3hCN3dRM3VGVVJCSFM2Ujl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpHtMA0G
CSqGSIb3DQEBCwUAA4IBAQAdDs9iORZmFFd+CIpw8Nzktrb52GbWpRvnqDTpGpZP
LFfyWEjhoKsVHuAE40w+qNKtA1UvzQ5hDf/5Mko/EQ3jpxwPmxXVv3F8apcVRMHM
2UyXGoLwYiXHfN/g9fXeKu/eLaq1ZKM3slsCJsl2dhu95lfBPWGusYNvkNbqFjXt
M7UzCMmpIwyKhWmx99P6Ip2EboPufOr+miqHGMuBJL4UjZeVpNFRQAHqMaOd/uE2
4AxODTZWq9EodpkAkM6O4DePMAFeypXYs2H5UNh1fwkfS1UZylwybP0e+dX64N+U
OAx5hUuX1K+nFVlPaI1iWcmZBFs4yCZc7Xd1MvB2pw2a
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:37 2024 by rpki-client on console-ams.rpki-client.org