Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/kwftp-JhMJLVBWOLIJXbKPZwKAU.roa
File:                     kwftp-JhMJLVBWOLIJXbKPZwKAU.roa (raw, json)
Hash identifier:          dmyNMIv9yglyxYfil4jRPpRbpsRGvWhfwg0CK1yoGkg=
Subject key identifier:   93:07:ED:A7:E2:61:30:92:D5:05:63:8B:20:95:DB:28:F6:70:28:05
Certificate issuer:       /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial:       0DAD7A47
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/kwftp-JhMJLVBWOLIJXbKPZwKAU.roa
Signing time:             Sat 01 Jan 2022 08:59:36 +0000
ROA not before:           Sat 01 Jan 2022 08:59:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50518
IP address blocks:        83.231.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229472839 (0xdad7a47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
        Validity
            Not Before: Jan  1 08:59:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9307eda7e2613092d505638b2095db28f6702805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:10:8a:55:86:9b:07:78:be:da:83:bc:da:78:
                    3b:f5:f6:62:6d:f6:05:ce:4f:b1:bb:c4:41:b6:07:
                    22:eb:11:46:03:b2:1f:e2:e1:53:b6:6d:cc:cb:6c:
                    a0:ee:72:ec:3e:df:14:2c:78:cb:1a:9c:5b:ea:af:
                    61:1d:26:f7:5f:ec:c7:1d:3d:9d:aa:81:7a:e0:7c:
                    97:5a:95:7d:47:8e:06:70:d3:2f:27:47:13:33:6f:
                    ea:f9:80:72:92:87:36:44:22:8d:20:08:e2:1f:92:
                    80:8e:79:cd:3e:5f:85:ca:b9:8b:b2:68:7c:c1:01:
                    91:dd:5c:bd:f3:a3:b4:d2:07:ff:75:55:de:bd:46:
                    57:0e:9a:a1:ea:8b:67:82:aa:c1:10:9d:e5:07:15:
                    db:a1:9e:f2:e4:17:f9:55:fd:1c:6c:03:a0:bb:0d:
                    5c:3e:ee:53:41:fb:28:77:dc:44:83:1d:22:08:a6:
                    0d:9c:63:00:10:45:71:3b:bc:d3:23:34:ec:5f:8f:
                    f0:e6:c6:95:56:3a:d9:a5:69:d0:9e:a8:fc:77:09:
                    27:b4:33:6d:df:06:36:11:38:3e:19:70:de:0c:93:
                    5e:34:08:bf:8c:2b:ef:70:1f:7d:4d:1c:01:5f:a8:
                    1a:27:0f:1c:ce:4b:e9:aa:96:d5:7b:54:2d:32:76:
                    b6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:07:ED:A7:E2:61:30:92:D5:05:63:8B:20:95:DB:28:F6:70:28:05
            X509v3 Authority Key Identifier:
                keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/kwftp-JhMJLVBWOLIJXbKPZwKAU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.231.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:6e:dd:c9:67:ed:74:f8:c0:9e:74:b2:c1:44:2b:e3:7d:39:
         dd:70:ca:87:24:8a:1c:67:2a:7b:42:dc:9b:32:8c:05:fb:a7:
         5f:4c:aa:ed:48:e3:0f:a1:15:f3:e2:33:67:f8:27:e2:19:9b:
         3a:00:9f:d9:db:e4:a8:8c:08:23:f4:f5:2f:c2:1b:69:e1:6c:
         32:36:d6:28:87:64:7c:2b:5f:65:11:62:96:78:61:bb:d8:c5:
         0c:bf:1f:cf:8d:95:dc:49:fe:f3:e8:39:53:42:ca:21:af:a5:
         92:11:aa:e2:79:61:4a:17:26:bb:c9:b4:cb:9c:a3:e7:52:e3:
         6b:e9:07:db:2f:94:bb:81:5f:a7:17:c3:51:63:87:bd:22:5f:
         e5:c3:70:ec:ca:1d:60:a3:a7:cd:ff:ea:87:48:24:12:73:3c:
         9f:56:5b:90:19:86:45:92:05:22:06:23:73:84:62:18:3a:3c:
         1e:f8:46:7e:4e:cc:ab:de:89:7e:d2:76:79:24:34:b7:68:3d:
         e4:15:65:12:e9:b6:ab:ec:fa:58:f5:b4:f8:c7:d3:10:94:8d:
         d8:e5:77:c0:59:1d:ce:a2:97:b3:52:62:98:52:47:31:4c:1a:
         20:bd:0f:7c:ed:ac:31:7d:4b:02:d5:14:cb:1c:da:00:84:7e:
         a3:2e:6d:1f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDa16RzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NWRhYjUwN2MwODk3NmNjMjlkMTc3MzczZGU2MjdhMWNlODZlZmFlMB4XDTIyMDEw
MTA4NTkzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTMwN2VkYTdlMjYx
MzA5MmQ1MDU2MzhiMjA5NWRiMjhmNjcwMjgwNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMgQilWGmwd4vtqDvNp4O/X2Ym32Bc5PsbvEQbYHIusRRgOy
H+LhU7ZtzMtsoO5y7D7fFCx4yxqcW+qvYR0m91/sxx09naqBeuB8l1qVfUeOBnDT
LydHEzNv6vmAcpKHNkQijSAI4h+SgI55zT5fhcq5i7JofMEBkd1cvfOjtNIH/3VV
3r1GVw6aoeqLZ4KqwRCd5QcV26Ge8uQX+VX9HGwDoLsNXD7uU0H7KHfcRIMdIgim
DZxjABBFcTu80yM07F+P8ObGlVY62aVp0J6o/HcJJ7Qzbd8GNhE4Phlw3gyTXjQI
v4wr73AffU0cAV+oGicPHM5L6aqW1XtULTJ2tlUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSTB+2n4mEwktUFY4sgldso9nAoBTAfBgNVHSMEGDAWgBRF2rUHwIl2zCnR
dzc95iehzobvrjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1JkcTFCOENKZHN3cDBYYzNQZVlub2M2Rzc2NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDgvOWFhNTAwLWYzYmQtNDc3Yi05MDgyLWFhMGIxMTU2NGEzMi8x
L2t3ZnRwLUpoTUpMVkJXT0xJSlhiS1Bad0tBVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgv
OWFhNTAwLWYzYmQtNDc3Yi05MDgyLWFhMGIxMTU2NGEzMi8xL1JkcTFCOENKZHN3
cDBYYzNQZVlub2M2Rzc2NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFPnmDANBgkqhkiG9w0BAQsFAAOC
AQEAGm7dyWftdPjAnnSywUQr43053XDKhySKHGcqe0LcmzKMBfunX0yq7UjjD6EV
8+IzZ/gn4hmbOgCf2dvkqIwII/T1L8IbaeFsMjbWKIdkfCtfZRFilnhhu9jFDL8f
z42V3En+8+g5U0LKIa+lkhGq4nlhShcmu8m0y5yj51Lja+kH2y+Uu4FfpxfDUWOH
vSJf5cNw7ModYKOnzf/qh0gkEnM8n1ZbkBmGRZIFIgYjc4RiGDo8HvhGfk7Mq96J
ftJ2eSQ0t2g95BVlEum2q+z6WPW0+MfTEJSN2OV3wFkdzqKXs1JimFJHMUwaIL0P
fO2sMX1LAtUUyxzaAIR+oy5tHw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:06 2023 by rpki-client on console-ams.rpki-client.org