Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/PZYSGVeeucToqUbwNwF8FUAZrAQ.roa
File:                     PZYSGVeeucToqUbwNwF8FUAZrAQ.roa (raw, json)
Hash identifier:          5efBRDjW245ualMoEEwlkMByHhW4pkS6Eb6w6euaLE0=
Subject key identifier:   3D:96:12:19:57:9E:B9:C4:E8:A9:46:F0:37:01:7C:15:40:19:AC:04
Certificate issuer:       /CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
Certificate serial:       08072F0B
Authority key identifier: BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/PZYSGVeeucToqUbwNwF8FUAZrAQ.roa
Signing time:             Sat 01 Jan 2022 03:55:31 +0000
ROA not before:           Sat 01 Jan 2022 03:55:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212512
IP address blocks:        93.190.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134688523 (0x8072f0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
        Validity
            Not Before: Jan  1 03:55:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3d961219579eb9c4e8a946f037017c154019ac04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:80:e1:bf:6e:99:ec:7b:ee:ef:06:21:5d:26:
                    0d:9d:c1:9a:11:4c:bb:12:02:2d:5a:ca:d0:83:a7:
                    18:79:12:ea:4f:61:5c:6e:da:96:55:31:58:bf:df:
                    2c:67:ea:f4:42:aa:9f:1e:70:eb:02:a3:0b:73:37:
                    f9:f2:e4:da:1a:52:21:be:c6:39:2f:f8:dd:02:1f:
                    91:25:11:29:94:75:28:dc:e8:b2:85:4e:91:cc:ba:
                    b5:c8:c3:85:8d:77:26:d1:67:2b:87:c7:c3:91:84:
                    7c:8a:e4:d9:15:0b:26:de:81:b5:94:5e:fe:7a:1d:
                    6d:36:17:17:d2:cb:43:f4:9b:0f:2c:77:f0:e8:b2:
                    26:13:37:54:0c:4d:c5:6d:f2:9e:e3:d7:d4:32:da:
                    8c:71:ea:86:ef:60:25:42:f0:28:7c:cc:ec:2e:6b:
                    e2:44:5a:85:c4:ca:38:15:fa:ff:b4:51:29:d9:68:
                    10:d8:d3:20:3d:6e:9c:3f:60:d4:de:bc:1c:0f:5c:
                    ba:55:62:3d:fe:67:fb:83:80:5e:65:49:7d:ef:ef:
                    45:b5:dc:a5:69:c6:b1:ef:cc:61:db:00:8c:2a:b6:
                    d0:9b:24:f4:8a:94:64:31:22:2e:41:f1:e0:57:a8:
                    cb:f0:7b:3e:3f:09:12:3e:bd:76:fd:da:38:2b:1d:
                    92:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:96:12:19:57:9E:B9:C4:E8:A9:46:F0:37:01:7C:15:40:19:AC:04
            X509v3 Authority Key Identifier:
                keyid:BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/PZYSGVeeucToqUbwNwF8FUAZrAQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/vGniBh6MfO5C76T--fMPe_b20FM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.190.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:39:13:95:04:b2:08:d8:cf:c6:7a:aa:71:6e:81:0e:e9:1a:
         97:3e:3f:4c:56:58:a8:6c:41:c8:7a:4f:d4:5d:b7:e3:6f:e3:
         2d:3f:d4:d5:23:81:14:11:df:25:48:74:cd:44:99:90:de:44:
         af:7f:e0:d7:ba:b2:07:51:0b:f2:8d:85:f5:04:97:65:e5:eb:
         c6:5d:bc:b5:f5:e2:fc:6c:22:74:6f:57:8b:dd:9a:8f:89:b2:
         d4:8e:18:19:90:6c:72:82:71:45:4d:a2:21:71:6e:c4:51:8d:
         bf:5c:10:40:f9:47:3d:34:1b:38:e6:b1:90:d5:f8:2c:7a:f0:
         19:e0:cd:8d:10:b2:c0:b0:b3:e8:48:80:41:ee:09:0c:65:a6:
         52:95:fd:4a:71:e3:dc:9f:63:a8:e4:6d:35:03:b4:82:43:b8:
         73:37:90:5d:71:e3:f9:98:fa:37:b6:86:05:d2:68:91:7f:b5:
         89:53:5f:c2:66:db:09:5c:d0:6f:ca:31:ea:06:10:b7:76:a4:
         8f:3a:86:60:1a:49:f3:c9:15:7f:c0:b1:9b:de:fe:e4:84:d5:
         fa:e7:55:4b:32:0a:20:b4:60:61:a5:65:04:6d:bd:1b:e1:62:
         5f:ef:30:47:e7:a4:24:05:a5:d5:9a:e2:54:22:f1:fe:6b:7b:
         cb:e1:8d:6a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECAcvCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
YzY5ZTIwNjFlOGM3Y2VlNDJlZmE0ZmVmOWYzMGY3YmY2ZjZkMDUzMB4XDTIyMDEw
MTAzNTUzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2Q5NjEyMTk1Nzll
YjljNGU4YTk0NmYwMzcwMTdjMTU0MDE5YWMwNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALWA4b9umex77u8GIV0mDZ3BmhFMuxICLVrK0IOnGHkS6k9h
XG7allUxWL/fLGfq9EKqnx5w6wKjC3M3+fLk2hpSIb7GOS/43QIfkSURKZR1KNzo
soVOkcy6tcjDhY13JtFnK4fHw5GEfIrk2RULJt6BtZRe/nodbTYXF9LLQ/SbDyx3
8OiyJhM3VAxNxW3ynuPX1DLajHHqhu9gJULwKHzM7C5r4kRahcTKOBX6/7RRKdlo
ENjTID1unD9g1N68HA9culViPf5n+4OAXmVJfe/vRbXcpWnGse/MYdsAjCq20Jsk
9IqUZDEiLkHx4Feoy/B7Pj8JEj69dv3aOCsdki0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ9lhIZV565xOipRvA3AXwVQBmsBDAfBgNVHSMEGDAWgBS8aeIGHox87kLv
pP758w979vbQUzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ZHbmlCaDZNZk81Qzc2VC0tZk1QZV9iMjBGTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGEvZmVmYzk3LTgxY2YtNGZlNC1hYzc1LWM0NGRlNWZkNzhiYS8x
L1BaWVNHVmVldWNUb3FVYndOd0Y4RlVBWnJBUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEv
ZmVmYzk3LTgxY2YtNGZlNC1hYzc1LWM0NGRlNWZkNzhiYS8xL3ZHbmlCaDZNZk81
Qzc2VC0tZk1QZV9iMjBGTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF2+CDANBgkqhkiG9w0BAQsFAAOC
AQEAnjkTlQSyCNjPxnqqcW6BDukalz4/TFZYqGxByHpP1F2342/jLT/U1SOBFBHf
JUh0zUSZkN5Er3/g17qyB1EL8o2F9QSXZeXrxl28tfXi/GwidG9Xi92aj4my1I4Y
GZBscoJxRU2iIXFuxFGNv1wQQPlHPTQbOOaxkNX4LHrwGeDNjRCywLCz6EiAQe4J
DGWmUpX9SnHj3J9jqORtNQO0gkO4czeQXXHj+Zj6N7aGBdJokX+1iVNfwmbbCVzQ
b8ox6gYQt3akjzqGYBpJ88kVf8Cxm97+5ITV+udVSzIKILRgYaVlBG29G+FiX+8w
R+ekJAWl1ZriVCLx/mt7y+GNag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:16 2024 by rpki-client on console-ams.rpki-client.org