Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dcd690-dc34-42bc-b5e1-e07a8925cea9/1/JY7FznWQCoXuFgQHi-JfCQiFeqg.roa
File:                     JY7FznWQCoXuFgQHi-JfCQiFeqg.roa (raw, json)
Hash identifier:          wnof3h5wk9xjn69CmHPc5kikI9tTysufDghX43vgEFA=
Subject key identifier:   25:8E:C5:CE:75:90:0A:85:EE:16:04:07:8B:E2:5F:09:08:85:7A:A8
Certificate issuer:       /CN=2d3a534c15d79e46f12610e1460832c246cee552
Certificate serial:       B281F2
Authority key identifier: 2D:3A:53:4C:15:D7:9E:46:F1:26:10:E1:46:08:32:C2:46:CE:E5:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LTpTTBXXnkbxJhDhRggywkbO5VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/dcd690-dc34-42bc-b5e1-e07a8925cea9/1/JY7FznWQCoXuFgQHi-JfCQiFeqg.roa
Signing time:             Sat 01 Jan 2022 13:01:49 +0000
ROA not before:           Sat 01 Jan 2022 13:01:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206930
IP address blocks:        185.188.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11698674 (0xb281f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d3a534c15d79e46f12610e1460832c246cee552
        Validity
            Not Before: Jan  1 13:01:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=258ec5ce75900a85ee1604078be25f0908857aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2f:b3:81:78:b6:a7:e5:16:e9:f3:ba:c1:4d:
                    6a:f7:83:12:f9:21:d3:e4:eb:28:d1:ac:39:2b:2c:
                    77:8b:ba:35:01:b9:12:26:61:c7:49:93:23:0e:83:
                    8e:80:d6:ad:2e:23:5d:03:6c:0b:79:d1:2b:b2:1b:
                    f1:b5:93:67:70:0e:f6:a4:71:7e:de:c2:15:0a:f9:
                    44:d7:01:da:25:90:0a:1c:44:c9:dd:9a:ba:8f:86:
                    42:8f:93:23:a5:af:89:20:56:0b:65:e8:7c:df:3f:
                    ec:bf:eb:c2:cf:45:51:2b:0e:b5:52:ef:c8:8c:52:
                    6f:c3:d8:b4:fb:9f:36:1a:e9:96:8e:bc:79:bd:c6:
                    8f:1e:98:dd:f2:5a:92:c9:3d:08:a7:04:e2:59:34:
                    bc:49:5e:a4:74:fa:06:98:69:8c:99:a8:d9:ed:60:
                    23:ed:12:6e:21:d9:52:57:60:f1:01:78:15:9b:1b:
                    fa:7f:60:aa:2a:0b:7e:30:83:78:b9:86:c2:11:fa:
                    84:65:14:36:25:d8:3c:e0:73:33:6c:7d:f5:43:22:
                    2a:c4:d6:11:b9:d1:24:46:32:87:35:a4:84:50:91:
                    33:4a:16:4a:bc:70:87:bf:6f:11:1a:79:5e:1d:6a:
                    28:b1:c8:a3:63:35:a5:fa:bd:a3:de:95:21:22:14:
                    da:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8E:C5:CE:75:90:0A:85:EE:16:04:07:8B:E2:5F:09:08:85:7A:A8
            X509v3 Authority Key Identifier:
                keyid:2D:3A:53:4C:15:D7:9E:46:F1:26:10:E1:46:08:32:C2:46:CE:E5:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTpTTBXXnkbxJhDhRggywkbO5VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dcd690-dc34-42bc-b5e1-e07a8925cea9/1/JY7FznWQCoXuFgQHi-JfCQiFeqg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dcd690-dc34-42bc-b5e1-e07a8925cea9/1/LTpTTBXXnkbxJhDhRggywkbO5VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.188.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:fc:2b:55:a2:52:4c:23:15:d2:63:ed:bc:4e:e3:5b:9c:27:
         c3:e9:25:76:14:e3:7a:46:73:cc:c3:78:28:07:6f:2c:e5:7c:
         45:cb:47:cc:64:0d:8e:6c:c9:ce:bd:ef:b2:27:a6:8f:dc:bf:
         d6:3e:73:ce:b2:57:0d:ac:27:a5:72:47:a3:14:4c:71:f5:2b:
         4d:69:a0:76:2a:97:de:c8:69:05:f7:bb:55:f5:79:44:4c:dc:
         5d:52:aa:8c:01:57:b8:67:a2:d3:85:bc:29:00:b4:0a:81:77:
         d7:0a:f7:a4:3b:ce:da:f8:4a:07:00:a7:79:73:86:96:e1:ea:
         52:28:a6:08:67:7e:55:25:d3:3e:68:b3:7f:7a:e7:72:7c:31:
         c3:9b:bb:b4:36:e0:cc:d7:82:63:08:74:7b:93:70:8b:65:ac:
         6d:ea:d1:1a:e4:a6:fe:71:ae:85:a8:ab:23:4f:be:3b:70:40:
         7a:e7:bb:9e:a9:35:1d:a4:73:88:ce:87:ea:91:05:71:6c:83:
         fd:1a:c8:cd:10:86:a6:4c:8b:18:f1:8a:fe:62:19:62:02:88:
         25:47:c5:19:da:a6:f3:9d:f8:56:08:5e:66:7a:44:cb:98:4b:
         f9:35:18:57:39:71:fe:f0:e7:cd:ce:c4:12:4b:06:60:84:a9:
         5b:4e:a6:7f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEALKB8jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZDNhNTM0YzE1ZDc5ZTQ2ZjEyNjEwZTE0NjA4MzJjMjQ2Y2VlNTUyMB4XDTIyMDEw
MTEzMDE0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjU4ZWM1Y2U3NTkw
MGE4NWVlMTYwNDA3OGJlMjVmMDkwODg1N2FhODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL4vs4F4tqflFunzusFNaveDEvkh0+TrKNGsOSssd4u6NQG5
EiZhx0mTIw6DjoDWrS4jXQNsC3nRK7Ib8bWTZ3AO9qRxft7CFQr5RNcB2iWQChxE
yd2auo+GQo+TI6WviSBWC2XofN8/7L/rws9FUSsOtVLvyIxSb8PYtPufNhrplo68
eb3Gjx6Y3fJaksk9CKcE4lk0vElepHT6BphpjJmo2e1gI+0SbiHZUldg8QF4FZsb
+n9gqioLfjCDeLmGwhH6hGUUNiXYPOBzM2x99UMiKsTWEbnRJEYyhzWkhFCRM0oW
Srxwh79vERp5Xh1qKLHIo2M1pfq9o96VISIU2g0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQljsXOdZAKhe4WBAeL4l8JCIV6qDAfBgNVHSMEGDAWgBQtOlNMFdeeRvEm
EOFGCDLCRs7lUjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xUcFRUQlhYbmtieEpoRGhSZ2d5d2tiTzVWSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGQvZGNkNjkwLWRjMzQtNDJiYy1iNWUxLWUwN2E4OTI1Y2VhOS8x
L0pZN0Z6bldRQ29YdUZnUUhpLUpmQ1FpRmVxZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQv
ZGNkNjkwLWRjMzQtNDJiYy1iNWUxLWUwN2E4OTI1Y2VhOS8xL0xUcFRUQlhYbmti
eEpoRGhSZ2d5d2tiTzVWSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArm81DANBgkqhkiG9w0BAQsFAAOC
AQEAivwrVaJSTCMV0mPtvE7jW5wnw+kldhTjekZzzMN4KAdvLOV8RctHzGQNjmzJ
zr3vsiemj9y/1j5zzrJXDawnpXJHoxRMcfUrTWmgdiqX3shpBfe7VfV5REzcXVKq
jAFXuGei04W8KQC0CoF31wr3pDvO2vhKBwCneXOGluHqUiimCGd+VSXTPmizf3rn
cnwxw5u7tDbgzNeCYwh0e5Nwi2WsberRGuSm/nGuhairI0++O3BAeue7nqk1HaRz
iM6H6pEFcWyD/RrIzRCGpkyLGPGK/mIZYgKIJUfFGdqm8534VgheZnpEy5hL+TUY
Vzlx/vDnzc7EEksGYISpW06mfw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:49 2024 by rpki-client on console-fra.rpki-client.org