Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/H2qXfFhmeCwlhSa3pGVH5Bzxlk0.roa
File:                     H2qXfFhmeCwlhSa3pGVH5Bzxlk0.roa (raw, json)
Hash identifier:          PmgOJQFdEY1kxrziddOg0OsINBRGzoIJRcqSqjZbLAM=
Subject key identifier:   1F:6A:97:7C:58:66:78:2C:25:85:26:B7:A4:65:47:E4:1C:F1:96:4D
Certificate issuer:       /CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Certificate serial:       0185965264F97E660443AB9DFCE63AB96749
Authority key identifier: B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/H2qXfFhmeCwlhSa3pGVH5Bzxlk0.roa
Signing time:             Mon 09 Jan 2023 11:37:40 +0000
ROA not before:           Mon 09 Jan 2023 11:37:40 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211114
IP address blocks:        45.80.175.0/24 maxlen: 24
                          185.136.205.0/24 maxlen: 24
                          185.207.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:96:52:64:f9:7e:66:04:43:ab:9d:fc:e6:3a:b9:67:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
        Validity
            Not Before: Jan  9 11:37:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1f6a977c5866782c258526b7a46547e41cf1964d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9b:15:9d:f4:3e:0e:64:f7:45:be:ca:bd:f9:
                    6d:04:36:a5:4b:ee:2d:bc:fc:22:0e:92:0b:ae:cc:
                    27:59:27:6d:3a:dc:e4:83:30:d1:7d:1f:c1:6c:95:
                    22:d9:76:5b:84:ee:5a:d3:c4:2e:7f:e4:c5:be:48:
                    d1:53:4e:18:1d:7c:fb:6e:03:08:6b:2e:e4:53:a5:
                    3d:66:7c:14:a9:91:a4:e4:35:d0:76:80:2a:8d:11:
                    51:ec:fd:35:9d:e2:cf:bd:6b:98:5a:b3:a3:d1:46:
                    91:05:36:8d:52:7e:53:f7:5b:1d:ab:d0:4a:e1:8a:
                    fd:19:4e:35:75:ab:55:c7:11:15:f4:66:ff:83:f1:
                    b9:10:c2:cc:33:1f:92:e0:f6:ba:ab:32:d0:7e:f7:
                    90:de:24:82:1b:89:fb:0f:c2:77:40:81:f0:3a:9b:
                    70:7c:4e:f3:ae:af:46:6b:cf:eb:b2:6e:a3:48:16:
                    ef:67:34:1a:91:a7:6d:da:8f:4a:09:42:1d:08:5b:
                    7e:b5:c2:74:f2:33:0f:d2:2c:25:a5:26:7e:97:7e:
                    09:f1:ea:ca:ca:a6:c3:7e:ee:0a:0f:3c:09:2f:e3:
                    67:66:a2:29:f4:45:8a:7c:54:f6:87:c6:c8:2c:e9:
                    e3:bf:32:0d:df:64:10:7b:4b:46:e8:7b:85:b8:19:
                    6b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6A:97:7C:58:66:78:2C:25:85:26:B7:A4:65:47:E4:1C:F1:96:4D
            X509v3 Authority Key Identifier:
                keyid:B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/H2qXfFhmeCwlhSa3pGVH5Bzxlk0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/twWU8mXww-sA58_Cj-yFkMimMqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.175.0/24
                  185.136.205.0/24
                  185.207.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:c4:36:ae:5e:b0:42:a4:30:49:b7:fa:19:1f:f6:4d:af:37:
         35:25:93:49:f7:e1:6a:72:18:5a:79:ec:a9:52:88:f6:ef:67:
         48:7a:66:ec:c3:ad:41:17:ff:68:4d:73:9c:ed:1d:1f:07:97:
         ac:f1:13:70:85:2b:c8:21:b1:6b:e9:02:45:ba:e1:a6:9a:54:
         a3:71:73:59:31:8e:f3:d7:57:0a:a3:6d:fc:c6:1b:46:4b:bf:
         fa:be:2c:02:e2:e1:9b:52:8b:22:6e:4b:88:da:68:26:74:b3:
         ff:a6:15:12:e4:08:21:fe:58:17:34:71:92:66:dc:63:79:b0:
         ac:7e:5e:79:54:14:be:a8:8d:a6:a2:f6:68:3f:47:fd:3a:9e:
         6b:9c:0e:ae:95:87:9b:94:35:87:e9:03:0a:de:16:0d:2a:aa:
         6d:01:f7:45:c3:a4:3d:08:ba:be:91:f1:c5:f8:45:9c:50:8f:
         b9:fd:b2:ab:ad:01:20:63:99:f1:ce:f7:94:63:0e:a4:49:57:
         a2:39:00:84:7a:4a:0d:02:40:f9:0d:db:6f:5a:87:80:a8:1a:
         86:e7:e8:12:37:fc:93:4d:d7:fc:77:2f:1f:45:ab:36:b9:bd:
         74:53:48:d6:2f:b1:ff:3a:1a:dd:41:a8:2a:6f:ea:1d:0e:d7:
         28:4f:62:24
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYWWUmT5fmYEQ6ud/OY6uWdJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MDU5NGYyNjVmMGMzZWIwMGU3Y2ZjMjhmZWM4NTkwYzhh
NjMyYTUwHhcNMjMwMTA5MTEzNzQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjZhOTc3YzU4NjY3ODJjMjU4NTI2YjdhNDY1NDdlNDFjZjE5NjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZsVnfQ+DmT3Rb7KvfltBDalS+4t
vPwiDpILrswnWSdtOtzkgzDRfR/BbJUi2XZbhO5a08Quf+TFvkjRU04YHXz7bgMI
ay7kU6U9ZnwUqZGk5DXQdoAqjRFR7P01neLPvWuYWrOj0UaRBTaNUn5T91sdq9BK
4Yr9GU41datVxxEV9Gb/g/G5EMLMMx+S4Pa6qzLQfveQ3iSCG4n7D8J3QIHwOptw
fE7zrq9Ga8/rsm6jSBbvZzQakadt2o9KCUIdCFt+tcJ08jMP0iwlpSZ+l34J8erK
yqbDfu4KDzwJL+NnZqIp9EWKfFT2h8bILOnjvzIN32QQe0tG6HuFuBlrtQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFB9ql3xYZngsJYUmt6RlR+Qc8ZZNMB8GA1UdIwQY
MBaAFLcFlPJl8MPrAOfPwo/shZDIpjKlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHdXVThtWHd3LXNBNThfQ2oteUZrTWltTXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yMDc3YmEtMWRjNi00MTE3LWJjYjct
YWI0Y2RmMzE0NWM5LzEvSDJxWGZGaG1lQ3dsaFNhM3BHVkg1Qnp4bGswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yMDc3YmEtMWRjNi00MTE3LWJjYjctYWI0Y2RmMzE0NWM5
LzEvdHdXVThtWHd3LXNBNThfQ2oteUZrTWltTXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVCvAwQA
uYjNAwQAuc8nMA0GCSqGSIb3DQEBCwUAA4IBAQAaxDauXrBCpDBJt/oZH/ZNrzc1
JZNJ9+FqchhaeeypUoj272dIembsw61BF/9oTXOc7R0fB5es8RNwhSvIIbFr6QJF
uuGmmlSjcXNZMY7z11cKo238xhtGS7/6viwC4uGbUosibkuI2mgmdLP/phUS5Agh
/lgXNHGSZtxjebCsfl55VBS+qI2movZoP0f9Op5rnA6ulYeblDWH6QMK3hYNKqpt
AfdFw6Q9CLq+kfHF+EWcUI+5/bKrrQEgY5nxzveUYw6kSVeiOQCEekoNAkD5Ddtv
WoeAqBqG5+gSN/yTTdf8dy8fRas2ub10U0jWL7H/OhrdQagqb+odDtcoT2Ik
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:27 2024 by rpki-client on console-fra.rpki-client.org