Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/qQhPnkNZ78ya-7m6tRWcC1sX19c.roa
File:                     qQhPnkNZ78ya-7m6tRWcC1sX19c.roa (raw, json)
Hash identifier:          mBag87C+g7uZ52SImD9oPW70i0Np5UqE4WGdiqEg7Lk=
Subject key identifier:   A9:08:4F:9E:43:59:EF:CC:9A:FB:B9:BA:B5:15:9C:0B:5B:17:D7:D7
Certificate issuer:       /CN=48f8cdd16f3c3e9a22835a18623136fd4f0e0dd7
Certificate serial:       0177A0A5
Authority key identifier: 48:F8:CD:D1:6F:3C:3E:9A:22:83:5A:18:62:31:36:FD:4F:0E:0D:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SPjN0W88Ppoig1oYYjE2_U8ODdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/qQhPnkNZ78ya-7m6tRWcC1sX19c.roa
Signing time:             Thu 03 Feb 2022 19:36:49 +0000
ROA not before:           Thu 03 Feb 2022 19:36:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211237
IP address blocks:        130.193.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24617125 (0x177a0a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f8cdd16f3c3e9a22835a18623136fd4f0e0dd7
        Validity
            Not Before: Feb  3 19:36:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a9084f9e4359efcc9afbb9bab5159c0b5b17d7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fc:13:1c:dc:ad:88:b8:69:2b:90:11:60:56:
                    37:7d:e5:cb:7e:20:59:09:03:b7:ff:34:85:74:d2:
                    b7:95:95:80:5f:df:12:e3:6a:52:ce:aa:33:6e:87:
                    08:bb:f0:b8:98:26:cf:3f:58:d0:45:a1:a7:66:aa:
                    58:7f:10:db:6b:78:59:75:30:09:09:ca:4c:0d:2f:
                    61:f9:1f:b8:60:21:d5:4b:0f:c1:c0:9d:ba:56:ce:
                    d5:36:d2:33:4a:95:04:d1:fa:db:6d:4c:ea:03:7d:
                    c1:ee:fd:9b:1e:9f:55:7f:51:43:a1:19:77:d6:38:
                    49:e9:e3:df:98:65:7d:57:9a:de:fe:6b:22:0c:d8:
                    10:bd:af:3e:3c:ed:38:5a:e2:91:63:00:4c:58:09:
                    5e:73:3b:30:f8:12:3e:02:f8:c2:f6:3d:d3:71:c4:
                    ae:e3:e8:35:56:18:dd:b6:09:3f:50:06:b1:c6:cc:
                    99:bc:01:73:d8:5a:56:d7:5f:15:10:87:f4:c2:72:
                    fd:21:27:1b:ee:6c:e4:5f:bb:30:48:4a:21:d7:d0:
                    2c:dd:1c:07:60:0a:2b:07:76:fb:ea:e7:4d:77:f1:
                    14:15:ec:56:53:47:e1:a9:9d:86:38:1b:e8:c4:91:
                    47:73:f2:50:4f:22:a1:f4:78:c0:ba:fc:e3:a0:34:
                    c8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:08:4F:9E:43:59:EF:CC:9A:FB:B9:BA:B5:15:9C:0B:5B:17:D7:D7
            X509v3 Authority Key Identifier:
                keyid:48:F8:CD:D1:6F:3C:3E:9A:22:83:5A:18:62:31:36:FD:4F:0E:0D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPjN0W88Ppoig1oYYjE2_U8ODdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/qQhPnkNZ78ya-7m6tRWcC1sX19c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/356600-fe51-444c-b4d6-cfe0ed70e436/1/SPjN0W88Ppoig1oYYjE2_U8ODdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.193.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:90:9e:54:e3:9d:f0:9f:11:19:6f:d3:bc:9f:b6:ed:8c:c6:
         df:30:82:f8:27:2e:09:a1:bb:d8:cb:31:81:dc:20:de:85:4a:
         ff:c4:62:2f:52:02:db:aa:6a:d5:ea:25:9a:72:9e:60:fa:80:
         25:58:a8:be:81:be:42:30:b6:af:4a:21:2f:77:1c:a8:12:99:
         f8:9e:d4:ad:ee:1d:d5:a8:b4:e4:e0:ee:76:ce:4c:2e:ba:cf:
         b3:e5:50:92:ef:33:6d:96:8c:f9:a7:78:c7:c2:aa:36:5a:ae:
         e0:55:5f:41:f9:82:a1:51:79:a6:ca:83:04:41:90:9d:d4:24:
         94:c4:01:97:82:f3:8e:59:ff:32:84:02:01:73:23:2f:d0:92:
         96:89:6e:fe:54:9f:7d:bc:bb:56:ff:52:8e:5d:0f:f8:f4:8f:
         9d:31:7b:1d:95:b0:f4:41:4c:ec:c0:58:07:7f:c0:00:80:ce:
         6f:52:8f:1c:43:bb:34:b5:a1:00:21:ac:de:c8:52:9b:f6:35:
         ca:c9:d8:a9:73:65:9d:f7:de:6b:b7:28:10:4c:55:66:63:36:
         fd:d0:59:61:50:55:2e:7f:50:b9:8a:35:f0:02:5e:69:36:07:
         85:87:4a:e5:5e:1d:75:31:e7:c9:9b:a2:f9:d2:ca:37:38:30:
         2e:77:f0:53
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAXegpTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
OGY4Y2RkMTZmM2MzZTlhMjI4MzVhMTg2MjMxMzZmZDRmMGUwZGQ3MB4XDTIyMDIw
MzE5MzY0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTkwODRmOWU0MzU5
ZWZjYzlhZmJiOWJhYjUxNTljMGI1YjE3ZDdkNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALb8ExzcrYi4aSuQEWBWN33ly34gWQkDt/80hXTSt5WVgF/f
EuNqUs6qM26HCLvwuJgmzz9Y0EWhp2aqWH8Q22t4WXUwCQnKTA0vYfkfuGAh1UsP
wcCdulbO1TbSM0qVBNH6221M6gN9we79mx6fVX9RQ6EZd9Y4Senj35hlfVea3v5r
IgzYEL2vPjztOFrikWMATFgJXnM7MPgSPgL4wvY903HEruPoNVYY3bYJP1AGscbM
mbwBc9haVtdfFRCH9MJy/SEnG+5s5F+7MEhKIdfQLN0cB2AKKwd2++rnTXfxFBXs
VlNH4amdhjgb6MSRR3PyUE8iofR4wLr846A0yEMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSpCE+eQ1nvzJr7ubq1FZwLWxfX1zAfBgNVHSMEGDAWgBRI+M3Rbzw+miKD
WhhiMTb9Tw4N1zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NQak4wVzg4UHBvaWcxb1lZakUyX1U4T0RkYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTYvMzU2NjAwLWZlNTEtNDQ0Yy1iNGQ2LWNmZTBlZDcwZTQzNi8x
L3FRaFBua05aNzh5YS03bTZ0UldjQzFzWDE5Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYv
MzU2NjAwLWZlNTEtNDQ0Yy1iNGQ2LWNmZTBlZDcwZTQzNi8xL1NQak4wVzg4UHBv
aWcxb1lZakUyX1U4T0RkYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAILBSzANBgkqhkiG9w0BAQsFAAOC
AQEAcZCeVOOd8J8RGW/TvJ+27YzG3zCC+CcuCaG72Msxgdwg3oVK/8RiL1IC26pq
1eolmnKeYPqAJViovoG+QjC2r0ohL3ccqBKZ+J7Ure4d1ai05ODuds5MLrrPs+VQ
ku8zbZaM+ad4x8KqNlqu4FVfQfmCoVF5psqDBEGQndQklMQBl4Lzjln/MoQCAXMj
L9CSlolu/lSffby7Vv9Sjl0P+PSPnTF7HZWw9EFM7MBYB3/AAIDOb1KPHEO7NLWh
ACGs3shSm/Y1ysnYqXNlnffea7coEExVZmM2/dBZYVBVLn9QuYo18AJeaTYHhYdK
5V4ddTHnyZui+dLKNzgwLnfwUw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:29 2024 by rpki-client on console-fra.rpki-client.org