Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/Fgo1kBUbRXDvjOPJGzKymFr9nVQ.roa
File:                     Fgo1kBUbRXDvjOPJGzKymFr9nVQ.roa (raw, json)
Hash identifier:          neZw1xmA9W3wJm/t24vQnoI1jagmboL00T/c1fMzrLI=
Subject key identifier:   16:0A:35:90:15:1B:45:70:EF:8C:E3:C9:1B:32:B2:98:5A:FD:9D:54
Certificate issuer:       /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial:       03DD18B4
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/Fgo1kBUbRXDvjOPJGzKymFr9nVQ.roa
Signing time:             Thu 24 Mar 2022 17:28:26 +0000
ROA not before:           Thu 24 Mar 2022 17:28:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209181
IP address blocks:        213.225.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64821428 (0x3dd18b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: Mar 24 17:28:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=160a3590151b4570ef8ce3c91b32b2985afd9d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:99:f5:92:06:88:77:39:48:d7:6b:3f:b5:7d:
                    f3:b4:8a:c5:74:2b:2d:d6:d1:76:60:88:d1:03:45:
                    9e:11:ac:ab:46:1c:2c:df:3b:57:7f:e3:68:e9:d2:
                    e6:93:ea:5d:22:15:8d:f9:76:c1:b0:7b:88:f3:8a:
                    26:67:3c:1f:f0:f3:13:3f:b9:03:0f:d6:78:1f:d8:
                    b2:9d:38:e5:dd:b1:94:c2:55:1c:dc:25:5a:75:29:
                    04:93:01:74:e4:d8:3c:34:6d:87:c3:bf:1c:7a:8e:
                    2e:0d:48:2c:e2:b1:3a:62:33:56:d7:fc:99:bb:e3:
                    9c:fd:c5:2f:16:88:75:17:5d:59:93:1d:2e:89:67:
                    1e:cb:fc:92:05:d3:ff:62:40:29:5d:bd:9e:36:a8:
                    cd:fe:95:3c:93:9f:fb:66:ae:5b:3e:84:ef:5b:58:
                    e7:c7:ed:da:82:65:f7:e9:25:3e:51:86:8e:4b:e2:
                    06:1e:67:22:ce:ad:0a:1a:12:f9:25:e2:59:2a:ae:
                    62:9f:b5:14:50:10:a8:54:69:f9:4c:6a:f9:04:a8:
                    27:60:d9:1a:8b:8a:b0:42:5f:78:f6:f0:08:12:0d:
                    b3:c8:75:be:91:5f:fd:9c:72:02:bf:68:d5:20:dc:
                    b4:b1:a7:ca:65:df:e0:10:b0:ed:70:fa:f0:29:05:
                    99:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0A:35:90:15:1B:45:70:EF:8C:E3:C9:1B:32:B2:98:5A:FD:9D:54
            X509v3 Authority Key Identifier:
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/Fgo1kBUbRXDvjOPJGzKymFr9nVQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.225.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:a5:39:78:c5:e5:37:d5:d3:1a:d6:0c:fb:e1:02:b3:00:e5:
         3f:5c:88:3e:b5:d1:fa:6a:4c:7c:2e:f1:c8:3b:26:8b:86:cf:
         51:7b:a2:42:4a:5d:70:80:b5:ec:98:2a:71:c3:9d:cf:3c:07:
         9d:2d:b4:12:3f:cb:30:36:01:0b:5c:2f:d2:37:ae:01:56:ad:
         cd:f2:a7:f4:d5:b5:f2:3b:cb:b4:4a:f4:ed:39:a5:91:bc:bd:
         b0:db:03:c6:af:fe:c8:20:5a:98:83:ba:db:1e:75:68:f1:7b:
         83:43:86:c3:8a:15:ce:2b:d7:1b:6c:ad:42:c6:cf:9b:06:f4:
         73:8e:a3:99:50:67:52:b6:8f:ce:e3:31:11:21:37:dd:ee:75:
         34:0d:b4:2f:45:da:85:2f:f6:8c:c9:c0:95:3e:eb:24:ae:7d:
         3d:f9:45:dd:b0:8a:03:8b:7c:70:e7:65:fb:fd:ce:51:49:83:
         93:05:1a:66:81:a6:87:79:a8:bf:13:45:d4:3e:37:67:12:c4:
         0e:7d:92:1a:c0:0c:fd:81:6c:6a:2d:43:92:7c:c2:d4:7c:8f:
         d5:f4:f8:ac:3d:7a:4c:aa:69:ad:da:19:79:8f:01:07:04:74:
         66:6a:4a:97:0a:ee:21:6f:d7:e2:9c:89:14:53:4c:74:77:2c:
         48:12:e4:30
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA90YtDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MTgxNGNmMmNhM2UxNzk5MzQ5Y2NkNGM3ZTZhNzZkNjNmODM0YTNkMB4XDTIyMDMy
NDE3MjgyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTYwYTM1OTAxNTFi
NDU3MGVmOGNlM2M5MWIzMmIyOTg1YWZkOWQ1NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALWZ9ZIGiHc5SNdrP7V987SKxXQrLdbRdmCI0QNFnhGsq0Yc
LN87V3/jaOnS5pPqXSIVjfl2wbB7iPOKJmc8H/DzEz+5Aw/WeB/Ysp045d2xlMJV
HNwlWnUpBJMBdOTYPDRth8O/HHqOLg1ILOKxOmIzVtf8mbvjnP3FLxaIdRddWZMd
LolnHsv8kgXT/2JAKV29njaozf6VPJOf+2auWz6E71tY58ft2oJl9+klPlGGjkvi
Bh5nIs6tChoS+SXiWSquYp+1FFAQqFRp+Uxq+QSoJ2DZGouKsEJfePbwCBINs8h1
vpFf/ZxyAr9o1SDctLGnymXf4BCw7XD68CkFmakCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQWCjWQFRtFcO+M48kbMrKYWv2dVDAfBgNVHSMEGDAWgBQhgUzyyj4XmTSc
zUx+anbWP4NKPTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lZRk04c28tRjVrMG5NMU1mbXAyMWotRFNqMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvMDFmODUzLWQ0NDUtNGFjZS1hOGQ4LTIyNzAxYjRiYjQwNy8x
L0ZnbzFrQlViUlhEdmpPUEpHekt5bUZyOW5WUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
MDFmODUzLWQ0NDUtNGFjZS1hOGQ4LTIyNzAxYjRiYjQwNy8xL0lZRk04c28tRjVr
MG5NMU1mbXAyMWotRFNqMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANXh7zANBgkqhkiG9w0BAQsFAAOC
AQEAQ6U5eMXlN9XTGtYM++ECswDlP1yIPrXR+mpMfC7xyDsmi4bPUXuiQkpdcIC1
7JgqccOdzzwHnS20Ej/LMDYBC1wv0jeuAVatzfKn9NW18jvLtEr07Tmlkby9sNsD
xq/+yCBamIO62x51aPF7g0OGw4oVzivXG2ytQsbPmwb0c46jmVBnUraPzuMxESE3
3e51NA20L0XahS/2jMnAlT7rJK59PflF3bCKA4t8cOdl+/3OUUmDkwUaZoGmh3mo
vxNF1D43ZxLEDn2SGsAM/YFsai1DknzC1HyP1fT4rD16TKpprdoZeY8BBwR0ZmpK
lwruIW/X4pyJFFNMdHcsSBLkMA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org