Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/J6EBj8MrWalWw1Re3zSl5fnNiOw.roa
File:                     J6EBj8MrWalWw1Re3zSl5fnNiOw.roa (raw, json)
Hash identifier:          w/wzbjtykAmx8boHhG4h61cmNxjP64BzJf0ZaDekB0w=
Subject key identifier:   27:A1:01:8F:C3:2B:59:A9:56:C3:54:5E:DF:34:A5:E5:F9:CD:88:EC
Certificate issuer:       /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial:       01835C027D6961A9E6353D560FFDF26E36CE
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/J6EBj8MrWalWw1Re3zSl5fnNiOw.roa
Signing time:             Tue 20 Sep 2022 17:46:50 +0000
ROA not before:           Tue 20 Sep 2022 17:46:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     150303
IP address blocks:        82.118.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:5c:02:7d:69:61:a9:e6:35:3d:56:0f:fd:f2:6e:36:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: Sep 20 17:46:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=27a1018fc32b59a956c3545edf34a5e5f9cd88ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:56:d1:fc:9a:d3:ef:89:c0:09:b6:ac:0d:8e:
                    c4:2c:2d:79:77:a0:ae:ef:31:e6:c0:cc:63:07:56:
                    5f:d6:8d:96:8a:16:1b:3e:fc:de:5a:aa:df:b3:4b:
                    cb:19:74:d3:c3:9f:41:db:04:07:6d:ba:ef:49:ea:
                    6e:49:8a:ff:7b:bd:47:29:f1:50:23:a9:15:17:e8:
                    57:4d:19:84:68:5a:ef:48:f6:71:8c:d7:72:12:b7:
                    69:6c:68:3b:6d:14:04:8e:6d:33:c6:8a:c3:63:51:
                    55:7b:db:b5:c7:77:a7:4b:1f:81:20:07:a5:20:12:
                    f6:1a:61:04:c9:c4:7d:16:99:10:e6:d6:8f:a7:a4:
                    ae:01:05:fb:a3:8a:d3:f4:a4:2c:67:38:66:cb:02:
                    3f:2a:ad:ba:10:16:11:3a:a5:2f:d5:2b:e7:fa:e8:
                    50:7b:31:2e:34:e8:41:f9:7f:2a:6d:f6:3f:df:73:
                    d2:69:fd:9f:21:98:01:bd:0e:a4:b5:f5:e4:18:89:
                    4e:78:af:f3:04:e5:df:e1:37:b3:ab:e1:ad:f9:aa:
                    7a:f0:00:c9:67:bd:98:77:2c:ae:d3:2b:e7:46:62:
                    c9:8d:ae:ad:ef:57:23:55:29:7c:33:c5:99:23:2c:
                    60:38:6f:8c:fa:cf:6a:01:cb:05:a5:82:b0:51:c4:
                    a7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A1:01:8F:C3:2B:59:A9:56:C3:54:5E:DF:34:A5:E5:F9:CD:88:EC
            X509v3 Authority Key Identifier:
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/J6EBj8MrWalWw1Re3zSl5fnNiOw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.118.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:06:40:a5:ec:88:50:6d:00:5e:ce:0d:9a:33:a3:36:bf:71:
         57:b0:20:8c:6d:0f:6d:be:9f:5c:28:06:da:66:56:30:6b:95:
         29:a2:af:88:0c:67:8a:d8:d1:cc:7c:d9:bd:84:5d:46:68:57:
         04:dc:1e:24:f4:91:53:73:b6:d0:46:22:85:13:42:fd:0b:0d:
         c0:e1:c7:40:ef:94:ee:6c:60:b7:5b:c9:17:c5:94:a8:75:1b:
         c6:8a:b6:0d:23:6b:57:20:92:65:68:32:45:1a:07:86:c7:fd:
         ab:74:63:97:2b:d7:d0:12:ff:51:43:db:be:1d:e7:82:44:c4:
         3b:5e:30:fe:f9:20:dd:34:8f:45:44:d2:1a:c0:a1:08:d6:0a:
         1c:2e:38:2b:4e:8e:e0:44:54:ad:5e:a1:5e:2a:46:ae:9f:6a:
         fb:49:67:a8:e6:19:00:50:56:19:cb:8d:19:7b:09:46:21:7b:
         d3:e7:cb:fb:ae:3b:67:9d:4f:50:1c:df:dc:33:c2:94:17:48:
         49:28:c5:98:92:75:5d:3d:90:7d:0f:e1:b7:77:5e:63:2e:40:
         61:1a:cb:a8:0d:d5:81:89:8e:86:31:d1:f6:af:4b:5a:7b:26:
         31:66:1b:9e:22:bb:00:61:b7:a3:08:5b:b0:50:18:17:66:b0:
         74:a4:9e:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNcAn1pYanmNT1WD/3ybjbOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODE0Y2YyY2EzZTE3OTkzNDljY2Q0YzdlNmE3NmQ2M2Y4
MzRhM2QwHhcNMjIwOTIwMTc0NjUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2ExMDE4ZmMzMmI1OWE5NTZjMzU0NWVkZjM0YTVlNWY5Y2Q4OGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilbR/JrT74nACbasDY7ELC15d6Cu
7zHmwMxjB1Zf1o2WihYbPvzeWqrfs0vLGXTTw59B2wQHbbrvSepuSYr/e71HKfFQ
I6kVF+hXTRmEaFrvSPZxjNdyErdpbGg7bRQEjm0zxorDY1FVe9u1x3enSx+BIAel
IBL2GmEEycR9FpkQ5taPp6SuAQX7o4rT9KQsZzhmywI/Kq26EBYROqUv1Svn+uhQ
ezEuNOhB+X8qbfY/33PSaf2fIZgBvQ6ktfXkGIlOeK/zBOXf4Tezq+Gt+ap68ADJ
Z72Ydyyu0yvnRmLJja6t71cjVSl8M8WZIyxgOG+M+s9qAcsFpYKwUcSniQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCehAY/DK1mpVsNUXt80peX5zYjsMB8GA1UdIwQY
MBaAFCGBTPLKPheZNJzNTH5qdtY/g0o9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgt
MjI3MDFiNGJiNDA3LzEvSjZFQmo4TXJXYWxXdzFSZTN6U2w1Zm5OaU93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgtMjI3MDFiNGJiNDA3
LzEvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUnYaMA0G
CSqGSIb3DQEBCwUAA4IBAQCdBkCl7IhQbQBezg2aM6M2v3FXsCCMbQ9tvp9cKAba
ZlYwa5Upoq+IDGeK2NHMfNm9hF1GaFcE3B4k9JFTc7bQRiKFE0L9Cw3A4cdA75Tu
bGC3W8kXxZSodRvGirYNI2tXIJJlaDJFGgeGx/2rdGOXK9fQEv9RQ9u+HeeCRMQ7
XjD++SDdNI9FRNIawKEI1gocLjgrTo7gRFStXqFeKkaun2r7SWeo5hkAUFYZy40Z
ewlGIXvT58v7rjtnnU9QHN/cM8KUF0hJKMWYknVdPZB9D+G3d15jLkBhGsuoDdWB
iY6GMdH2r0taeyYxZhueIrsAYbejCFuwUBgXZrB0pJ6m
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org