Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/neJJU1Y4ax3wxLA7ZUHLAOCAMCM.roa
File:                     neJJU1Y4ax3wxLA7ZUHLAOCAMCM.roa (raw, json)
Hash identifier:          BZOQ3RY21LdV3Y+pyJyrI/IWHAqyGRItJcbzRu0II4Q=
Subject key identifier:   9D:E2:49:53:56:38:6B:1D:F0:C4:B0:3B:65:41:CB:00:E0:80:30:23
Certificate issuer:       /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial:       04EA2AA7
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/neJJU1Y4ax3wxLA7ZUHLAOCAMCM.roa
Signing time:             Fri 01 Jul 2022 10:26:26 +0000
ROA not before:           Fri 01 Jul 2022 10:26:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        82.118.26.0/23 maxlen: 24
                          82.118.28.0/22 maxlen: 24
                          82.118.25.0/24 maxlen: 24
                          213.225.238.0/24 maxlen: 24
                          45.146.104.0/24 maxlen: 24
                          45.146.106.0/24 maxlen: 24
                          45.80.4.0/22 maxlen: 24
                          141.98.74.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82455207 (0x4ea2aa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: Jul  1 10:26:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9de2495356386b1df0c4b03b6541cb00e0803023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:34:67:16:bd:af:17:a6:bf:db:82:94:82:90:
                    c6:cc:17:99:5c:a0:90:66:17:30:08:d8:00:d2:98:
                    fe:a7:5f:91:58:bb:49:29:52:a2:d6:0f:a6:bb:d4:
                    da:22:b5:d0:f0:64:7a:b3:82:f0:93:0a:da:55:1f:
                    c6:de:b3:f7:f9:d8:18:f8:97:83:e7:c1:0c:36:3f:
                    66:99:96:04:17:a2:5f:16:cf:51:83:ff:c8:fa:3c:
                    7f:a8:97:03:e0:c5:83:68:d0:9a:dd:0d:11:98:bb:
                    96:b6:e0:b3:81:b6:36:ba:27:be:06:8a:5d:9e:a5:
                    36:72:b9:7b:a2:3b:38:79:5f:01:50:7b:6d:7d:d1:
                    1c:11:a1:c7:38:98:56:36:34:2f:29:dc:0e:83:ee:
                    f2:44:79:55:24:06:52:c9:5b:2f:3f:08:c5:9e:f4:
                    e1:56:d3:61:f6:c7:f7:8c:27:6b:1e:7c:14:bc:b5:
                    cc:21:91:67:c3:a4:dd:ba:f4:69:1c:15:17:64:2a:
                    c2:3b:21:6b:44:48:39:ea:64:47:b1:a8:39:26:11:
                    58:e8:a4:8c:5b:b1:40:8b:ae:51:4e:0f:3f:ef:96:
                    67:06:27:01:78:4c:b1:b7:9a:15:48:90:ac:3b:78:
                    38:b5:33:7a:01:b0:a1:09:58:8f:3c:aa:94:4d:95:
                    50:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E2:49:53:56:38:6B:1D:F0:C4:B0:3B:65:41:CB:00:E0:80:30:23
            X509v3 Authority Key Identifier:
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/neJJU1Y4ax3wxLA7ZUHLAOCAMCM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.4.0/22
                  45.146.104.0/24
                  45.146.106.0/24
                  82.118.25.0-82.118.31.255
                  141.98.74.0/23
                  213.225.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:74:94:a5:f9:4d:f3:fc:01:5e:02:5a:ae:78:86:86:33:b5:
         cf:bf:18:1b:3e:b6:d9:09:2c:63:39:35:ca:ac:d9:fe:91:94:
         c8:03:fe:6d:3d:75:06:5a:10:c5:80:33:b1:7c:12:7d:75:c5:
         fa:34:17:f2:4e:54:91:3d:a4:20:1a:79:30:a1:5c:31:18:0c:
         4e:ed:43:2c:b5:1c:61:a7:26:3d:07:dc:ce:72:b9:c4:cc:82:
         30:f7:8d:79:fb:63:cd:1a:38:b3:5a:dc:c7:c1:a2:c8:42:8f:
         ab:97:89:a4:8e:11:3c:7a:1d:1e:66:09:c0:8e:36:ae:7c:fc:
         92:8b:fc:3a:14:6b:e4:21:e4:aa:5d:41:86:90:a1:72:d2:fa:
         47:f0:c1:cb:1a:f5:e8:94:4d:00:4d:c3:e0:b2:06:ce:33:86:
         17:3c:90:93:50:c9:ac:b4:cc:b2:cf:79:65:54:2e:30:d2:f6:
         95:8b:c0:7b:a0:61:ec:61:e8:a5:ef:d1:ab:4a:00:31:be:93:
         18:82:b9:df:90:ca:81:95:d9:b5:f6:66:2e:50:10:1f:a1:50:
         ac:94:8a:a4:76:35:5a:cd:fd:e2:39:95:b6:88:80:3e:3b:8e:
         d3:a1:19:3e:cd:dc:b4:19:eb:e1:b7:fc:e4:de:1d:3e:d5:ef:
         a3:e8:2b:10
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIEBOoqpzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MTgxNGNmMmNhM2UxNzk5MzQ5Y2NkNGM3ZTZhNzZkNjNmODM0YTNkMB4XDTIyMDcw
MTEwMjYyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWRlMjQ5NTM1NjM4
NmIxZGYwYzRiMDNiNjU0MWNiMDBlMDgwMzAyMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM40Zxa9rxemv9uClIKQxswXmVygkGYXMAjYANKY/qdfkVi7
SSlSotYPprvU2iK10PBkerOC8JMK2lUfxt6z9/nYGPiXg+fBDDY/ZpmWBBeiXxbP
UYP/yPo8f6iXA+DFg2jQmt0NEZi7lrbgs4G2NronvgaKXZ6lNnK5e6I7OHlfAVB7
bX3RHBGhxziYVjY0LyncDoPu8kR5VSQGUslbLz8IxZ704VbTYfbH94wnax58FLy1
zCGRZ8Ok3br0aRwVF2Qqwjsha0RIOepkR7GoOSYRWOikjFuxQIuuUU4PP++WZwYn
AXhMsbeaFUiQrDt4OLUzegGwoQlYjzyqlE2VUFsCAwEAAaOCAi8wggIrMB0GA1Ud
DgQWBBSd4klTVjhrHfDEsDtlQcsA4IAwIzAfBgNVHSMEGDAWgBQhgUzyyj4XmTSc
zUx+anbWP4NKPTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lZRk04c28tRjVrMG5NMU1mbXAyMWotRFNqMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvMDFmODUzLWQ0NDUtNGFjZS1hOGQ4LTIyNzAxYjRiYjQwNy8x
L25lSkpVMVk0YXgzd3hMQTdaVUhMQU9DQU1DTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
MDFmODUzLWQ0NDUtNGFjZS1hOGQ4LTIyNzAxYjRiYjQwNy8xL0lZRk04c28tRjVr
MG5NMU1mbXAyMWotRFNqMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBF
BggrBgEFBQcBBwEB/wQ2MDQwMgQCAAEwLAMEAi1QBAMEAC2SaAMEAC2SajAMAwQA
UnYZAwQFUnYAAwQBjWJKAwQA1eHuMA0GCSqGSIb3DQEBCwUAA4IBAQCPdJSl+U3z
/AFeAlqueIaGM7XPvxgbPrbZCSxjOTXKrNn+kZTIA/5tPXUGWhDFgDOxfBJ9dcX6
NBfyTlSRPaQgGnkwoVwxGAxO7UMstRxhpyY9B9zOcrnEzIIw9415+2PNGjizWtzH
waLIQo+rl4mkjhE8eh0eZgnAjjaufPySi/w6FGvkIeSqXUGGkKFy0vpH8MHLGvXo
lE0ATcPgsgbOM4YXPJCTUMmstMyyz3llVC4w0vaVi8B7oGHsYeil79GrSgAxvpMY
grnfkMqBldm19mYuUBAfoVCslIqkdjVazf3iOZW2iIA+O47ToRk+zdy0Gevht/zk
3h0+1e+j6CsQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org