Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/67703c-0ef9-465e-8a5a-314f729fa595/1/PTConW6F6d3UEQFzK7XVjDFI1JY.roa
File:                     PTConW6F6d3UEQFzK7XVjDFI1JY.roa (raw, json)
Hash identifier:          t/S3ywD9Q+/k2YNSn/eGQaiI/xuaIW2mXbeJZPGJIwg=
Subject key identifier:   3D:30:A8:9D:6E:85:E9:DD:D4:11:01:73:2B:B5:D5:8C:31:48:D4:96
Certificate issuer:       /CN=a28815e43926af7eb961de7b703aed6328953e30
Certificate serial:       018A830DC51E9C21CA2754D96661583002F5
Authority key identifier: A2:88:15:E4:39:26:AF:7E:B9:61:DE:7B:70:3A:ED:63:28:95:3E:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oogV5Dkmr365Yd57cDrtYyiVPjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/67703c-0ef9-465e-8a5a-314f729fa595/1/PTConW6F6d3UEQFzK7XVjDFI1JY.roa
Signing time:             Mon 11 Sep 2023 07:03:52 +0000
ROA not before:           Mon 11 Sep 2023 07:03:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24935
IP address blocks:        94.158.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:83:0d:c5:1e:9c:21:ca:27:54:d9:66:61:58:30:02:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a28815e43926af7eb961de7b703aed6328953e30
        Validity
            Not Before: Sep 11 07:03:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3d30a89d6e85e9ddd41101732bb5d58c3148d496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:92:d1:38:04:85:6b:77:e1:32:2a:8b:df:11:
                    68:9e:d7:d9:74:d0:72:2c:da:06:bc:e5:d4:81:69:
                    ee:be:e1:57:b4:45:19:f6:b9:d0:19:66:b1:81:ea:
                    b6:83:84:20:ba:08:a5:d2:b2:00:e2:7d:1d:ec:96:
                    ba:80:67:b5:e6:1e:70:e1:b3:17:d3:fa:c7:79:32:
                    01:a6:cf:67:57:ac:01:c5:b0:35:3c:f9:71:13:13:
                    4f:5e:e1:b5:d5:18:ed:84:b2:61:3e:ad:58:d5:e7:
                    68:cd:5c:0d:71:8a:b3:bd:bf:5b:26:17:3a:07:d2:
                    d8:26:8a:99:36:c9:ff:52:e9:99:bb:1c:63:34:55:
                    3f:89:cb:c6:fe:c3:d0:50:8e:fd:5b:9b:b6:e9:a7:
                    93:3a:ae:e9:56:d4:f8:a5:0f:55:de:12:ef:ec:ec:
                    8b:8d:1b:7f:8d:c5:eb:94:61:fd:bd:bc:fe:22:64:
                    e8:6d:71:c1:25:62:b4:c5:03:38:96:89:61:40:0a:
                    4b:d7:ab:06:b0:2c:c8:e2:46:d4:dd:a5:fd:76:94:
                    7a:5a:c2:5c:8a:8d:e9:54:d1:8a:66:95:d3:79:74:
                    f7:4f:8b:01:24:1d:da:8c:fa:84:09:ff:c4:43:f1:
                    b9:5a:fb:37:a7:6c:15:73:3b:2c:21:a6:85:d6:19:
                    1f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:30:A8:9D:6E:85:E9:DD:D4:11:01:73:2B:B5:D5:8C:31:48:D4:96
            X509v3 Authority Key Identifier:
                keyid:A2:88:15:E4:39:26:AF:7E:B9:61:DE:7B:70:3A:ED:63:28:95:3E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oogV5Dkmr365Yd57cDrtYyiVPjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/67703c-0ef9-465e-8a5a-314f729fa595/1/PTConW6F6d3UEQFzK7XVjDFI1JY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/67703c-0ef9-465e-8a5a-314f729fa595/1/oogV5Dkmr365Yd57cDrtYyiVPjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.158.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:2f:ab:0d:9b:7f:bc:a9:55:16:a0:55:6f:c3:75:38:67:4d:
         5d:da:fa:88:00:50:67:a1:11:e2:3d:e4:48:35:3a:91:ba:5d:
         af:3e:04:42:3e:1f:2c:37:63:83:f0:56:ac:24:13:78:32:53:
         8d:e8:c1:99:bc:c5:45:fa:60:3c:49:99:6a:bd:97:6a:00:21:
         a6:08:9a:c3:7f:cc:a2:29:18:67:3a:3f:51:af:f6:1e:58:b9:
         a6:42:f6:fb:b9:27:e1:67:fd:b9:5e:69:67:9d:59:4c:ec:69:
         57:b4:4c:a5:39:db:fd:98:3a:7d:43:81:a5:ee:44:12:53:82:
         75:ae:e3:36:21:c4:7f:29:d5:4c:cf:4b:11:f0:df:14:90:9b:
         6c:f1:7f:34:8f:20:9b:61:51:08:aa:2d:31:75:da:f1:03:d6:
         44:14:4f:3f:8a:71:d4:02:ae:14:e8:4f:af:57:89:43:a9:2a:
         32:a1:15:de:b8:c2:74:31:61:f3:7f:d3:bd:d7:b5:db:5a:77:
         2d:48:6d:43:7a:a7:99:70:f4:d5:c2:7c:6f:04:3d:85:fd:88:
         17:15:6a:14:28:e6:85:4a:25:02:88:36:d7:1f:2e:41:02:26:
         d7:1f:1e:8b:6b:42:87:63:69:00:37:9d:88:96:33:55:55:ff:
         2c:f7:87:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqDDcUenCHKJ1TZZmFYMAL1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyODgxNWU0MzkyNmFmN2ViOTYxZGU3YjcwM2FlZDYzMjg5
NTNlMzAwHhcNMjMwOTExMDcwMzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDMwYTg5ZDZlODVlOWRkZDQxMTAxNzMyYmI1ZDU4YzMxNDhkNDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ZLROASFa3fhMiqL3xFontfZdNBy
LNoGvOXUgWnuvuFXtEUZ9rnQGWaxgeq2g4Qgugil0rIA4n0d7Ja6gGe15h5w4bMX
0/rHeTIBps9nV6wBxbA1PPlxExNPXuG11RjthLJhPq1Y1edozVwNcYqzvb9bJhc6
B9LYJoqZNsn/UumZuxxjNFU/icvG/sPQUI79W5u26aeTOq7pVtT4pQ9V3hLv7OyL
jRt/jcXrlGH9vbz+ImTobXHBJWK0xQM4lolhQApL16sGsCzI4kbU3aX9dpR6WsJc
io3pVNGKZpXTeXT3T4sBJB3ajPqECf/EQ/G5Wvs3p2wVczssIaaF1hkftQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD0wqJ1uhend1BEBcyu11YwxSNSWMB8GA1UdIwQY
MBaAFKKIFeQ5Jq9+uWHee3A67WMolT4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb29nVjVEa21yMzY1WWQ1N2NEcnRZeWlWUGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82NzcwM2MtMGVmOS00NjVlLThhNWEt
MzE0ZjcyOWZhNTk1LzEvUFRDb25XNkY2ZDNVRVFGeks3WFZqREZJMUpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS82NzcwM2MtMGVmOS00NjVlLThhNWEtMzE0ZjcyOWZhNTk1
LzEvb29nVjVEa21yMzY1WWQ1N2NEcnRZeWlWUGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXp62MA0G
CSqGSIb3DQEBCwUAA4IBAQA0L6sNm3+8qVUWoFVvw3U4Z01d2vqIAFBnoRHiPeRI
NTqRul2vPgRCPh8sN2OD8FasJBN4MlON6MGZvMVF+mA8SZlqvZdqACGmCJrDf8yi
KRhnOj9Rr/YeWLmmQvb7uSfhZ/25XmlnnVlM7GlXtEylOdv9mDp9Q4Gl7kQSU4J1
ruM2IcR/KdVMz0sR8N8UkJts8X80jyCbYVEIqi0xddrxA9ZEFE8/inHUAq4U6E+v
V4lDqSoyoRXeuMJ0MWHzf9O917XbWnctSG1DeqeZcPTVwnxvBD2F/YgXFWoUKOaF
SiUCiDbXHy5BAibXHx6La0KHY2kAN52IljNVVf8s94fe
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:46 2024 by rpki-client on console-fra.rpki-client.org