Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/VwgI5l1uvOty7A_7J0ieLhnRn5o.roa
File:                     VwgI5l1uvOty7A_7J0ieLhnRn5o.roa (raw, json)
Hash identifier:          ih87Kp/4bJ4N+2AnWYkjfW9fluniLMx8uwUGBwZtqas=
Subject key identifier:   57:08:08:E6:5D:6E:BC:EB:72:EC:0F:FB:27:48:9E:2E:19:D1:9F:9A
Certificate issuer:       /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial:       010A590F
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/VwgI5l1uvOty7A_7J0ieLhnRn5o.roa
Signing time:             Thu 09 Jun 2022 16:50:04 +0000
ROA not before:           Thu 09 Jun 2022 16:50:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209242
IP address blocks:        185.244.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17455375 (0x10a590f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
        Validity
            Not Before: Jun  9 16:50:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=570808e65d6ebceb72ec0ffb27489e2e19d19f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:16:86:21:66:9b:55:17:60:49:86:4a:65:86:
                    4b:a3:be:cc:c5:e6:77:0d:2b:43:67:f8:65:cf:26:
                    65:f1:94:a2:aa:7b:be:7b:89:a7:8a:40:07:4b:00:
                    35:7e:29:c4:ae:13:f2:2b:e6:8a:97:f9:a5:70:47:
                    5e:99:16:67:e9:4f:ef:0f:0c:f6:8a:62:ac:50:21:
                    4c:72:b5:58:4f:3d:28:bc:0d:53:b0:56:10:b4:44:
                    3d:ec:dc:90:a4:a9:4a:cb:9b:2a:a5:8f:d2:8d:f2:
                    80:c2:ed:04:bf:e0:1c:d8:60:97:f3:40:f7:df:e7:
                    16:03:e4:b9:2a:04:09:67:a2:f1:c8:9c:23:2e:cd:
                    95:fb:fb:0f:79:c0:d0:0e:02:43:f5:7a:a4:94:6f:
                    e4:b9:8b:ef:c6:df:32:ef:da:5d:45:3f:70:99:b1:
                    d1:95:13:30:d4:d6:68:2d:e8:f9:3a:d5:55:9f:38:
                    19:31:22:c5:06:a7:87:f3:1b:e8:23:42:aa:1f:a0:
                    8c:4a:c1:9e:8d:66:b5:20:ce:61:0f:f3:ac:71:94:
                    55:b5:ab:aa:8a:a7:c3:d6:fd:3e:2b:ae:d1:21:e5:
                    e6:e2:db:2d:63:7a:9d:b4:b6:e4:59:e1:dc:c5:79:
                    e1:bc:02:fe:42:df:fa:3f:54:5f:a4:e9:5d:65:81:
                    05:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:08:08:E6:5D:6E:BC:EB:72:EC:0F:FB:27:48:9E:2E:19:D1:9F:9A
            X509v3 Authority Key Identifier:
                keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/VwgI5l1uvOty7A_7J0ieLhnRn5o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.244.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:e8:3a:02:ac:4c:79:88:f4:a6:ef:19:c8:2a:59:cb:a3:87:
         55:1f:e3:39:1d:1d:a9:5b:85:fc:db:ea:a5:d6:6e:d9:7b:5f:
         67:9c:83:b6:80:f2:10:34:2e:b3:73:bf:04:1e:3a:74:ff:f1:
         7d:02:8b:a5:f6:ab:c5:54:a0:23:04:39:e4:ad:3b:59:90:09:
         16:56:88:61:90:3b:b1:8f:8d:8a:80:6a:fb:e3:a5:9f:e6:7d:
         29:bd:95:fb:cf:4b:20:b5:bd:75:d1:d7:da:46:e7:04:56:25:
         00:8a:c5:fe:e1:89:56:da:5e:30:1f:62:f4:a1:42:bf:8b:2b:
         37:8e:72:6f:55:d1:8f:98:f6:88:fe:07:68:e3:e0:d2:70:1c:
         82:ac:50:e6:ba:f0:60:01:e8:cf:03:96:59:4f:30:6a:f3:f4:
         b4:99:95:95:63:58:e9:f4:b0:14:d3:58:1f:c7:d5:59:c8:90:
         93:96:47:a5:b1:2a:74:d6:61:40:77:39:51:84:83:bb:0d:e3:
         57:af:45:37:e2:37:d7:db:7b:bf:47:a4:09:98:f7:cb:ca:fc:
         f8:ad:2d:d0:84:20:6c:4b:9a:d3:21:54:47:4b:09:b7:7a:83:
         3a:89:73:d4:82:95:41:f0:ff:b7:b5:b4:ab:25:ec:d8:f8:b6:
         76:71:54:7b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAQpZDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YjE0NWE4YmRmMmJjYTE1MGYyNWVkNTRhMjc3YjhmNjUzZWZkYjNlMB4XDTIyMDYw
OTE2NTAwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTcwODA4ZTY1ZDZl
YmNlYjcyZWMwZmZiMjc0ODllMmUxOWQxOWY5YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ4WhiFmm1UXYEmGSmWGS6O+zMXmdw0rQ2f4Zc8mZfGUoqp7
vnuJp4pAB0sANX4pxK4T8ivmipf5pXBHXpkWZ+lP7w8M9opirFAhTHK1WE89KLwN
U7BWELREPezckKSpSsubKqWP0o3ygMLtBL/gHNhgl/NA99/nFgPkuSoECWei8cic
Iy7Nlfv7D3nA0A4CQ/V6pJRv5LmL78bfMu/aXUU/cJmx0ZUTMNTWaC3o+TrVVZ84
GTEixQanh/Mb6CNCqh+gjErBno1mtSDOYQ/zrHGUVbWrqoqnw9b9Piuu0SHl5uLb
LWN6nbS25Fnh3MV54bwC/kLf+j9UX6TpXWWBBd8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRXCAjmXW6863LsD/snSJ4uGdGfmjAfBgNVHSMEGDAWgBQrFFqL3yvKFQ8l
7VSid7j2U+/bPjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0t4UmFpOThyeWhVUEplMVVvbmU0OWxQdjJ6NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjEvMGQ4YzhmLWZmMmMtNGRhOC1iNDQzLTMwNDBiZWQzY2NjZC8x
L1Z3Z0k1bDF1dk90eTdBXzdKMGllTGhuUm41by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEv
MGQ4YzhmLWZmMmMtNGRhOC1iNDQzLTMwNDBiZWQzY2NjZC8xL0t4UmFpOThyeWhV
UEplMVVvbmU0OWxQdjJ6NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn0ajANBgkqhkiG9w0BAQsFAAOC
AQEAHOg6AqxMeYj0pu8ZyCpZy6OHVR/jOR0dqVuF/NvqpdZu2XtfZ5yDtoDyEDQu
s3O/BB46dP/xfQKLpfarxVSgIwQ55K07WZAJFlaIYZA7sY+NioBq++Oln+Z9Kb2V
+89LILW9ddHX2kbnBFYlAIrF/uGJVtpeMB9i9KFCv4srN45yb1XRj5j2iP4HaOPg
0nAcgqxQ5rrwYAHozwOWWU8wavP0tJmVlWNY6fSwFNNYH8fVWciQk5ZHpbEqdNZh
QHc5UYSDuw3jV69FN+I319t7v0ekCZj3y8r8+K0t0IQgbEua0yFUR0sJt3qDOolz
1IKVQfD/t7W0qyXs2Pi2dnFUew==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:09 2024 by rpki-client on console-fra.rpki-client.org