Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/2391f1-d41f-4501-8fbd-6c8a371e8cec/1/ODLvKSAKtnnj32P7ytqgAnZkS_k.roa
File:                     ODLvKSAKtnnj32P7ytqgAnZkS_k.roa (raw, json)
Hash identifier:          +pfjsYXUHfStL7bWcdAY/TveyjpCLdnSJ1VIwoiZs3E=
Subject key identifier:   38:32:EF:29:20:0A:B6:79:E3:DF:63:FB:CA:DA:A0:02:76:64:4B:F9
Certificate issuer:       /CN=aee2ebc3fc30bc7db9d53760790c53a61df66735
Certificate serial:       017DB2FB
Authority key identifier: AE:E2:EB:C3:FC:30:BC:7D:B9:D5:37:60:79:0C:53:A6:1D:F6:67:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruLrw_wwvH251TdgeQxTph32ZzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/2391f1-d41f-4501-8fbd-6c8a371e8cec/1/ODLvKSAKtnnj32P7ytqgAnZkS_k.roa
Signing time:             Sat 01 Jan 2022 12:58:16 +0000
ROA not before:           Sat 01 Jan 2022 12:58:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42724
IP address blocks:        194.62.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25015035 (0x17db2fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee2ebc3fc30bc7db9d53760790c53a61df66735
        Validity
            Not Before: Jan  1 12:58:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3832ef29200ab679e3df63fbcadaa00276644bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:65:4f:b2:ff:2d:90:bb:c0:b0:a5:07:b7:81:
                    b1:c9:ee:53:b6:5c:11:5a:3e:e9:c6:fa:5d:ec:56:
                    26:da:b8:ca:28:4a:5e:99:44:07:93:3f:0a:b1:ce:
                    88:b0:7a:e8:1e:4d:da:47:3f:6a:76:ed:1e:85:3d:
                    7c:1b:34:d5:7a:17:60:96:ae:49:60:44:20:fb:fb:
                    b3:8b:8f:1d:b8:0d:55:95:82:be:3c:f3:90:6b:5c:
                    4a:2f:20:0e:ba:29:41:93:01:cd:8d:b3:14:82:f9:
                    4c:e5:c9:e1:56:0b:0b:3c:21:74:34:0e:c4:28:8f:
                    29:cd:d8:04:38:4c:05:3f:2a:cc:ec:9d:f7:4e:b6:
                    53:dc:a4:3f:0f:84:19:d6:5c:5f:cf:dc:e1:2f:dc:
                    d7:ab:ee:55:0d:37:60:8d:1c:bc:9f:be:83:73:fd:
                    7b:1d:fd:c2:f3:db:03:b7:23:53:d8:d4:60:fa:a8:
                    a1:86:dc:a7:fb:2c:3c:6b:15:99:a5:a7:e2:14:87:
                    fc:ff:11:2b:f6:94:e4:ee:72:55:ef:6e:07:e8:2d:
                    b5:2c:a6:af:50:2b:0c:b7:e4:d5:11:d0:ad:57:4f:
                    74:3f:9b:50:81:04:5c:5e:77:8c:13:72:68:22:1f:
                    bd:7c:fe:20:b6:9a:bd:73:ec:3e:31:cb:d7:17:e6:
                    4a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:32:EF:29:20:0A:B6:79:E3:DF:63:FB:CA:DA:A0:02:76:64:4B:F9
            X509v3 Authority Key Identifier:
                keyid:AE:E2:EB:C3:FC:30:BC:7D:B9:D5:37:60:79:0C:53:A6:1D:F6:67:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruLrw_wwvH251TdgeQxTph32ZzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2391f1-d41f-4501-8fbd-6c8a371e8cec/1/ODLvKSAKtnnj32P7ytqgAnZkS_k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2391f1-d41f-4501-8fbd-6c8a371e8cec/1/ruLrw_wwvH251TdgeQxTph32ZzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.62.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:08:06:be:13:88:50:58:25:6d:9f:b4:d1:4d:f4:38:c2:12:
         0b:34:9c:e4:54:98:a0:05:69:3b:68:42:c8:6e:ca:1a:ab:89:
         eb:e1:19:a4:a7:a9:fc:92:60:05:65:23:d3:9f:3e:98:97:7c:
         f9:cf:9b:2f:8b:f7:01:62:b9:94:87:66:9a:95:3d:e9:b5:60:
         3f:71:bf:5f:7f:db:63:1d:87:9b:5d:d4:3a:0e:68:aa:02:a4:
         ed:b4:c9:ff:8d:a9:00:a1:e7:a1:2f:22:d5:36:fb:76:cc:8c:
         a6:4a:91:5c:70:cf:85:b0:db:7b:72:56:a0:d7:fe:c2:ba:82:
         8e:01:e5:e7:f8:11:64:8a:b7:0a:c2:cf:c0:29:ec:12:f3:65:
         d5:bd:5b:d6:7a:be:d7:05:60:0b:77:3c:cc:29:89:93:f5:39:
         c5:42:a3:a6:e9:2d:96:d3:f1:31:c4:14:ae:72:d4:4d:93:88:
         3d:68:45:4f:14:99:10:0b:12:59:3f:10:37:95:18:f2:fb:d0:
         e6:28:23:06:f8:4a:c6:57:46:8a:d4:cf:dd:b9:bb:62:c4:5e:
         f3:e2:13:b2:c4:68:f8:0c:01:92:e9:42:90:a0:1f:a3:0e:66:
         4c:d7:fa:05:79:09:a5:c4:eb:3d:1c:02:1f:8b:8f:1b:1f:00:
         2e:41:54:8a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAX2y+zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ZWUyZWJjM2ZjMzBiYzdkYjlkNTM3NjA3OTBjNTNhNjFkZjY2NzM1MB4XDTIyMDEw
MTEyNTgxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzgzMmVmMjkyMDBh
YjY3OWUzZGY2M2ZiY2FkYWEwMDI3NjY0NGJmOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKhlT7L/LZC7wLClB7eBscnuU7ZcEVo+6cb6XexWJtq4yihK
XplEB5M/CrHOiLB66B5N2kc/anbtHoU9fBs01XoXYJauSWBEIPv7s4uPHbgNVZWC
vjzzkGtcSi8gDropQZMBzY2zFIL5TOXJ4VYLCzwhdDQOxCiPKc3YBDhMBT8qzOyd
9062U9ykPw+EGdZcX8/c4S/c16vuVQ03YI0cvJ++g3P9ex39wvPbA7cjU9jUYPqo
oYbcp/ssPGsVmaWn4hSH/P8RK/aU5O5yVe9uB+gttSymr1ArDLfk1RHQrVdPdD+b
UIEEXF53jBNyaCIfvXz+ILaavXPsPjHL1xfmSusCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ4Mu8pIAq2eePfY/vK2qACdmRL+TAfBgNVHSMEGDAWgBSu4uvD/DC8fbnV
N2B5DFOmHfZnNTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3J1THJ3X3d3dkgyNTFUZGdlUXhUcGgzMlp6VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmIvMjM5MWYxLWQ0MWYtNDUwMS04ZmJkLTZjOGEzNzFlOGNlYy8x
L09ETHZLU0FLdG5uajMyUDd5dHFnQW5aa1Nfay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIv
MjM5MWYxLWQ0MWYtNDUwMS04ZmJkLTZjOGEzNzFlOGNlYy8xL3J1THJ3X3d3dkgy
NTFUZGdlUXhUcGgzMlp6VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMI+KDANBgkqhkiG9w0BAQsFAAOC
AQEAbwgGvhOIUFglbZ+00U30OMISCzSc5FSYoAVpO2hCyG7KGquJ6+EZpKep/JJg
BWUj058+mJd8+c+bL4v3AWK5lIdmmpU96bVgP3G/X3/bYx2Hm13UOg5oqgKk7bTJ
/42pAKHnoS8i1Tb7dsyMpkqRXHDPhbDbe3JWoNf+wrqCjgHl5/gRZIq3CsLPwCns
EvNl1b1b1nq+1wVgC3c8zCmJk/U5xUKjpuktltPxMcQUrnLUTZOIPWhFTxSZEAsS
WT8QN5UY8vvQ5igjBvhKxldGitTP3bm7YsRe8+ITssRo+AwBkulCkKAfow5mTNf6
BXkJpcTrPRwCH4uPGx8ALkFUig==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:38 2024 by rpki-client on console-fra.rpki-client.org