Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f588dd-d84f-4bcf-97a0-061cf73e4750/1/gRSmxqBtBMIMyBlgEzyUN-DWwBw.roa
File:                     gRSmxqBtBMIMyBlgEzyUN-DWwBw.roa (raw, json)
Hash identifier:          CVqE+BodmNzvnibiIrsT6siqeRqNqTMOXuur9EMfTOQ=
Subject key identifier:   81:14:A6:C6:A0:6D:04:C2:0C:C8:19:60:13:3C:94:37:E0:D6:C0:1C
Certificate issuer:       /CN=57c5e8a4fe4d9e918c49db183b1154b3f202c60e
Certificate serial:       E944CC
Authority key identifier: 57:C5:E8:A4:FE:4D:9E:91:8C:49:DB:18:3B:11:54:B3:F2:02:C6:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8XopP5NnpGMSdsYOxFUs_ICxg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/f588dd-d84f-4bcf-97a0-061cf73e4750/1/gRSmxqBtBMIMyBlgEzyUN-DWwBw.roa
Signing time:             Sat 01 Jan 2022 00:55:46 +0000
ROA not before:           Sat 01 Jan 2022 00:55:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        194.9.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15287500 (0xe944cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c5e8a4fe4d9e918c49db183b1154b3f202c60e
        Validity
            Not Before: Jan  1 00:55:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8114a6c6a06d04c20cc81960133c9437e0d6c01c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6a:bc:30:0d:cd:cb:f3:71:13:ad:f7:bf:31:
                    32:05:05:f4:17:63:f6:7c:a5:06:b5:d9:ca:e1:d9:
                    c3:85:11:01:09:92:9a:25:a2:1b:82:5b:98:bc:eb:
                    33:f3:41:de:8a:cc:28:ce:bd:73:08:4f:2a:d3:06:
                    11:52:fd:6f:93:a1:2d:9e:d1:b6:44:37:56:68:c2:
                    05:29:46:23:0f:cc:98:30:d5:e3:80:c3:a1:56:7a:
                    db:89:31:7f:ee:5b:5f:33:7a:5d:0a:a2:12:6d:9c:
                    6f:83:72:d5:a0:36:72:dc:d4:37:9f:74:8b:53:fd:
                    8f:c4:ee:33:c6:08:fc:96:b3:6d:2f:5c:d4:16:65:
                    3c:da:ee:16:72:46:0a:ab:5d:f6:c1:a7:2f:dd:6a:
                    6f:31:a6:2e:3f:4f:33:52:ae:3a:71:81:ed:c3:86:
                    0a:a1:3e:ac:80:9a:ec:18:8e:a5:60:1d:e4:c0:bf:
                    f4:23:18:2e:55:8d:e3:e3:d4:44:e9:7c:7c:18:39:
                    22:81:eb:b3:63:49:21:4c:ee:16:9c:6d:4a:6c:fa:
                    f1:53:29:9f:df:b0:60:73:e9:b8:63:f5:45:84:39:
                    7f:7e:4b:c5:9d:d0:77:6c:8d:e4:8c:45:1e:8b:1e:
                    9c:d8:c3:61:4e:f7:57:cf:d7:dc:b7:11:eb:ff:a9:
                    58:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:14:A6:C6:A0:6D:04:C2:0C:C8:19:60:13:3C:94:37:E0:D6:C0:1C
            X509v3 Authority Key Identifier:
                keyid:57:C5:E8:A4:FE:4D:9E:91:8C:49:DB:18:3B:11:54:B3:F2:02:C6:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8XopP5NnpGMSdsYOxFUs_ICxg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f588dd-d84f-4bcf-97a0-061cf73e4750/1/gRSmxqBtBMIMyBlgEzyUN-DWwBw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f588dd-d84f-4bcf-97a0-061cf73e4750/1/V8XopP5NnpGMSdsYOxFUs_ICxg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.9.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:11:08:d4:98:09:92:cf:5e:20:58:6e:0e:7a:9b:ea:37:72:
         bd:fc:c6:57:36:48:04:71:b1:35:12:0e:df:a9:b1:78:9d:73:
         e1:16:7c:ba:f4:cd:89:11:9c:56:5c:a2:d6:d2:e1:77:74:b5:
         b7:4f:51:bc:f2:5a:8b:14:1a:70:49:a3:d2:fb:32:75:d6:7e:
         b9:30:58:f6:9d:97:8d:c6:bc:37:63:ac:e2:07:e0:1f:f1:a5:
         ec:8d:3b:69:73:f0:fb:68:52:fc:5b:6c:53:03:73:06:88:1f:
         a4:ad:c1:7e:d5:6d:96:24:2e:a8:a3:96:20:89:45:ae:5c:5a:
         d4:c9:21:40:cf:de:ba:97:db:5c:a4:d4:4a:c3:5a:6c:e8:70:
         d4:87:bb:ff:d4:34:b8:c9:c5:40:95:ad:b9:94:90:4c:b1:99:
         6f:43:b1:1a:23:47:1b:99:a6:57:f5:b4:85:d5:80:08:b5:32:
         e5:61:1f:e4:4f:c7:7d:a1:a6:bd:a5:95:52:98:07:b1:57:91:
         b2:3f:10:fb:e5:ed:87:0b:cb:c9:30:e0:2d:0b:bd:73:07:17:
         28:46:e4:8c:d3:7c:66:c5:95:f0:d8:e6:aa:8c:58:eb:68:c0:
         9f:d0:a7:c6:bb:f6:f7:22:e2:bf:97:a3:cb:0f:ea:fa:b8:e2:
         d4:1e:77:27
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAOlEzDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
N2M1ZThhNGZlNGQ5ZTkxOGM0OWRiMTgzYjExNTRiM2YyMDJjNjBlMB4XDTIyMDEw
MTAwNTU0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODExNGE2YzZhMDZk
MDRjMjBjYzgxOTYwMTMzYzk0MzdlMGQ2YzAxYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN5qvDANzcvzcROt978xMgUF9Bdj9nylBrXZyuHZw4URAQmS
miWiG4JbmLzrM/NB3orMKM69cwhPKtMGEVL9b5OhLZ7RtkQ3VmjCBSlGIw/MmDDV
44DDoVZ624kxf+5bXzN6XQqiEm2cb4Ny1aA2ctzUN590i1P9j8TuM8YI/JazbS9c
1BZlPNruFnJGCqtd9sGnL91qbzGmLj9PM1KuOnGB7cOGCqE+rICa7BiOpWAd5MC/
9CMYLlWN4+PUROl8fBg5IoHrs2NJIUzuFpxtSmz68VMpn9+wYHPpuGP1RYQ5f35L
xZ3Qd2yN5IxFHosenNjDYU73V8/X3LcR6/+pWKMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSBFKbGoG0EwgzIGWATPJQ34NbAHDAfBgNVHSMEGDAWgBRXxeik/k2ekYxJ
2xg7EVSz8gLGDjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Y4WG9wUDVObnBHTVNkc1lPeEZVc19JQ3hnNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2YvZjU4OGRkLWQ4NGYtNGJjZi05N2EwLTA2MWNmNzNlNDc1MC8x
L2dSU214cUJ0Qk1JTXlCbGdFenlVTi1EV3dCdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Yv
ZjU4OGRkLWQ4NGYtNGJjZi05N2EwLTA2MWNmNzNlNDc1MC8xL1Y4WG9wUDVObnBH
TVNkc1lPeEZVc19JQ3hnNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIJtDANBgkqhkiG9w0BAQsFAAOC
AQEAOBEI1JgJks9eIFhuDnqb6jdyvfzGVzZIBHGxNRIO36mxeJ1z4RZ8uvTNiRGc
Vlyi1tLhd3S1t09RvPJaixQacEmj0vsyddZ+uTBY9p2Xjca8N2Os4gfgH/Gl7I07
aXPw+2hS/FtsUwNzBogfpK3BftVtliQuqKOWIIlFrlxa1MkhQM/eupfbXKTUSsNa
bOhw1Ie7/9Q0uMnFQJWtuZSQTLGZb0OxGiNHG5mmV/W0hdWACLUy5WEf5E/HfaGm
vaWVUpgHsVeRsj8Q++XthwvLyTDgLQu9cwcXKEbkjNN8ZsWV8NjmqoxY62jAn9Cn
xrv29yLiv5ejyw/q+rji1B53Jw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:40 2024 by rpki-client on console-fra.rpki-client.org