Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b1e1fc-3fe2-4799-8eef-e022dd0fa3e1/1/5HJyxc76ezunR0Op-Gda6YXep1Y.roa
File:                     5HJyxc76ezunR0Op-Gda6YXep1Y.roa (raw, json)
Hash identifier:          Ptp3JSif/dPYNEdkf95uH9OkNLJilFFMfZyRwHGEG88=
Subject key identifier:   E4:72:72:C5:CE:FA:7B:3B:A7:47:43:A9:F8:67:5A:E9:85:DE:A7:56
Certificate issuer:       /CN=7f94b73b4172fb31b76bb9f1467b36e5ab9a2edd
Certificate serial:       01A5612D
Authority key identifier: 7F:94:B7:3B:41:72:FB:31:B7:6B:B9:F1:46:7B:36:E5:AB:9A:2E:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f5S3O0Fy-zG3a7nxRns25auaLt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b1e1fc-3fe2-4799-8eef-e022dd0fa3e1/1/5HJyxc76ezunR0Op-Gda6YXep1Y.roa
Signing time:             Sat 01 Jan 2022 07:53:32 +0000
ROA not before:           Sat 01 Jan 2022 07:53:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        85.8.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27615533 (0x1a5612d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f94b73b4172fb31b76bb9f1467b36e5ab9a2edd
        Validity
            Not Before: Jan  1 07:53:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e47272c5cefa7b3ba74743a9f8675ae985dea756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a8:00:35:6a:98:18:07:06:b0:65:b1:ab:13:
                    52:d3:5e:62:c3:63:90:c8:d6:73:e5:d5:0e:e4:5f:
                    63:95:4d:b7:7d:d2:be:32:f0:8f:42:2e:e3:8d:55:
                    ab:87:f7:8d:18:22:b9:a6:e7:8a:55:1d:6b:c8:76:
                    23:b0:8a:35:b2:a4:4d:42:48:22:e5:0c:d8:c6:6d:
                    f1:79:7d:fd:6f:78:b2:73:75:e6:96:43:9c:30:d7:
                    68:0d:b7:b1:ab:a7:09:3f:69:7b:03:a1:9c:6a:7d:
                    33:01:25:09:be:ac:88:5d:4b:7a:6e:e5:98:66:a9:
                    50:e8:d4:7d:42:9d:3c:6e:4c:0b:06:73:d8:75:8f:
                    2a:06:ad:37:30:1c:52:af:01:6b:ba:87:46:0b:12:
                    60:35:23:87:55:03:db:09:e8:d2:df:4d:68:8b:fc:
                    bf:1f:1e:e8:bf:b3:ba:93:38:7e:5e:fc:ae:4f:39:
                    94:31:bf:bb:b4:bd:59:1a:b0:a1:10:df:3c:2a:37:
                    bc:9b:46:f5:f7:33:a0:a6:05:79:d6:fa:f8:0d:c8:
                    e3:f1:da:c9:b5:f4:32:0f:ad:6c:b0:92:20:2b:8f:
                    d6:99:5a:e2:e5:a2:d9:6c:91:07:77:bc:4e:e7:08:
                    7f:11:fe:84:dd:55:d3:7d:aa:24:24:a4:c6:7e:c7:
                    1f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:72:72:C5:CE:FA:7B:3B:A7:47:43:A9:F8:67:5A:E9:85:DE:A7:56
            X509v3 Authority Key Identifier:
                keyid:7F:94:B7:3B:41:72:FB:31:B7:6B:B9:F1:46:7B:36:E5:AB:9A:2E:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5S3O0Fy-zG3a7nxRns25auaLt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1e1fc-3fe2-4799-8eef-e022dd0fa3e1/1/5HJyxc76ezunR0Op-Gda6YXep1Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1e1fc-3fe2-4799-8eef-e022dd0fa3e1/1/f5S3O0Fy-zG3a7nxRns25auaLt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.8.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:cb:7f:23:fe:d1:f6:61:6d:14:e6:76:14:d8:a8:66:f0:22:
         17:7d:70:a8:fd:73:13:6f:69:a6:88:4d:c4:20:c8:e9:b8:a5:
         23:1b:0d:44:b7:55:0e:d7:07:bc:bb:74:c0:1d:b7:5f:21:36:
         da:c4:91:f8:8f:65:59:64:1a:5b:74:a2:25:d8:36:1a:97:d7:
         04:6b:57:c7:19:17:07:c2:aa:9b:e9:ab:53:5b:f2:21:7a:76:
         e9:28:6b:a2:f2:f9:80:3a:58:2d:11:26:0f:e6:16:86:f4:1e:
         40:51:ec:22:cd:c7:c2:c4:68:35:5e:56:c7:1c:db:73:ac:85:
         9c:7e:3d:f3:3b:d1:1d:ba:eb:e4:f2:b2:f4:2a:35:3e:36:84:
         4c:c2:5b:42:55:a1:42:74:00:45:f7:89:6f:84:d4:88:7b:e5:
         4b:03:4d:98:f2:ee:15:2b:d0:ef:3e:2d:c7:5a:bf:91:96:1d:
         8b:14:0f:fe:28:b2:80:bf:6d:7b:70:4d:26:7e:55:bc:e9:22:
         c9:9c:d2:21:98:43:67:c0:79:ee:ee:11:73:cf:62:b2:ff:25:
         4a:51:72:bb:ba:3e:6f:9a:34:d6:c9:11:c4:df:80:92:b0:b6:
         ad:19:70:e8:4a:d7:39:67:80:0a:6c:9d:63:c5:df:bd:aa:61:
         2d:20:26:03
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAaVhLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
Zjk0YjczYjQxNzJmYjMxYjc2YmI5ZjE0NjdiMzZlNWFiOWEyZWRkMB4XDTIyMDEw
MTA3NTMzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTQ3MjcyYzVjZWZh
N2IzYmE3NDc0M2E5Zjg2NzVhZTk4NWRlYTc1NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKaoADVqmBgHBrBlsasTUtNeYsNjkMjWc+XVDuRfY5VNt33S
vjLwj0Iu441Vq4f3jRgiuabnilUda8h2I7CKNbKkTUJIIuUM2MZt8Xl9/W94snN1
5pZDnDDXaA23saunCT9pewOhnGp9MwElCb6siF1Lem7lmGapUOjUfUKdPG5MCwZz
2HWPKgatNzAcUq8Ba7qHRgsSYDUjh1UD2wno0t9NaIv8vx8e6L+zupM4fl78rk85
lDG/u7S9WRqwoRDfPCo3vJtG9fczoKYFedb6+A3I4/HaybX0Mg+tbLCSICuP1pla
4uWi2WyRB3e8TucIfxH+hN1V032qJCSkxn7HH/UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTkcnLFzvp7O6dHQ6n4Z1rphd6nVjAfBgNVHSMEGDAWgBR/lLc7QXL7Mbdr
ufFGezblq5ou3TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Y1UzNPMEZ5LXpHM2E3bnhSbnMyNWF1YUx0MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDAvYjFlMWZjLTNmZTItNDc5OS04ZWVmLWUwMjJkZDBmYTNlMS8x
LzVISnl4Yzc2ZXp1blIwT3AtR2RhNllYZXAxWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAv
YjFlMWZjLTNmZTItNDc5OS04ZWVmLWUwMjJkZDBmYTNlMS8xL2Y1UzNPMEZ5LXpH
M2E3bnhSbnMyNWF1YUx0MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFUIgjANBgkqhkiG9w0BAQsFAAOC
AQEAVst/I/7R9mFtFOZ2FNioZvAiF31wqP1zE29ppohNxCDI6bilIxsNRLdVDtcH
vLt0wB23XyE22sSR+I9lWWQaW3SiJdg2GpfXBGtXxxkXB8Kqm+mrU1vyIXp26Shr
ovL5gDpYLREmD+YWhvQeQFHsIs3HwsRoNV5Wxxzbc6yFnH498zvRHbrr5PKy9Co1
PjaETMJbQlWhQnQARfeJb4TUiHvlSwNNmPLuFSvQ7z4tx1q/kZYdixQP/iiygL9t
e3BNJn5VvOkiyZzSIZhDZ8B57u4Rc89isv8lSlFyu7o+b5o01skRxN+AkrC2rRlw
6ErXOWeACmydY8XfvaphLSAmAw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:51 2024 by rpki-client on console-fra.rpki-client.org