Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/D4Zwrp66fi7c0cmwpnKh9tFaEx8.roa
File:                     D4Zwrp66fi7c0cmwpnKh9tFaEx8.roa (raw, json)
Hash identifier:          r9Agb+JFr05dI/iH2u6kV5BMqeqGFEiON0ZGWotlQFQ=
Subject key identifier:   0F:86:70:AE:9E:BA:7E:2E:DC:D1:C9:B0:A6:72:A1:F6:D1:5A:13:1F
Certificate issuer:       /CN=51783c6de2933a3075abaa2d8bad23f03ea79c10
Certificate serial:       025A94C6
Authority key identifier: 51:78:3C:6D:E2:93:3A:30:75:AB:AA:2D:8B:AD:23:F0:3E:A7:9C:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UXg8beKTOjB1q6oti60j8D6nnBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/D4Zwrp66fi7c0cmwpnKh9tFaEx8.roa
Signing time:             Wed 11 May 2022 07:04:01 +0000
ROA not before:           Wed 11 May 2022 07:04:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     397373
IP address blocks:        195.178.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39490758 (0x25a94c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51783c6de2933a3075abaa2d8bad23f03ea79c10
        Validity
            Not Before: May 11 07:04:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0f8670ae9eba7e2edcd1c9b0a672a1f6d15a131f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:01:fd:e3:ad:c3:42:e5:b8:8f:0b:7a:6d:27:
                    75:8c:7c:83:71:67:ff:b2:75:fc:94:e3:02:39:bb:
                    ca:37:79:0d:b4:8a:fd:12:23:df:63:70:c8:f5:a6:
                    63:ec:10:41:9d:60:0b:51:f5:bc:f1:de:cf:f1:9d:
                    3e:53:88:7d:75:54:01:d6:66:05:a9:95:b6:2f:ba:
                    87:e0:56:82:05:a8:06:c8:fc:1c:30:81:00:33:97:
                    b0:cd:05:79:85:78:24:55:ff:94:90:a7:12:cf:54:
                    85:f9:3a:cb:9d:a0:c0:41:c6:02:e9:2f:11:da:84:
                    e2:e4:d7:93:79:26:f5:28:54:ec:71:d8:42:dd:46:
                    2c:e6:27:e5:33:c2:ee:29:88:7b:1c:67:53:bd:67:
                    06:ea:c7:6e:9c:e1:53:08:eb:f0:09:38:2d:0f:63:
                    42:75:1f:e3:d0:48:7c:3d:93:53:26:34:e7:27:e4:
                    27:06:e1:a6:ff:79:04:d9:4f:1c:78:70:7e:dc:4c:
                    59:54:4d:c7:36:ce:e3:e3:31:a8:b8:4d:0b:b5:25:
                    77:30:51:49:c0:58:35:c5:ab:96:28:5e:2a:11:f4:
                    0a:41:4d:db:ff:93:4e:16:89:00:68:69:91:67:6e:
                    b5:20:f9:3c:e2:4f:d2:62:dc:5a:47:bc:62:68:d5:
                    29:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:86:70:AE:9E:BA:7E:2E:DC:D1:C9:B0:A6:72:A1:F6:D1:5A:13:1F
            X509v3 Authority Key Identifier:
                keyid:51:78:3C:6D:E2:93:3A:30:75:AB:AA:2D:8B:AD:23:F0:3E:A7:9C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXg8beKTOjB1q6oti60j8D6nnBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/D4Zwrp66fi7c0cmwpnKh9tFaEx8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/UXg8beKTOjB1q6oti60j8D6nnBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.178.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:bd:82:76:60:2a:fb:95:61:57:01:e6:53:8f:6c:f3:df:bc:
         10:e7:7c:5a:15:a1:a0:d5:62:db:4d:47:06:22:22:4c:f9:02:
         7b:e9:f7:4a:91:aa:4d:e7:b2:29:ad:27:05:ca:b1:bf:5c:71:
         db:2b:24:5e:0e:8d:b0:ac:f4:5a:86:7d:44:db:ff:64:97:f3:
         d8:36:d4:fb:37:a2:e5:1a:53:c4:40:30:52:4b:8e:e7:93:87:
         70:bc:39:05:21:79:fb:6d:9f:f0:ee:71:5c:6e:b1:ce:22:20:
         b0:6c:6b:f5:09:9f:1a:27:23:c1:e5:7f:2c:11:f0:28:34:cb:
         5b:b2:ae:e9:3f:84:89:ca:2a:10:9a:c9:23:9a:a3:3d:70:fc:
         ea:ed:d6:5d:c2:6d:4d:47:b7:a4:04:e3:e4:70:53:d6:c2:c3:
         4b:6a:72:ae:5d:48:0e:7e:4a:cc:27:27:8b:d8:1a:2e:a1:77:
         40:4a:70:82:e5:9d:bc:07:b4:b1:a9:00:23:37:5c:9b:d2:05:
         aa:23:3e:ad:64:bf:9a:31:a0:97:dc:e5:b1:a1:1f:17:c4:65:
         a1:97:f1:eb:fa:a5:6a:ac:40:b6:f6:16:98:82:91:70:5e:fb:
         f4:b0:ae:89:84:cb:2b:14:b7:b4:d1:bc:13:0f:3e:fa:77:ed:
         07:60:31:9c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAlqUxjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MTc4M2M2ZGUyOTMzYTMwNzVhYmFhMmQ4YmFkMjNmMDNlYTc5YzEwMB4XDTIyMDUx
MTA3MDQwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGY4NjcwYWU5ZWJh
N2UyZWRjZDFjOWIwYTY3MmExZjZkMTVhMTMxZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJkB/eOtw0LluI8Lem0ndYx8g3Fn/7J1/JTjAjm7yjd5DbSK
/RIj32NwyPWmY+wQQZ1gC1H1vPHez/GdPlOIfXVUAdZmBamVti+6h+BWggWoBsj8
HDCBADOXsM0FeYV4JFX/lJCnEs9Uhfk6y52gwEHGAukvEdqE4uTXk3km9ShU7HHY
Qt1GLOYn5TPC7imIexxnU71nBurHbpzhUwjr8Ak4LQ9jQnUf49BIfD2TUyY05yfk
Jwbhpv95BNlPHHhwftxMWVRNxzbO4+MxqLhNC7UldzBRScBYNcWrliheKhH0CkFN
2/+TThaJAGhpkWdutSD5POJP0mLcWke8YmjVKZcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQPhnCunrp+LtzRybCmcqH20VoTHzAfBgNVHSMEGDAWgBRReDxt4pM6MHWr
qi2LrSPwPqecEDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VYZzhiZUtUT2pCMXE2b3RpNjBqOEQ2bm5CQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDYvNGU0MjIyLTA0OGQtNGZlNS05OTIxLTQxYmJmYzRmZTYwNy8x
L0Q0WndycDY2Zmk3YzBjbXdwbktoOXRGYUV4OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYv
NGU0MjIyLTA0OGQtNGZlNS05OTIxLTQxYmJmYzRmZTYwNy8xL1VYZzhiZUtUT2pC
MXE2b3RpNjBqOEQ2bm5CQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMOyeTANBgkqhkiG9w0BAQsFAAOC
AQEAX72CdmAq+5VhVwHmU49s89+8EOd8WhWhoNVi201HBiIiTPkCe+n3SpGqTeey
Ka0nBcqxv1xx2yskXg6NsKz0WoZ9RNv/ZJfz2DbU+zei5RpTxEAwUkuO55OHcLw5
BSF5+22f8O5xXG6xziIgsGxr9QmfGicjweV/LBHwKDTLW7Ku6T+EicoqEJrJI5qj
PXD86u3WXcJtTUe3pATj5HBT1sLDS2pyrl1IDn5KzCcni9gaLqF3QEpwguWdvAe0
sakAIzdcm9IFqiM+rWS/mjGgl9zlsaEfF8RloZfx6/qlaqxAtvYWmIKRcF779LCu
iYTLKxS3tNG8Ew8++nftB2AxnA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:38 2024 by rpki-client on console-fra.rpki-client.org