Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7df50a-2d87-4d09-b9ac-05821d4099b8/1/QvvLSO6gIONukLMR_L2qwepz6_I.roa
File:                     QvvLSO6gIONukLMR_L2qwepz6_I.roa (raw, json)
Hash identifier:          hkCFzN8Ztm70lpyYsAhedvCgq3O6TvLe/Ej1z/jQW7g=
Subject key identifier:   42:FB:CB:48:EE:A0:20:E3:6E:90:B3:11:FC:BD:AA:C1:EA:73:EB:F2
Certificate issuer:       /CN=3283151e838675754629260425bffce929d8a8ed
Certificate serial:       0A5783BA
Authority key identifier: 32:83:15:1E:83:86:75:75:46:29:26:04:25:BF:FC:E9:29:D8:A8:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MoMVHoOGdXVGKSYEJb_86SnYqO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/7df50a-2d87-4d09-b9ac-05821d4099b8/1/QvvLSO6gIONukLMR_L2qwepz6_I.roa
Signing time:             Sat 01 Jan 2022 06:05:22 +0000
ROA not before:           Sat 01 Jan 2022 06:05:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12388
IP address blocks:        83.220.192.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173507514 (0xa5783ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3283151e838675754629260425bffce929d8a8ed
        Validity
            Not Before: Jan  1 06:05:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=42fbcb48eea020e36e90b311fcbdaac1ea73ebf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6b:36:9f:fc:a2:65:b6:68:fe:8a:89:11:0b:
                    08:d8:20:b7:68:98:49:4f:f7:e0:ac:23:f1:2b:3e:
                    79:92:cb:8e:26:a2:78:13:b7:d1:ca:07:24:33:39:
                    1e:0c:91:70:d9:d1:7b:f8:28:fb:da:2e:76:33:37:
                    ea:98:4c:e7:0f:0a:3e:fc:8f:4e:32:ae:ad:93:de:
                    83:59:1c:f4:ba:51:52:d7:5f:ce:0c:2b:5b:6d:d2:
                    ca:15:bd:7c:e3:63:61:60:c8:c3:e5:59:46:f7:b7:
                    6f:65:6d:a0:f2:60:b0:c9:a5:5f:f4:99:95:a5:60:
                    7c:a7:ef:3d:cc:43:d9:36:2b:86:11:b1:29:90:7d:
                    5e:96:8b:22:33:17:32:93:b7:f3:9c:08:b5:b0:d4:
                    20:7a:09:47:92:e2:fe:d9:df:72:43:8d:75:ba:12:
                    be:31:6b:93:b1:38:7b:c5:9d:a4:49:27:6e:e1:c7:
                    96:a6:89:3f:dd:f2:f5:4e:7f:e8:73:86:11:3c:c9:
                    08:d7:45:ee:0d:2a:3d:bc:ed:4f:55:d8:d4:5c:86:
                    f4:43:5f:ca:c6:fb:86:1c:dc:34:94:12:65:b5:d0:
                    90:93:fe:2b:20:8f:18:29:77:14:de:85:8f:02:51:
                    f3:81:9f:7f:92:ca:f1:b8:12:b4:6c:17:c7:ed:ca:
                    43:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FB:CB:48:EE:A0:20:E3:6E:90:B3:11:FC:BD:AA:C1:EA:73:EB:F2
            X509v3 Authority Key Identifier:
                keyid:32:83:15:1E:83:86:75:75:46:29:26:04:25:BF:FC:E9:29:D8:A8:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MoMVHoOGdXVGKSYEJb_86SnYqO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7df50a-2d87-4d09-b9ac-05821d4099b8/1/QvvLSO6gIONukLMR_L2qwepz6_I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7df50a-2d87-4d09-b9ac-05821d4099b8/1/MoMVHoOGdXVGKSYEJb_86SnYqO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.220.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         53:3c:c2:e9:c0:b8:03:6d:ab:c7:bc:1d:90:d3:e2:4c:65:7c:
         f2:62:d9:0c:b5:5c:fb:90:ce:e5:b3:c2:d1:12:13:b6:b5:33:
         c0:d3:b0:0b:41:bd:de:cd:08:a6:89:0d:f5:d9:24:55:89:2d:
         7d:a8:1e:8f:92:20:7a:28:20:38:ad:a0:b1:ec:25:22:8e:dc:
         3c:8f:a3:ba:c1:f5:70:9c:e2:26:a8:ed:b4:5d:28:f7:42:bd:
         c0:74:c7:55:3a:fc:b5:c8:6d:4e:c7:e7:92:43:44:40:b1:15:
         f4:a7:cc:79:e2:75:80:ca:91:25:da:42:b5:f2:83:a3:58:35:
         77:12:c5:b3:98:b5:4e:72:10:21:94:6d:83:aa:ad:62:c5:d2:
         e5:fc:3f:ad:af:3e:d4:27:47:f8:1b:62:6e:1e:16:c3:a6:46:
         c5:18:7f:12:7a:f9:2c:45:42:05:19:4a:eb:4f:26:a0:26:0c:
         21:72:dc:c8:0c:4f:19:90:18:7f:d0:3c:d6:83:03:49:9d:96:
         ea:79:bc:97:2f:fc:ca:c4:fd:94:75:45:06:44:1a:35:b9:96:
         21:d6:2c:09:ca:a6:ee:c9:5c:e7:fd:05:d0:ef:ca:f6:dc:c7:
         93:63:a9:00:99:08:32:73:69:5f:50:21:8f:a5:02:c5:06:5d:
         e1:19:38:e4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECleDujANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MjgzMTUxZTgzODY3NTc1NDYyOTI2MDQyNWJmZmNlOTI5ZDhhOGVkMB4XDTIyMDEw
MTA2MDUyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDJmYmNiNDhlZWEw
MjBlMzZlOTBiMzExZmNiZGFhYzFlYTczZWJmMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALRrNp/8omW2aP6KiRELCNggt2iYSU/34Kwj8Ss+eZLLjiai
eBO30coHJDM5HgyRcNnRe/go+9oudjM36phM5w8KPvyPTjKurZPeg1kc9LpRUtdf
zgwrW23SyhW9fONjYWDIw+VZRve3b2VtoPJgsMmlX/SZlaVgfKfvPcxD2TYrhhGx
KZB9XpaLIjMXMpO385wItbDUIHoJR5Li/tnfckONdboSvjFrk7E4e8WdpEknbuHH
lqaJP93y9U5/6HOGETzJCNdF7g0qPbztT1XY1FyG9ENfysb7hhzcNJQSZbXQkJP+
KyCPGCl3FN6FjwJR84Gff5LK8bgStGwXx+3KQ8MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRC+8tI7qAg426QsxH8varB6nPr8jAfBgNVHSMEGDAWgBQygxUeg4Z1dUYp
JgQlv/zpKdio7TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01vTVZIb09HZFhWR0tTWUVKYl84NlNuWXFPMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDYvN2RmNTBhLTJkODctNGQwOS1iOWFjLTA1ODIxZDQwOTliOC8x
L1F2dkxTTzZnSU9OdWtMTVJfTDJxd2VwejZfSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYv
N2RmNTBhLTJkODctNGQwOS1iOWFjLTA1ODIxZDQwOTliOC8xL01vTVZIb09HZFhW
R0tTWUVKYl84NlNuWXFPMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBVPcwDANBgkqhkiG9w0BAQsFAAOC
AQEAUzzC6cC4A22rx7wdkNPiTGV88mLZDLVc+5DO5bPC0RITtrUzwNOwC0G93s0I
pokN9dkkVYktfagej5IgeiggOK2gsewlIo7cPI+jusH1cJziJqjttF0o90K9wHTH
VTr8tchtTsfnkkNEQLEV9KfMeeJ1gMqRJdpCtfKDo1g1dxLFs5i1TnIQIZRtg6qt
YsXS5fw/ra8+1CdH+Btibh4Ww6ZGxRh/Enr5LEVCBRlK608moCYMIXLcyAxPGZAY
f9A81oMDSZ2W6nm8ly/8ysT9lHVFBkQaNbmWIdYsCcqm7slc5/0F0O/K9tzHk2Op
AJkIMnNpX1Ahj6UCxQZd4Rk45A==
-----END CERTIFICATE-----
Generated at Fri Apr 18 01:55:25 2025 by rpki-client