Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/fe5817-a482-42dd-a7f6-8c99481ec6c4/1/Qz2NS9LqV9Qb6SI34VWRcthZGv4.roa
File:                     Qz2NS9LqV9Qb6SI34VWRcthZGv4.roa (raw, json)
Hash identifier:          jOEiD+f4mWoNBLuKRFmGsoXFSgexiczq7v2/KX/bYOw=
Subject key identifier:   43:3D:8D:4B:D2:EA:57:D4:1B:E9:22:37:E1:55:91:72:D8:59:1A:FE
Certificate issuer:       /CN=6aa45f8cf463dc92bb2431359b8b6e5ffd8f719c
Certificate serial:       018D16DD920E29BEAE5939DB0237F44B6DC0
Authority key identifier: 6A:A4:5F:8C:F4:63:DC:92:BB:24:31:35:9B:8B:6E:5F:FD:8F:71:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqRfjPRj3JK7JDE1m4tuX_2PcZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/fe5817-a482-42dd-a7f6-8c99481ec6c4/1/Qz2NS9LqV9Qb6SI34VWRcthZGv4.roa
Signing time:             Wed 17 Jan 2024 10:00:35 +0000
ROA not before:           Wed 17 Jan 2024 10:00:35 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     201105
IP address blocks:        185.247.24.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:16:dd:92:0e:29:be:ae:59:39:db:02:37:f4:4b:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa45f8cf463dc92bb2431359b8b6e5ffd8f719c
        Validity
            Not Before: Jan 17 10:00:35 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=433d8d4bd2ea57d41be92237e1559172d8591afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:88:dc:fd:b2:69:aa:53:3d:13:f9:a7:da:e2:
                    2e:ad:c0:d0:15:3d:1e:ef:03:08:30:38:dd:9c:cd:
                    92:93:90:7d:6f:8c:8d:81:f7:d5:3e:f7:f4:76:e3:
                    25:87:4c:da:eb:e6:58:7d:2f:07:b0:fb:f3:5d:54:
                    94:1e:10:f9:8b:d7:96:ff:62:e3:33:48:e1:cc:d4:
                    99:e4:de:24:e9:db:5e:6b:2a:56:56:b9:b1:2b:0a:
                    81:58:81:be:7d:e8:31:ed:42:f3:b4:05:cb:ea:78:
                    e3:dd:9d:bd:c6:1d:c7:73:92:1b:54:8b:9a:81:9d:
                    88:5f:06:6c:c3:f5:a2:54:f6:13:c1:cc:8e:f1:41:
                    fd:28:bd:6d:09:97:16:23:3e:27:e3:6e:1c:64:bf:
                    44:40:f9:6e:13:98:1d:62:90:4e:ff:1b:50:18:46:
                    a6:d3:ca:70:b4:92:be:f9:63:48:4e:d3:2c:b8:66:
                    47:51:9b:ae:c4:3a:1d:f3:9d:58:5e:34:8b:a1:f9:
                    3c:94:27:57:d5:3e:12:7a:70:2f:ef:cd:c0:82:ca:
                    11:17:78:e8:b7:70:12:4b:e6:e2:26:24:62:4c:bb:
                    ea:b3:18:bf:c5:78:ba:10:24:31:66:09:3d:c3:bc:
                    eb:ad:08:78:87:17:96:67:5f:88:17:c5:a9:4b:54:
                    46:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3D:8D:4B:D2:EA:57:D4:1B:E9:22:37:E1:55:91:72:D8:59:1A:FE
            X509v3 Authority Key Identifier:
                keyid:6A:A4:5F:8C:F4:63:DC:92:BB:24:31:35:9B:8B:6E:5F:FD:8F:71:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqRfjPRj3JK7JDE1m4tuX_2PcZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fe5817-a482-42dd-a7f6-8c99481ec6c4/1/Qz2NS9LqV9Qb6SI34VWRcthZGv4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fe5817-a482-42dd-a7f6-8c99481ec6c4/1/aqRfjPRj3JK7JDE1m4tuX_2PcZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.247.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:67:8a:c7:7c:6e:e1:db:fb:be:f5:e3:09:5f:67:96:1e:02:
         6c:1a:18:45:64:45:73:4d:77:df:18:1c:14:11:f5:2f:2a:11:
         32:3d:6c:56:84:31:a8:21:08:0b:32:14:a2:f6:e7:7d:b5:b6:
         c4:f8:ba:38:b6:b7:e7:af:a6:b1:f7:82:43:d7:e5:49:c4:42:
         a7:39:96:d1:36:ef:b0:6d:ef:40:23:8c:59:6a:29:a3:5c:40:
         12:25:d1:3e:2c:5d:97:da:34:54:d8:7b:68:c1:03:ab:8f:a7:
         f1:f7:4d:6e:2b:1f:c2:0e:c6:31:4e:39:b4:6e:f0:2d:69:e2:
         a3:e5:05:1d:10:c4:76:ec:87:6e:cb:e7:fa:7a:1e:dd:c9:a7:
         b7:2d:42:26:16:07:09:05:fe:80:8c:f0:80:9f:ab:e6:7c:67:
         ea:9d:00:de:2e:e9:1d:cd:e3:13:d9:c2:0d:10:ac:5e:54:b1:
         a2:fc:91:01:6c:80:7e:93:89:c8:bb:f0:d1:f7:6d:72:56:65:
         1c:38:02:57:e8:a1:59:ba:f6:82:42:8a:4f:94:4f:1d:e0:b4:
         8b:1b:ac:cb:db:62:01:bb:62:9d:f3:b3:3e:d5:69:b1:dd:26:
         93:9b:9b:ff:45:50:a8:cd:6f:55:ee:aa:ca:98:17:84:13:43:
         25:b1:94:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0W3ZIOKb6uWTnbAjf0S23AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYTQ1ZjhjZjQ2M2RjOTJiYjI0MzEzNTliOGI2ZTVmZmQ4
ZjcxOWMwHhcNMjQwMTE3MTAwMDM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzNkOGQ0YmQyZWE1N2Q0MWJlOTIyMzdlMTU1OTE3MmQ4NTkxYWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvojc/bJpqlM9E/mn2uIurcDQFT0e
7wMIMDjdnM2Sk5B9b4yNgffVPvf0duMlh0za6+ZYfS8HsPvzXVSUHhD5i9eW/2Lj
M0jhzNSZ5N4k6dteaypWVrmxKwqBWIG+fegx7ULztAXL6njj3Z29xh3Hc5IbVIua
gZ2IXwZsw/WiVPYTwcyO8UH9KL1tCZcWIz4n424cZL9EQPluE5gdYpBO/xtQGEam
08pwtJK++WNITtMsuGZHUZuuxDod851YXjSLofk8lCdX1T4SenAv783AgsoRF3jo
t3ASS+biJiRiTLvqsxi/xXi6ECQxZgk9w7zrrQh4hxeWZ1+IF8WpS1RGeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEM9jUvS6lfUG+kiN+FVkXLYWRr+MB8GA1UdIwQY
MBaAFGqkX4z0Y9ySuyQxNZuLbl/9j3GcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXFSZmpQUmozSks3SkRFMW00dHVYXzJQY1p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9mZTU4MTctYTQ4Mi00MmRkLWE3ZjYt
OGM5OTQ4MWVjNmM0LzEvUXoyTlM5THFWOVFiNlNJMzRWV1JjdGhaR3Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9mZTU4MTctYTQ4Mi00MmRkLWE3ZjYtOGM5OTQ4MWVjNmM0
LzEvYXFSZmpQUmozSks3SkRFMW00dHVYXzJQY1p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufcYMA0G
CSqGSIb3DQEBCwUAA4IBAQBxZ4rHfG7h2/u+9eMJX2eWHgJsGhhFZEVzTXffGBwU
EfUvKhEyPWxWhDGoIQgLMhSi9ud9tbbE+Lo4trfnr6ax94JD1+VJxEKnOZbRNu+w
be9AI4xZaimjXEASJdE+LF2X2jRU2HtowQOrj6fx901uKx/CDsYxTjm0bvAtaeKj
5QUdEMR27Iduy+f6eh7dyae3LUImFgcJBf6AjPCAn6vmfGfqnQDeLukdzeMT2cIN
EKxeVLGi/JEBbIB+k4nIu/DR921yVmUcOAJX6KFZuvaCQopPlE8d4LSLG6zL22IB
u2Kd87M+1Wmx3SaTm5v/RVCozW9V7qrKmBeEE0MlsZSl
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:42 2024 by rpki-client on console-fra.rpki-client.org