Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/XRAfLi5sDjyBVISO-hlUCn12MVc.roa
File:                     XRAfLi5sDjyBVISO-hlUCn12MVc.roa (raw, json)
Hash identifier:          xORCb+MlKBigoAQW5CBBTPH1WpjW2uDqjuIDYbbhIec=
Subject key identifier:   5D:10:1F:2E:2E:6C:0E:3C:81:54:84:8E:FA:19:54:0A:7D:76:31:57
Certificate issuer:       /CN=5ae146afcb6e96868a1cd837de46cb184892dc28
Certificate serial:       01880F60E955D5DA671661046A7610A9A95B
Authority key identifier: 5A:E1:46:AF:CB:6E:96:86:8A:1C:D8:37:DE:46:CB:18:48:92:DC:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuFGr8tuloaKHNg33kbLGEiS3Cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/XRAfLi5sDjyBVISO-hlUCn12MVc.roa
Signing time:             Fri 12 May 2023 09:53:09 +0000
ROA not before:           Fri 12 May 2023 09:53:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        94.103.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:0f:60:e9:55:d5:da:67:16:61:04:6a:76:10:a9:a9:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae146afcb6e96868a1cd837de46cb184892dc28
        Validity
            Not Before: May 12 09:53:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5d101f2e2e6c0e3c8154848efa19540a7d763157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b6:97:da:25:93:c6:ec:3d:97:50:9a:d4:9b:
                    d1:d0:a8:6d:7d:80:d6:0d:9b:60:b2:aa:d7:7a:7d:
                    b4:b0:bb:7a:5c:50:a9:63:a0:5c:36:31:96:f5:96:
                    7a:fa:49:ef:10:e8:6d:37:36:7f:2a:ab:fe:59:05:
                    af:36:43:60:15:8d:22:e7:2a:02:6b:d2:f0:8c:db:
                    e2:85:37:aa:d0:02:4e:39:5b:2f:86:69:06:d2:a0:
                    7e:93:b7:c5:89:ff:41:5b:9d:04:b7:22:f5:22:b3:
                    17:2a:61:c7:a1:a3:62:c4:c7:05:4a:e0:b8:9b:a5:
                    40:83:6e:bf:a2:93:cf:43:7c:b6:45:7a:ec:71:3c:
                    52:96:53:40:78:01:1a:b6:e7:d4:f6:03:55:f7:35:
                    d5:10:bd:72:8d:3d:59:38:f2:ed:ed:42:be:81:1b:
                    55:86:ac:0f:47:96:70:ba:7e:78:ce:f3:48:15:5e:
                    11:82:c3:d7:9c:a2:a4:fa:15:b4:fa:65:5b:10:ba:
                    ab:f4:6d:d4:05:06:90:0c:b3:ed:77:c4:14:90:c3:
                    ec:7f:c5:1f:c1:41:ec:44:8c:0b:0b:81:7b:16:4d:
                    b7:4f:1b:f2:3b:dc:07:68:93:b1:83:72:2e:6a:02:
                    22:6b:3e:0c:8f:cf:03:27:08:47:3e:10:4f:ee:8e:
                    df:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:10:1F:2E:2E:6C:0E:3C:81:54:84:8E:FA:19:54:0A:7D:76:31:57
            X509v3 Authority Key Identifier:
                keyid:5A:E1:46:AF:CB:6E:96:86:8A:1C:D8:37:DE:46:CB:18:48:92:DC:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuFGr8tuloaKHNg33kbLGEiS3Cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/XRAfLi5sDjyBVISO-hlUCn12MVc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/WuFGr8tuloaKHNg33kbLGEiS3Cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:a3:7b:07:45:4a:10:5e:2b:6a:65:12:0a:44:77:6e:11:69:
         7f:a0:90:c7:bb:af:7b:82:72:df:37:5a:b2:65:33:2a:3d:d9:
         2c:3f:a6:5f:bc:ff:82:96:4b:2e:9e:ee:05:61:41:e6:ea:e0:
         29:8e:b9:a7:99:a4:8c:a1:5a:2f:28:bd:48:05:44:44:e6:c8:
         be:62:92:b2:62:b7:87:8d:cb:dd:e6:e3:82:3a:39:9f:2b:a5:
         55:66:cb:bf:6e:3a:3b:3e:90:c8:24:de:7a:3d:7d:e2:3a:72:
         cf:d3:92:4e:bb:b1:07:a8:f3:d3:76:0d:c4:bd:a2:0c:ee:54:
         d2:db:51:11:8e:6c:8b:75:c9:04:5d:99:ab:2b:43:2c:93:01:
         87:b1:de:c2:a1:66:64:d5:22:16:4d:58:36:ee:8f:42:03:49:
         58:cf:de:37:4d:c9:aa:fd:c1:00:3c:e7:70:1b:8f:a5:16:d4:
         12:4b:2b:a4:44:74:a5:02:d1:0a:6e:3c:ed:e8:1d:55:53:4f:
         a7:1c:41:03:02:ea:db:35:f0:8d:67:a3:93:a4:87:55:2a:72:
         1d:f6:33:fb:38:25:e6:d8:29:09:c0:21:43:1d:eb:47:3c:d0:
         26:18:a1:4f:ac:93:cb:90:27:ef:1d:30:f0:8d:62:87:3d:2b:
         53:48:2a:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgPYOlV1dpnFmEEanYQqalbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZTE0NmFmY2I2ZTk2ODY4YTFjZDgzN2RlNDZjYjE4NDg5
MmRjMjgwHhcNMjMwNTEyMDk1MzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDEwMWYyZTJlNmMwZTNjODE1NDg0OGVmYTE5NTQwYTdkNzYzMTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7aX2iWTxuw9l1Ca1JvR0KhtfYDW
DZtgsqrXen20sLt6XFCpY6BcNjGW9ZZ6+knvEOhtNzZ/Kqv+WQWvNkNgFY0i5yoC
a9LwjNvihTeq0AJOOVsvhmkG0qB+k7fFif9BW50EtyL1IrMXKmHHoaNixMcFSuC4
m6VAg26/opPPQ3y2RXrscTxSllNAeAEatufU9gNV9zXVEL1yjT1ZOPLt7UK+gRtV
hqwPR5Zwun54zvNIFV4RgsPXnKKk+hW0+mVbELqr9G3UBQaQDLPtd8QUkMPsf8Uf
wUHsRIwLC4F7Fk23TxvyO9wHaJOxg3IuagIiaz4Mj88DJwhHPhBP7o7fgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF0QHy4ubA48gVSEjvoZVAp9djFXMB8GA1UdIwQY
MBaAFFrhRq/LbpaGihzYN95GyxhIktwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3VGR3I4dHVsb2FLSE5nMzNrYkxHRWlTM0NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wZDc1OWQtMzY4Mi00OTQzLTg4NGMt
ZTNiZTUzNzBmMDhmLzEvWFJBZkxpNXNEanlCVklTTy1obFVDbjEyTVZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8wZDc1OWQtMzY4Mi00OTQzLTg4NGMtZTNiZTUzNzBmMDhm
LzEvV3VGR3I4dHVsb2FLSE5nMzNrYkxHRWlTM0NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXme6MA0G
CSqGSIb3DQEBCwUAA4IBAQBJo3sHRUoQXitqZRIKRHduEWl/oJDHu697gnLfN1qy
ZTMqPdksP6ZfvP+Clksunu4FYUHm6uApjrmnmaSMoVovKL1IBURE5si+YpKyYreH
jcvd5uOCOjmfK6VVZsu/bjo7PpDIJN56PX3iOnLP05JOu7EHqPPTdg3EvaIM7lTS
21ERjmyLdckEXZmrK0MskwGHsd7CoWZk1SIWTVg27o9CA0lYz943Tcmq/cEAPOdw
G4+lFtQSSyukRHSlAtEKbjzt6B1VU0+nHEEDAurbNfCNZ6OTpIdVKnId9jP7OCXm
2CkJwCFDHetHPNAmGKFPrJPLkCfvHTDwjWKHPStTSCp6
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:09 2024 by rpki-client on console-ams.rpki-client.org