Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/51518c-ebbf-43e8-a30d-52ccd02ec722/1/qDo0i_jEGFHi1Xxf9nMtL4CFtek.roa
File:                     qDo0i_jEGFHi1Xxf9nMtL4CFtek.roa (raw, json)
Hash identifier:          MCazmvwfV8cnuysfwt/lNGqaTXee/Als/GhlTxOmSL0=
Subject key identifier:   A8:3A:34:8B:F8:C4:18:51:E2:D5:7C:5F:F6:73:2D:2F:80:85:B5:E9
Certificate issuer:       /CN=4e67a6e4730fdb2b5822306d11f43dbd8c3337dd
Certificate serial:       0D8B41A0
Authority key identifier: 4E:67:A6:E4:73:0F:DB:2B:58:22:30:6D:11:F4:3D:BD:8C:33:37:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tmem5HMP2ytYIjBtEfQ9vYwzN90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/51518c-ebbf-43e8-a30d-52ccd02ec722/1/qDo0i_jEGFHi1Xxf9nMtL4CFtek.roa
Signing time:             Sat 01 Jan 2022 06:59:57 +0000
ROA not before:           Sat 01 Jan 2022 06:59:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61222
IP address blocks:        185.215.91.0/24 maxlen: 24
                          185.215.90.0/24 maxlen: 24
                          185.215.89.0/24 maxlen: 24
                          185.215.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227230112 (0xd8b41a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e67a6e4730fdb2b5822306d11f43dbd8c3337dd
        Validity
            Not Before: Jan  1 06:59:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a83a348bf8c41851e2d57c5ff6732d2f8085b5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:57:f6:47:f8:fe:6f:18:19:bf:c2:64:29:
                    37:8d:67:d8:ce:26:06:93:c0:6f:e7:6d:9f:28:59:
                    55:64:c5:82:e3:39:b5:69:b9:71:78:1d:e2:16:44:
                    f8:6f:4e:b1:f0:c6:38:12:1d:17:94:b0:a4:cc:28:
                    04:cc:8d:14:35:86:fe:4d:98:f6:93:8a:ad:0c:1d:
                    ab:a0:78:8d:25:5c:02:6f:a3:61:e3:7c:c2:c0:4e:
                    ce:30:c0:67:e2:9f:25:ca:d6:5f:6d:32:a0:c8:7e:
                    10:1f:d1:7c:61:b4:ca:82:ff:57:d3:40:3b:77:a3:
                    c3:ff:a7:82:8c:6b:c4:c2:20:44:23:3f:79:ca:c9:
                    de:93:a8:1d:0b:49:51:96:11:36:09:7d:64:30:44:
                    4a:c1:12:e8:03:e4:26:02:1f:5c:c2:00:3e:e4:5e:
                    05:e0:38:d7:05:f3:fe:fc:3c:19:db:13:e7:33:5d:
                    c1:b3:b7:1d:e6:a0:f4:41:46:e0:2b:af:7b:82:81:
                    75:8d:6c:69:a2:31:c8:38:ff:0a:88:3e:10:b7:97:
                    4b:32:26:92:24:0e:b9:0d:ef:ae:3d:1d:84:47:5d:
                    07:98:e8:bd:a5:6e:54:2b:2f:35:ba:bd:f0:90:51:
                    3b:ec:93:b0:f6:5e:b1:de:13:7f:0d:c9:fe:65:fa:
                    17:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3A:34:8B:F8:C4:18:51:E2:D5:7C:5F:F6:73:2D:2F:80:85:B5:E9
            X509v3 Authority Key Identifier:
                keyid:4E:67:A6:E4:73:0F:DB:2B:58:22:30:6D:11:F4:3D:BD:8C:33:37:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmem5HMP2ytYIjBtEfQ9vYwzN90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/51518c-ebbf-43e8-a30d-52ccd02ec722/1/qDo0i_jEGFHi1Xxf9nMtL4CFtek.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/51518c-ebbf-43e8-a30d-52ccd02ec722/1/Tmem5HMP2ytYIjBtEfQ9vYwzN90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:6a:48:42:b5:69:09:8c:18:37:72:71:b2:aa:67:f3:34:26:
         65:1f:a4:26:67:29:22:af:d5:3a:f9:90:56:19:0a:86:d1:7c:
         95:11:6c:13:47:dd:b2:60:2c:c8:c9:b5:a1:f4:6c:09:8a:86:
         38:77:9b:65:b6:2c:d1:da:c4:26:99:56:16:a8:c7:5c:9f:4b:
         4b:de:ee:4c:5a:e2:0d:34:3a:a1:79:59:64:9a:9c:fe:26:e4:
         11:f7:cf:f4:11:4d:e7:9d:e5:80:ae:36:fc:59:b7:5e:b0:ca:
         32:aa:a3:d3:6c:79:ce:86:53:14:44:ee:c2:5c:69:07:98:a0:
         ff:b3:da:a0:1f:a5:c8:b3:5e:10:f4:d6:de:07:61:9f:2b:02:
         c1:91:82:c6:c9:f4:b4:53:c4:90:50:e8:5a:d4:1e:06:38:e7:
         40:33:81:95:63:3c:71:23:bf:18:1d:68:4b:49:34:50:e8:a9:
         cc:2d:56:f4:6b:73:6e:e8:e2:07:a9:e3:69:82:38:58:d5:fc:
         5a:93:97:00:81:3b:0b:4e:20:c9:cc:b9:39:72:e4:5a:2b:02:
         5f:41:ac:4c:f7:fe:4f:13:8a:fc:62:f2:eb:4d:be:6b:25:0f:
         6e:83:60:75:a1:58:e8:17:76:a1:e2:56:05:38:61:26:6d:b6:
         bb:53:bd:26
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDYtBoDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZTY3YTZlNDczMGZkYjJiNTgyMjMwNmQxMWY0M2RiZDhjMzMzN2RkMB4XDTIyMDEw
MTA2NTk1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTgzYTM0OGJmOGM0
MTg1MWUyZDU3YzVmZjY3MzJkMmY4MDg1YjVlOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKwjV/ZH+P5vGBm/wmQpN41n2M4mBpPAb+dtnyhZVWTFguM5
tWm5cXgd4hZE+G9OsfDGOBIdF5SwpMwoBMyNFDWG/k2Y9pOKrQwdq6B4jSVcAm+j
YeN8wsBOzjDAZ+KfJcrWX20yoMh+EB/RfGG0yoL/V9NAO3ejw/+ngoxrxMIgRCM/
ecrJ3pOoHQtJUZYRNgl9ZDBESsES6APkJgIfXMIAPuReBeA41wXz/vw8GdsT5zNd
wbO3Heag9EFG4Cuve4KBdY1saaIxyDj/Cog+ELeXSzImkiQOuQ3vrj0dhEddB5jo
vaVuVCsvNbq98JBRO+yTsPZesd4Tfw3J/mX6FysCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSoOjSL+MQYUeLVfF/2cy0vgIW16TAfBgNVHSMEGDAWgBROZ6bkcw/bK1gi
MG0R9D29jDM33TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RtZW01SE1QMnl0WUlqQnRFZlE5dll3ek45MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGUvNTE1MThjLWViYmYtNDNlOC1hMzBkLTUyY2NkMDJlYzcyMi8x
L3FEbzBpX2pFR0ZIaTFYeGY5bk10TDRDRnRlay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUv
NTE1MThjLWViYmYtNDNlOC1hMzBkLTUyY2NkMDJlYzcyMi8xL1RtZW01SE1QMnl0
WUlqQnRFZlE5dll3ek45MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnXWDANBgkqhkiG9w0BAQsFAAOC
AQEAAWpIQrVpCYwYN3Jxsqpn8zQmZR+kJmcpIq/VOvmQVhkKhtF8lRFsE0fdsmAs
yMm1ofRsCYqGOHebZbYs0drEJplWFqjHXJ9LS97uTFriDTQ6oXlZZJqc/ibkEffP
9BFN553lgK42/Fm3XrDKMqqj02x5zoZTFETuwlxpB5ig/7PaoB+lyLNeEPTW3gdh
nysCwZGCxsn0tFPEkFDoWtQeBjjnQDOBlWM8cSO/GB1oS0k0UOipzC1W9Gtzbuji
B6njaYI4WNX8WpOXAIE7C04gycy5OXLkWisCX0GsTPf+TxOK/GLy602+ayUPboNg
daFY6Bd2oeJWBThhJm22u1O9Jg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:12 2024 by rpki-client on console-ams.rpki-client.org