Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/btn92DtVcM08bVPVlXKyjUVjTWo.roa
File:                     btn92DtVcM08bVPVlXKyjUVjTWo.roa (raw, json)
Hash identifier:          fRMz50q6NFUBZJ+8p+G6BG1CaA3kZvg5RDmHXiUc4Jo=
Subject key identifier:   6E:D9:FD:D8:3B:55:70:CD:3C:6D:53:D5:95:72:B2:8D:45:63:4D:6A
Certificate issuer:       /CN=c37d4127cdafe9bfb5d3f4ed8a2af2e03f6d607d
Certificate serial:       06D2D2E2
Authority key identifier: C3:7D:41:27:CD:AF:E9:BF:B5:D3:F4:ED:8A:2A:F2:E0:3F:6D:60:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w31BJ82v6b-10_Ttiiry4D9tYH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/btn92DtVcM08bVPVlXKyjUVjTWo.roa
Signing time:             Sat 01 Jan 2022 04:55:50 +0000
ROA not before:           Sat 01 Jan 2022 04:55:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207968
IP address blocks:        195.39.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114479842 (0x6d2d2e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c37d4127cdafe9bfb5d3f4ed8a2af2e03f6d607d
        Validity
            Not Before: Jan  1 04:55:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6ed9fdd83b5570cd3c6d53d59572b28d45634d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e7:de:fe:de:9f:64:9e:cc:0c:a8:38:91:50:
                    a4:c7:2c:16:18:4c:d2:64:05:18:a2:bc:99:1b:21:
                    38:af:bb:e6:86:d8:9a:88:13:49:08:2f:da:63:d4:
                    49:8f:72:ff:ff:9d:04:95:87:f5:02:b7:6d:20:5b:
                    c0:1b:15:7d:c2:16:c2:d5:1f:9c:c9:41:db:58:bd:
                    06:6e:c2:68:93:40:b0:9f:f8:1c:8b:dd:b5:a7:03:
                    2f:55:ea:e9:2b:7f:b4:fa:5c:d7:d2:f8:68:d1:b4:
                    9c:d2:47:ee:d8:43:b3:f0:52:4a:aa:90:6c:45:70:
                    bc:ce:cd:9f:8b:c9:8a:60:42:4d:a6:ef:13:84:91:
                    69:11:09:98:3f:d2:f4:f7:ee:86:ac:36:14:65:35:
                    5d:4c:d4:fa:d9:9e:d5:b3:c8:32:f9:d3:ba:d3:7b:
                    53:9c:01:02:72:ad:3a:20:6e:9f:ee:44:02:6c:e7:
                    28:18:6a:6e:20:9d:7f:f4:8c:66:34:2f:a3:96:ba:
                    f1:4b:50:45:4e:b9:2f:f7:87:67:3d:14:20:07:c2:
                    a9:09:d7:c8:36:57:23:32:7b:f8:53:8e:c0:61:3f:
                    9c:36:cf:8a:83:23:2b:41:31:e6:08:71:01:78:96:
                    f5:b1:5e:7c:5a:e6:aa:d7:22:02:2d:ad:c5:eb:a3:
                    b1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D9:FD:D8:3B:55:70:CD:3C:6D:53:D5:95:72:B2:8D:45:63:4D:6A
            X509v3 Authority Key Identifier:
                keyid:C3:7D:41:27:CD:AF:E9:BF:B5:D3:F4:ED:8A:2A:F2:E0:3F:6D:60:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w31BJ82v6b-10_Ttiiry4D9tYH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/btn92DtVcM08bVPVlXKyjUVjTWo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/63de31-5768-4a30-91c7-a1e229c0db97/1/w31BJ82v6b-10_Ttiiry4D9tYH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.39.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:bb:3e:54:46:78:06:c9:8e:54:5f:8e:b8:65:68:f2:db:54:
         b5:97:34:7f:44:85:86:79:72:ea:2c:0e:39:70:8f:f9:ed:3c:
         59:38:94:b0:2e:0b:5c:66:ec:06:3d:8c:0d:27:6b:25:c0:d1:
         53:e6:2e:f2:12:5c:ab:df:dc:79:2c:53:6a:e5:6a:80:72:ff:
         52:88:a6:53:f1:e8:4d:66:b7:55:64:17:49:a3:a6:be:27:6a:
         e7:ac:dc:cf:21:80:a9:ab:11:87:82:76:93:36:e2:d3:4d:3c:
         58:80:e2:50:85:03:9a:04:85:83:f3:05:e5:79:dc:43:6b:d7:
         d6:63:4e:55:75:1f:d4:dd:eb:99:d0:fa:a7:0b:76:8a:4a:d4:
         78:18:bf:22:d6:47:0a:a4:6a:eb:fe:ef:79:08:75:d0:7f:49:
         ac:22:1c:a1:a8:55:80:db:be:47:09:8f:ac:87:cf:97:9f:96:
         6a:8c:32:a6:ff:cc:bd:a3:fb:1b:6a:a3:db:ab:0f:80:a9:1d:
         3a:14:17:9d:f4:e5:17:0e:62:a9:9c:55:35:87:7a:d8:38:2e:
         ca:62:8a:3d:a8:57:1d:2c:32:f6:a2:9f:49:ea:f1:6c:62:b0:
         52:59:4a:b7:6a:d9:0c:f2:83:e0:6e:ff:27:c9:90:a4:c3:7f:
         8d:7d:e2:25
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBtLS4jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MzdkNDEyN2NkYWZlOWJmYjVkM2Y0ZWQ4YTJhZjJlMDNmNmQ2MDdkMB4XDTIyMDEw
MTA0NTU1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmVkOWZkZDgzYjU1
NzBjZDNjNmQ1M2Q1OTU3MmIyOGQ0NTYzNGQ2YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN/n3v7en2SezAyoOJFQpMcsFhhM0mQFGKK8mRshOK+75obY
mogTSQgv2mPUSY9y//+dBJWH9QK3bSBbwBsVfcIWwtUfnMlB21i9Bm7CaJNAsJ/4
HIvdtacDL1Xq6St/tPpc19L4aNG0nNJH7thDs/BSSqqQbEVwvM7Nn4vJimBCTabv
E4SRaREJmD/S9Pfuhqw2FGU1XUzU+tme1bPIMvnTutN7U5wBAnKtOiBun+5EAmzn
KBhqbiCdf/SMZjQvo5a68UtQRU65L/eHZz0UIAfCqQnXyDZXIzJ7+FOOwGE/nDbP
ioMjK0Ex5ghxAXiW9bFefFrmqtciAi2txeujsdsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRu2f3YO1VwzTxtU9WVcrKNRWNNajAfBgNVHSMEGDAWgBTDfUEnza/pv7XT
9O2KKvLgP21gfTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3czMUJKODJ2NmItMTBfVHRpaXJ5NEQ5dFlIMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGUvNjNkZTMxLTU3NjgtNGEzMC05MWM3LWExZTIyOWMwZGI5Ny8x
L2J0bjkyRHRWY00wOGJWUFZsWEt5alVWalRXby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUv
NjNkZTMxLTU3NjgtNGEzMC05MWM3LWExZTIyOWMwZGI5Ny8xL3czMUJKODJ2NmIt
MTBfVHRpaXJ5NEQ5dFlIMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMMn3DANBgkqhkiG9w0BAQsFAAOC
AQEACbs+VEZ4BsmOVF+OuGVo8ttUtZc0f0SFhnly6iwOOXCP+e08WTiUsC4LXGbs
Bj2MDSdrJcDRU+Yu8hJcq9/ceSxTauVqgHL/UoimU/HoTWa3VWQXSaOmvidq56zc
zyGAqasRh4J2kzbi0008WIDiUIUDmgSFg/MF5XncQ2vX1mNOVXUf1N3rmdD6pwt2
ikrUeBi/ItZHCqRq6/7veQh10H9JrCIcoahVgNu+RwmPrIfPl5+Waowypv/MvaP7
G2qj26sPgKkdOhQXnfTlFw5iqZxVNYd62DguymKKPahXHSwy9qKfSerxbGKwUllK
t2rZDPKD4G7/J8mQpMN/jX3iJQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:54 2024 by rpki-client on console-fra.rpki-client.org