Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/uHv1UOzLwQBIZY5Mi-6_uprWyTE.roa
File:                     uHv1UOzLwQBIZY5Mi-6_uprWyTE.roa (raw, json)
Hash identifier:          +6UvYOTxBBe69S/TtKSdkOoj35lyVOhMjkVnZqcZDKw=
Subject key identifier:   B8:7B:F5:50:EC:CB:C1:00:48:65:8E:4C:8B:EE:BF:BA:9A:D6:C9:31
Certificate issuer:       /CN=43931de6e91b40f4b2bb201253e57a86741105a5
Certificate serial:       02D42541
Authority key identifier: 43:93:1D:E6:E9:1B:40:F4:B2:BB:20:12:53:E5:7A:86:74:11:05:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5Md5ukbQPSyuyASU-V6hnQRBaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/uHv1UOzLwQBIZY5Mi-6_uprWyTE.roa
Signing time:             Sat 01 Jan 2022 15:06:40 +0000
ROA not before:           Sat 01 Jan 2022 15:06:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203704
IP address blocks:        194.31.1.0/24 maxlen: 24
                          194.30.161.0/24 maxlen: 24
                          194.30.165.0/24 maxlen: 24
                          194.30.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47457601 (0x2d42541)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43931de6e91b40f4b2bb201253e57a86741105a5
        Validity
            Not Before: Jan  1 15:06:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b87bf550eccbc10048658e4c8beebfba9ad6c931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4b:5b:4e:fc:9e:cc:c2:65:cc:ea:ab:71:e9:
                    de:51:18:6d:c9:a1:8d:9c:83:e7:14:4b:8a:b9:4c:
                    6c:89:26:64:aa:2f:21:2a:72:1c:cb:ea:da:37:09:
                    61:93:09:80:2f:21:13:c5:ac:a6:21:48:96:29:4b:
                    68:66:92:37:48:ed:b7:75:14:43:07:4f:f2:9a:d1:
                    22:19:b3:b5:ad:88:fc:ad:22:20:5a:ea:56:21:f4:
                    67:d8:6f:4a:01:fb:fc:fe:3e:5d:3e:40:cd:9d:87:
                    2a:7f:d3:eb:38:94:fd:99:b9:1b:fa:0c:02:60:b7:
                    a4:eb:27:d5:31:c2:86:84:55:7f:ab:fb:76:fc:61:
                    b5:a4:58:c4:5b:f6:4b:af:11:9d:a7:a4:b4:47:b6:
                    e6:c2:f3:d6:a3:cb:92:0c:27:6f:76:aa:af:6e:20:
                    12:3a:e6:75:0f:f7:e1:ab:e9:e7:54:c4:06:9a:37:
                    7b:a2:cb:b2:73:1a:21:40:2e:ba:32:f0:1e:db:45:
                    d7:d7:b3:d7:93:ad:fe:31:64:a1:78:d1:c3:33:32:
                    91:73:09:03:4a:d4:94:57:ab:7e:b9:00:06:0f:42:
                    43:e0:ab:e7:f7:d2:e6:d4:ff:4e:fa:d6:24:5c:c0:
                    83:05:27:b4:40:b4:3b:39:f6:9c:f6:a9:45:37:a3:
                    6f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7B:F5:50:EC:CB:C1:00:48:65:8E:4C:8B:EE:BF:BA:9A:D6:C9:31
            X509v3 Authority Key Identifier:
                keyid:43:93:1D:E6:E9:1B:40:F4:B2:BB:20:12:53:E5:7A:86:74:11:05:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Md5ukbQPSyuyASU-V6hnQRBaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/uHv1UOzLwQBIZY5Mi-6_uprWyTE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/Q5Md5ukbQPSyuyASU-V6hnQRBaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.30.161.0/24
                  194.30.165.0/24
                  194.30.183.0/24
                  194.31.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:5a:ef:27:ba:9e:37:4c:4a:3c:e3:a4:77:94:5f:da:6a:cf:
         5b:6a:53:a7:3b:f8:5b:a4:41:a7:b4:67:02:80:76:12:0a:08:
         b2:28:4c:35:2f:13:77:fc:af:d0:59:29:53:ec:1d:62:92:43:
         67:0a:77:88:e7:fc:0f:4b:bd:ca:d9:d1:e0:ae:fb:d3:a4:b7:
         03:57:96:72:ee:d0:b1:c6:86:94:2b:a3:2a:54:77:5d:fc:d1:
         2b:87:84:ba:14:4e:f8:93:05:31:1d:87:0e:8d:48:12:17:22:
         e6:ba:a8:a9:6c:98:d0:be:52:58:1e:94:f2:b7:96:d1:1c:c3:
         8b:a3:9f:86:5e:b0:0e:c0:f7:13:ea:83:e2:7c:d8:8d:d3:d3:
         80:8a:5f:5c:25:53:62:13:9f:5b:a2:4a:13:e2:1a:9f:ea:31:
         8a:00:55:3d:59:d4:84:97:ce:e0:b3:89:cf:1f:59:83:5d:13:
         cf:2a:20:d0:1f:2f:2e:e9:61:eb:61:ad:ea:f9:2f:fe:5b:31:
         48:52:5e:50:4d:e3:6c:9d:cb:35:bf:a4:bf:0f:0f:50:b1:b3:
         b6:1c:49:b7:36:09:04:c6:8c:83:45:e5:b9:e1:12:07:a1:db:
         e2:01:e0:54:16:f0:94:10:d4:da:4a:b1:bc:ec:cf:6a:74:95:
         70:18:ce:e7
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEAtQlQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MzkzMWRlNmU5MWI0MGY0YjJiYjIwMTI1M2U1N2E4Njc0MTEwNWE1MB4XDTIyMDEw
MTE1MDY0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjg3YmY1NTBlY2Ni
YzEwMDQ4NjU4ZTRjOGJlZWJmYmE5YWQ2YzkzMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKhLW078nszCZczqq3Hp3lEYbcmhjZyD5xRLirlMbIkmZKov
ISpyHMvq2jcJYZMJgC8hE8WspiFIlilLaGaSN0jtt3UUQwdP8prRIhmzta2I/K0i
IFrqViH0Z9hvSgH7/P4+XT5AzZ2HKn/T6ziU/Zm5G/oMAmC3pOsn1THChoRVf6v7
dvxhtaRYxFv2S68RnaektEe25sLz1qPLkgwnb3aqr24gEjrmdQ/34avp51TEBpo3
e6LLsnMaIUAuujLwHttF19ez15Ot/jFkoXjRwzMykXMJA0rUlFerfrkABg9CQ+Cr
5/fS5tT/TvrWJFzAgwUntEC0Ozn2nPapRTejb+cCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBS4e/VQ7MvBAEhljkyL7r+6mtbJMTAfBgNVHSMEGDAWgBRDkx3m6RtA9LK7
IBJT5XqGdBEFpTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1E1TWQ1dWtiUVBTeXV5QVNVLVY2aG5RUkJhVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTAvOGU3MzlmLTIwNzktNDAxZi05ZThkLTBmNGI3MTdhYjA3My8x
L3VIdjFVT3pMd1FCSVpZNU1pLTZfdXByV3lURS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAv
OGU3MzlmLTIwNzktNDAxZi05ZThkLTBmNGI3MTdhYjA3My8xL1E1TWQ1dWtiUVBT
eXV5QVNVLVY2aG5RUkJhVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAMIeoQMEAMIepQMEAMIetwMEAMIf
ATANBgkqhkiG9w0BAQsFAAOCAQEALlrvJ7qeN0xKPOOkd5Rf2mrPW2pTpzv4W6RB
p7RnAoB2EgoIsihMNS8Td/yv0FkpU+wdYpJDZwp3iOf8D0u9ytnR4K7706S3A1eW
cu7QscaGlCujKlR3XfzRK4eEuhRO+JMFMR2HDo1IEhci5rqoqWyY0L5SWB6U8reW
0RzDi6Ofhl6wDsD3E+qD4nzYjdPTgIpfXCVTYhOfW6JKE+Ian+oxigBVPVnUhJfO
4LOJzx9Zg10Tzyog0B8vLulh62Gt6vkv/lsxSFJeUE3jbJ3LNb+kvw8PULGzthxJ
tzYJBMaMg0XlueESB6Hb4gHgVBbwlBDU2kqxvOzPanSVcBjO5w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:43 2024 by rpki-client on console-ams.rpki-client.org