Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f5f0ca-2df8-430f-aea7-5de67c61298e/1/2quVaNU_UK4AeDSRXeyjlmj0Z7o.roa
File:                     2quVaNU_UK4AeDSRXeyjlmj0Z7o.roa (raw, json)
Hash identifier:          c+meiHHf1XGdXMuwSRQkvBDGJn56OsUW95s8/sFdecQ=
Subject key identifier:   DA:AB:95:68:D5:3F:50:AE:00:78:34:91:5D:EC:A3:96:68:F4:67:BA
Certificate issuer:       /CN=b0a371c5831db97063e0cc04bce0b4e9b0066ccd
Certificate serial:       018CC6B889C9ED59BD612F1715D5F5F5C09D
Authority key identifier: B0:A3:71:C5:83:1D:B9:70:63:E0:CC:04:BC:E0:B4:E9:B0:06:6C:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sKNxxYMduXBj4MwEvOC06bAGbM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f5f0ca-2df8-430f-aea7-5de67c61298e/1/2quVaNU_UK4AeDSRXeyjlmj0Z7o.roa
Signing time:             Mon 01 Jan 2024 20:30:31 +0000
ROA not before:           Mon 01 Jan 2024 20:30:31 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     58061
IP address blocks:        93.177.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b8:89:c9:ed:59:bd:61:2f:17:15:d5:f5:f5:c0:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0a371c5831db97063e0cc04bce0b4e9b0066ccd
        Validity
            Not Before: Jan  1 20:30:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=daab9568d53f50ae007834915deca39668f467ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2a:06:90:1b:61:ed:a6:94:ab:fc:98:3c:8b:
                    2c:67:38:4a:5e:ff:02:5a:51:6d:8e:eb:58:b4:ab:
                    f6:61:b0:5c:2f:24:4e:ae:8e:60:c0:01:1a:da:57:
                    37:f0:d2:ca:6e:71:72:70:73:30:eb:96:ae:7b:76:
                    2a:59:ee:b6:84:14:12:12:cc:5d:ac:a8:ce:5c:a3:
                    dd:6b:85:4d:46:c1:a3:c9:32:7b:52:57:d3:85:41:
                    f7:9b:8f:77:0f:92:2f:8c:52:d0:56:40:d8:22:8f:
                    72:0a:50:87:0b:fb:2e:19:4e:8c:17:44:18:42:66:
                    40:40:e7:a4:21:46:10:79:cf:16:cb:87:ef:09:75:
                    ae:86:17:40:d7:cf:5a:98:b5:89:b2:f0:fb:a8:ca:
                    68:61:0e:f3:d7:72:58:1c:40:1f:a6:70:25:25:be:
                    94:fc:8a:c4:55:cb:8c:55:17:58:0a:b2:36:93:41:
                    9b:ac:0e:84:f8:68:63:9c:19:6d:06:92:fb:a6:a6:
                    4d:b8:0f:05:39:58:11:6c:c0:a5:06:43:e3:a7:8c:
                    a3:51:8a:e8:f7:81:ad:d9:43:b9:e6:0b:b9:cb:f6:
                    a8:83:15:3d:07:7a:6e:a6:aa:77:46:ea:d4:a2:d4:
                    ea:03:de:e6:c7:6f:ba:0d:6b:ed:cc:73:9e:14:60:
                    05:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AB:95:68:D5:3F:50:AE:00:78:34:91:5D:EC:A3:96:68:F4:67:BA
            X509v3 Authority Key Identifier:
                keyid:B0:A3:71:C5:83:1D:B9:70:63:E0:CC:04:BC:E0:B4:E9:B0:06:6C:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKNxxYMduXBj4MwEvOC06bAGbM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f5f0ca-2df8-430f-aea7-5de67c61298e/1/2quVaNU_UK4AeDSRXeyjlmj0Z7o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f5f0ca-2df8-430f-aea7-5de67c61298e/1/sKNxxYMduXBj4MwEvOC06bAGbM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:7e:ad:f5:77:b4:be:5d:b9:44:5c:d1:e7:5a:12:3c:9e:39:
         7c:3c:3e:ba:18:79:db:f9:0b:d4:11:16:64:f7:7d:8a:46:41:
         4b:03:50:8a:1c:f4:0b:ba:2e:74:8d:38:46:cb:04:aa:d2:bd:
         a4:9a:a3:f9:67:19:dc:0a:4a:ac:dc:8c:99:86:7a:a9:56:c6:
         b9:a8:56:95:7d:96:c2:36:50:68:5e:c4:50:df:c2:e9:5d:f6:
         4c:3c:58:49:fa:0d:df:dd:cf:53:a3:a2:a7:55:2a:70:f5:27:
         c4:8b:88:44:19:9e:f2:69:55:ea:36:9e:fc:ae:a6:39:28:23:
         a8:a6:0b:81:58:11:8b:01:a8:18:81:f3:e8:f6:1c:63:1e:82:
         f4:3e:cc:df:25:16:e0:0b:70:7f:ca:30:d0:a8:11:6f:5c:6f:
         59:53:11:5a:31:8d:f9:a6:8b:80:63:14:ac:a4:fd:ac:93:19:
         04:83:d2:27:a9:70:37:5e:d0:70:cc:3c:bf:11:d1:c0:17:77:
         69:3c:77:1b:74:28:6f:22:b4:5c:f5:64:5b:ce:9b:cc:4d:17:
         9b:e0:63:59:1a:67:ed:1a:4b:5c:d5:d6:25:07:fd:67:40:0a:
         da:fd:b4:f1:cd:e8:56:53:c0:3e:fa:8f:e6:2a:4a:0f:41:9d:
         17:36:71:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuInJ7Vm9YS8XFdX19cCdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYTM3MWM1ODMxZGI5NzA2M2UwY2MwNGJjZTBiNGU5YjAw
NjZjY2QwHhcNMjQwMTAxMjAzMDMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWFiOTU2OGQ1M2Y1MGFlMDA3ODM0OTE1ZGVjYTM5NjY4ZjQ2N2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSoGkBth7aaUq/yYPIssZzhKXv8C
WlFtjutYtKv2YbBcLyROro5gwAEa2lc38NLKbnFycHMw65aue3YqWe62hBQSEsxd
rKjOXKPda4VNRsGjyTJ7UlfThUH3m493D5IvjFLQVkDYIo9yClCHC/suGU6MF0QY
QmZAQOekIUYQec8Wy4fvCXWuhhdA189amLWJsvD7qMpoYQ7z13JYHEAfpnAlJb6U
/IrEVcuMVRdYCrI2k0GbrA6E+GhjnBltBpL7pqZNuA8FOVgRbMClBkPjp4yjUYro
94Gt2UO55gu5y/aogxU9B3pupqp3RurUotTqA97mx2+6DWvtzHOeFGAF1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNqrlWjVP1CuAHg0kV3so5Zo9Ge6MB8GA1UdIwQY
MBaAFLCjccWDHblwY+DMBLzgtOmwBmzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0tOeHhZTWR1WEJqNE13RXZPQzA2YkFHYk0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNWYwY2EtMmRmOC00MzBmLWFlYTct
NWRlNjdjNjEyOThlLzEvMnF1VmFOVV9VSzRBZURTUlhleWpsbWowWjdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mNWYwY2EtMmRmOC00MzBmLWFlYTctNWRlNjdjNjEyOThl
LzEvc0tOeHhZTWR1WEJqNE13RXZPQzA2YkFHYk0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXbFrMA0G
CSqGSIb3DQEBCwUAA4IBAQCufq31d7S+XblEXNHnWhI8njl8PD66GHnb+QvUERZk
932KRkFLA1CKHPQLui50jThGywSq0r2kmqP5ZxncCkqs3IyZhnqpVsa5qFaVfZbC
NlBoXsRQ38LpXfZMPFhJ+g3f3c9To6KnVSpw9SfEi4hEGZ7yaVXqNp78rqY5KCOo
pguBWBGLAagYgfPo9hxjHoL0PszfJRbgC3B/yjDQqBFvXG9ZUxFaMY35pouAYxSs
pP2skxkEg9InqXA3XtBwzDy/EdHAF3dpPHcbdChvIrRc9WRbzpvMTReb4GNZGmft
Gktc1dYlB/1nQAra/bTxzehWU8A++o/mKkoPQZ0XNnFY
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org