Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/khZ6scSyMRebJDzFx7sAg_K2-50.roa
File:                     khZ6scSyMRebJDzFx7sAg_K2-50.roa (raw, json)
Hash identifier:          ndkJ3aiBAiHq3vMwZbkF4WRWyMq5MYH0kqQFD3rA8I8=
Subject key identifier:   92:16:7A:B1:C4:B2:31:17:9B:24:3C:C5:C7:BB:00:83:F2:B6:FB:9D
Certificate issuer:       /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial:       04B327F9
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/khZ6scSyMRebJDzFx7sAg_K2-50.roa
Signing time:             Mon 31 Jan 2022 14:28:50 +0000
ROA not before:           Mon 31 Jan 2022 14:28:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        85.237.201.0/24 maxlen: 24
                          85.237.209.0/24 maxlen: 24
                          85.237.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78850041 (0x4b327f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
        Validity
            Not Before: Jan 31 14:28:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=92167ab1c4b231179b243cc5c7bb0083f2b6fb9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ae:de:a4:f9:9c:ee:b5:29:41:72:b7:5f:6f:
                    1f:ba:4e:0d:a1:be:25:06:33:a2:3c:2c:a2:13:6a:
                    3b:97:26:cf:65:5b:be:72:cd:30:a1:f0:f5:3b:19:
                    aa:6e:be:b1:69:0c:8d:46:ff:f5:d8:2e:e3:c4:bc:
                    b3:8b:15:0d:05:0f:9e:37:f7:5f:3e:84:bc:f7:1e:
                    2c:f6:92:50:56:65:bf:e8:69:99:9b:ec:71:33:a3:
                    97:47:d4:a8:1c:26:9f:aa:48:cf:6e:62:73:57:e3:
                    aa:21:fe:56:de:53:9a:74:fe:f7:7d:6d:e2:75:83:
                    ae:ea:8c:1e:aa:16:c1:b2:a2:da:ec:36:5a:ba:79:
                    5b:08:c8:ac:0d:77:6e:2d:c0:e5:39:8b:aa:4b:8e:
                    70:53:c3:68:8a:29:ff:8d:fa:d2:92:c4:3e:c0:8f:
                    6b:1b:5d:5f:58:90:76:72:70:94:82:0b:26:30:95:
                    b3:91:48:41:f3:f7:0d:ca:12:4e:97:b5:f0:bb:1f:
                    60:74:bd:cc:c6:4b:4f:9e:77:05:fe:46:a0:25:4a:
                    fa:5b:b3:bd:54:33:78:2f:d8:99:47:a9:3d:df:90:
                    94:90:f5:04:07:84:35:c6:33:66:2b:15:d2:f9:08:
                    50:4a:a4:2d:99:10:49:20:35:d2:20:dc:b2:9b:e9:
                    04:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:16:7A:B1:C4:B2:31:17:9B:24:3C:C5:C7:BB:00:83:F2:B6:FB:9D
            X509v3 Authority Key Identifier:
                keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/khZ6scSyMRebJDzFx7sAg_K2-50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.237.201.0/24
                  85.237.209.0/24
                  85.237.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:70:03:1c:27:58:87:25:27:de:0b:a8:11:f3:b8:4d:54:76:
         49:1a:53:fd:fd:25:31:54:38:bc:f2:01:66:04:03:38:9e:37:
         ee:21:44:ac:e2:8f:01:9c:98:8a:ea:69:52:ea:08:2e:55:11:
         f8:b9:2f:68:d2:ca:e8:da:6b:63:9b:f7:bc:da:d0:dd:28:f8:
         e7:2d:17:d1:46:6c:68:9a:69:bc:69:87:6a:e7:01:5e:2f:e3:
         16:4e:a4:ad:79:64:57:09:36:18:11:d4:cc:33:a2:f1:b5:5d:
         2b:f0:1a:07:9a:ce:6b:13:d4:44:5c:b9:2c:96:8d:39:0f:9b:
         91:f8:14:8d:68:14:15:19:6f:af:dc:43:ff:39:7c:a8:08:17:
         20:fa:16:53:d5:a4:53:aa:b2:0a:55:e9:5f:44:8a:5b:ce:c1:
         a7:fa:84:ad:b6:9c:29:5c:0a:a8:f4:1d:c7:df:83:c1:58:8a:
         79:72:81:be:dd:b0:08:45:e9:55:a2:ee:de:b5:b2:b8:f1:9c:
         79:a7:d5:af:e9:83:cb:4a:9b:30:37:c4:d7:1b:76:f5:e4:b1:
         06:d6:54:8c:d1:de:ea:74:4d:de:42:6e:6f:d7:5d:b6:b0:e4:
         95:4c:e3:13:a6:95:53:43:9f:60:69:56:c9:eb:10:dc:40:ac:
         28:1d:6b:98
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEBLMn+TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
OTBiNjczNjhjOTFiODVlODQ4ODhjNWVkMmU4MjRkMTM5MDgxMGJiMB4XDTIyMDEz
MTE0Mjg1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTIxNjdhYjFjNGIy
MzExNzliMjQzY2M1YzdiYjAwODNmMmI2ZmI5ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANCu3qT5nO61KUFyt19vH7pODaG+JQYzojwsohNqO5cmz2Vb
vnLNMKHw9TsZqm6+sWkMjUb/9dgu48S8s4sVDQUPnjf3Xz6EvPceLPaSUFZlv+hp
mZvscTOjl0fUqBwmn6pIz25ic1fjqiH+Vt5TmnT+931t4nWDruqMHqoWwbKi2uw2
Wrp5WwjIrA13bi3A5TmLqkuOcFPDaIop/4360pLEPsCPaxtdX1iQdnJwlIILJjCV
s5FIQfP3DcoSTpe18LsfYHS9zMZLT553Bf5GoCVK+luzvVQzeC/YmUepPd+QlJD1
BAeENcYzZisV0vkIUEqkLZkQSSA10iDcspvpBMsCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBSSFnqxxLIxF5skPMXHuwCD8rb7nTAfBgNVHSMEGDAWgBQ5C2c2jJG4XoSI
jF7S6CTROQgQuzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09RdG5Ob3lSdUY2RWlJeGUwdWdrMFRrSUVMcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTIvMTZjY2U0LWU5ODEtNGJlNS1iOWY2LTVjOWQ2MjYyOWM4Ni8x
L2toWjZzY1N5TVJlYkpEekZ4N3NBZ19LMi01MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIv
MTZjY2U0LWU5ODEtNGJlNS1iOWY2LTVjOWQ2MjYyOWM4Ni8xL09RdG5Ob3lSdUY2
RWlJeGUwdWdrMFRrSUVMcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFXtyQMEAFXt0QMEAFXt2TANBgkq
hkiG9w0BAQsFAAOCAQEAWHADHCdYhyUn3guoEfO4TVR2SRpT/f0lMVQ4vPIBZgQD
OJ437iFErOKPAZyYiuppUuoILlUR+LkvaNLK6NprY5v3vNrQ3Sj45y0X0UZsaJpp
vGmHaucBXi/jFk6krXlkVwk2GBHUzDOi8bVdK/AaB5rOaxPURFy5LJaNOQ+bkfgU
jWgUFRlvr9xD/zl8qAgXIPoWU9WkU6qyClXpX0SKW87Bp/qErbacKVwKqPQdx9+D
wViKeXKBvt2wCEXpVaLu3rWyuPGceafVr+mDy0qbMDfE1xt29eSxBtZUjNHe6nRN
3kJub9ddtrDklUzjE6aVU0OfYGlWyesQ3ECsKB1rmA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:47 2024 by rpki-client on console-fra.rpki-client.org