Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0ba6a9-375d-485b-b0ec-42676f09f099/1/RR12MExxr56-19XPnUGe1XiD0AQ.roa
File:                     RR12MExxr56-19XPnUGe1XiD0AQ.roa (raw, json)
Hash identifier:          HQd2rYF6B5cFYSPgnAM+8VYXtxywZZ1cjcnIy5+NE3Q=
Subject key identifier:   45:1D:76:30:4C:71:AF:9E:BE:D7:D5:CF:9D:41:9E:D5:78:83:D0:04
Certificate issuer:       /CN=0aa99e1cc74b4ca77b62cfa0939e79235d2ab9c1
Certificate serial:       018485C92A2EE97BAD0506D7F65274364769
Authority key identifier: 0A:A9:9E:1C:C7:4B:4C:A7:7B:62:CF:A0:93:9E:79:23:5D:2A:B9:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CqmeHMdLTKd7Ys-gk555I10qucE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/0ba6a9-375d-485b-b0ec-42676f09f099/1/RR12MExxr56-19XPnUGe1XiD0AQ.roa
Signing time:             Thu 17 Nov 2022 13:31:04 +0000
ROA not before:           Thu 17 Nov 2022 13:31:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202423
IP address blocks:        185.247.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:85:c9:2a:2e:e9:7b:ad:05:06:d7:f6:52:74:36:47:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aa99e1cc74b4ca77b62cfa0939e79235d2ab9c1
        Validity
            Not Before: Nov 17 13:31:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=451d76304c71af9ebed7d5cf9d419ed57883d004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c4:b2:ba:63:88:8b:d5:66:d7:d6:90:61:dc:
                    67:d5:7b:e2:6e:92:01:a8:be:9d:d0:8b:58:b0:bd:
                    d5:e8:ff:d6:c1:34:62:34:e6:44:ff:96:32:c2:de:
                    65:c0:94:d0:3a:50:cc:61:66:70:88:91:f4:94:d4:
                    02:ae:46:89:96:b7:76:97:0e:73:02:88:a5:06:f6:
                    a9:eb:f4:37:21:91:c0:31:b9:71:94:1f:ce:c7:cb:
                    fb:98:f6:84:70:7e:aa:47:b9:f8:5b:42:24:4e:94:
                    29:b3:fb:21:61:16:fe:57:f2:28:f4:1f:31:fe:48:
                    f0:a8:84:5e:30:6f:39:fb:69:7b:fe:f4:9b:25:2c:
                    9d:ef:7a:01:b2:87:44:a2:26:2a:a1:f5:7f:0f:93:
                    b7:f8:c4:1d:ae:99:99:4f:3d:ae:ba:f9:54:bc:53:
                    9c:68:cb:65:d0:eb:25:5c:33:b0:b7:03:0b:9b:c4:
                    b8:59:24:51:8e:15:96:ac:af:3c:2f:fb:55:39:ed:
                    75:26:61:03:e3:21:1d:b9:b9:61:63:5d:32:60:ab:
                    28:27:6a:3a:91:2c:bd:06:83:6a:bc:9e:7e:06:66:
                    83:12:24:66:9e:79:63:20:67:2b:e9:fd:da:57:99:
                    60:f3:d7:ab:23:50:5f:c9:ca:32:00:67:dc:fd:b3:
                    48:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1D:76:30:4C:71:AF:9E:BE:D7:D5:CF:9D:41:9E:D5:78:83:D0:04
            X509v3 Authority Key Identifier:
                keyid:0A:A9:9E:1C:C7:4B:4C:A7:7B:62:CF:A0:93:9E:79:23:5D:2A:B9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqmeHMdLTKd7Ys-gk555I10qucE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0ba6a9-375d-485b-b0ec-42676f09f099/1/RR12MExxr56-19XPnUGe1XiD0AQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0ba6a9-375d-485b-b0ec-42676f09f099/1/CqmeHMdLTKd7Ys-gk555I10qucE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.247.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:a7:c0:32:82:54:10:68:af:32:3d:c9:2a:75:b0:74:7c:dc:
         70:ec:65:ef:57:ab:9b:e9:2c:04:75:58:29:71:01:89:bf:a6:
         a8:3f:a1:cc:03:26:2b:8e:20:d0:3e:ce:b9:fb:49:7e:79:69:
         4b:4b:a8:93:81:9b:2e:44:38:93:c9:db:37:07:6c:8f:b6:aa:
         96:04:54:f8:83:d5:90:14:71:30:b4:08:8a:59:0e:4c:12:44:
         b1:92:c7:0e:eb:2a:68:bd:4c:a9:0a:65:a2:77:a2:48:00:9d:
         8b:9c:8c:73:90:27:c2:c6:8c:41:f2:7e:ca:64:c6:37:63:f4:
         65:cc:ce:b8:8b:10:1d:61:99:69:78:05:bc:0f:ac:1e:15:c3:
         f3:dd:bf:f5:43:2a:d7:11:b7:fd:ab:d7:21:af:7e:0f:e3:ca:
         3a:bc:04:2d:b9:82:4d:38:cb:c5:9c:6a:a8:8e:99:b8:e6:64:
         d6:20:59:10:59:94:27:cf:45:1e:c0:c7:90:be:2c:1a:d6:d7:
         88:a8:88:e9:f7:64:47:12:17:9c:1d:8a:ff:c9:65:4b:35:af:
         d7:c4:cd:96:2f:27:7a:91:d6:5f:5a:05:23:df:ec:1f:bd:9a:
         8f:9b:a3:c7:32:0c:cd:a5:b3:b6:94:f7:15:ab:56:fd:5f:fe:
         89:ec:0a:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSFySou6XutBQbX9lJ0NkdpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYTk5ZTFjYzc0YjRjYTc3YjYyY2ZhMDkzOWU3OTIzNWQy
YWI5YzEwHhcNMjIxMTE3MTMzMTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTFkNzYzMDRjNzFhZjllYmVkN2Q1Y2Y5ZDQxOWVkNTc4ODNkMDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosSyumOIi9Vm19aQYdxn1XvibpIB
qL6d0ItYsL3V6P/WwTRiNOZE/5Yywt5lwJTQOlDMYWZwiJH0lNQCrkaJlrd2lw5z
AoilBvap6/Q3IZHAMblxlB/Ox8v7mPaEcH6qR7n4W0IkTpQps/shYRb+V/Io9B8x
/kjwqIReMG85+2l7/vSbJSyd73oBsodEoiYqofV/D5O3+MQdrpmZTz2uuvlUvFOc
aMtl0OslXDOwtwMLm8S4WSRRjhWWrK88L/tVOe11JmED4yEdublhY10yYKsoJ2o6
kSy9BoNqvJ5+BmaDEiRmnnljIGcr6f3aV5lg89erI1BfycoyAGfc/bNIgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEUddjBMca+evtfVz51BntV4g9AEMB8GA1UdIwQY
MBaAFAqpnhzHS0yne2LPoJOeeSNdKrnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3FtZUhNZExUS2Q3WXMtZ2s1NTVJMTBxdWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wYmE2YTktMzc1ZC00ODViLWIwZWMt
NDI2NzZmMDlmMDk5LzEvUlIxMk1FeHhyNTYtMTlYUG5VR2UxWGlEMEFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8wYmE2YTktMzc1ZC00ODViLWIwZWMtNDI2NzZmMDlmMDk5
LzEvQ3FtZUhNZExUS2Q3WXMtZ2s1NTVJMTBxdWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufe5MA0G
CSqGSIb3DQEBCwUAA4IBAQC3p8AyglQQaK8yPckqdbB0fNxw7GXvV6ub6SwEdVgp
cQGJv6aoP6HMAyYrjiDQPs65+0l+eWlLS6iTgZsuRDiTyds3B2yPtqqWBFT4g9WQ
FHEwtAiKWQ5MEkSxkscO6ypovUypCmWid6JIAJ2LnIxzkCfCxoxB8n7KZMY3Y/Rl
zM64ixAdYZlpeAW8D6weFcPz3b/1QyrXEbf9q9chr34P48o6vAQtuYJNOMvFnGqo
jpm45mTWIFkQWZQnz0UewMeQviwa1teIqIjp92RHEhecHYr/yWVLNa/XxM2WLyd6
kdZfWgUj3+wfvZqPm6PHMgzNpbO2lPcVq1b9X/6J7ArO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:53 2024 by rpki-client on console-fra.rpki-client.org