Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/hmio6SwMPfJ6MK58kyJ6sk6pjQY.roa
File:                     hmio6SwMPfJ6MK58kyJ6sk6pjQY.roa (raw, json)
Hash identifier:          6mW0rpn2RTqaZOzEJfCMSn/3qHZp6IFV84/h2Ne3kMY=
Subject key identifier:   86:68:A8:E9:2C:0C:3D:F2:7A:30:AE:7C:93:22:7A:B2:4E:A9:8D:06
Certificate issuer:       /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial:       0182C9F2ED554EAF030BAB5F344840318D7B
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/hmio6SwMPfJ6MK58kyJ6sk6pjQY.roa
Signing time:             Tue 23 Aug 2022 09:05:17 +0000
ROA not before:           Tue 23 Aug 2022 09:05:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51765
IP address blocks:        193.108.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:c9:f2:ed:55:4e:af:03:0b:ab:5f:34:48:40:31:8d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
        Validity
            Not Before: Aug 23 09:05:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8668a8e92c0c3df27a30ae7c93227ab24ea98d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:00:26:94:e5:7c:38:a9:72:64:c0:c1:7c:dd:
                    cf:a4:12:42:41:ad:81:79:7b:0d:20:2b:e6:6a:80:
                    fa:8a:11:89:15:bd:88:30:19:68:3b:c6:e8:f3:c6:
                    49:85:cc:ad:75:80:41:1d:90:0f:5b:45:dc:ea:7b:
                    e0:f9:64:dd:e8:ea:48:eb:e5:69:7c:55:0a:6a:91:
                    24:b4:a2:ca:91:bd:5f:a0:cd:50:c7:0e:c6:35:3f:
                    bc:a8:a3:b4:7d:03:36:a4:f5:c7:56:65:61:e8:95:
                    e4:44:29:60:a1:bf:0e:76:ad:2f:66:86:e4:8d:21:
                    6e:2b:8c:30:2e:24:a9:23:47:b4:5f:cb:8c:4b:94:
                    75:d3:4e:3e:ce:82:c5:d6:ae:d0:bf:61:de:71:59:
                    b0:d4:9e:a9:96:f4:00:a3:c7:87:6f:5d:b1:1b:8b:
                    72:a7:df:49:bd:32:3c:5e:3e:3f:b8:e5:33:ae:1b:
                    ef:27:27:22:87:c4:4c:15:cc:47:38:af:a9:2b:48:
                    fb:bd:9f:68:17:a9:0b:21:5d:1b:a4:56:11:c4:6a:
                    1d:68:5f:b3:d7:0a:89:97:e8:46:21:6d:98:0e:e1:
                    e1:22:7f:50:d0:19:68:f5:fe:f0:98:0b:cb:e2:41:
                    53:c4:2c:4c:a0:05:19:f6:b0:78:39:44:59:fc:11:
                    65:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:68:A8:E9:2C:0C:3D:F2:7A:30:AE:7C:93:22:7A:B2:4E:A9:8D:06
            X509v3 Authority Key Identifier:
                keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/hmio6SwMPfJ6MK58kyJ6sk6pjQY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.108.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:11:24:8a:b9:dd:30:88:a7:92:45:d6:d9:72:58:16:86:aa:
         17:39:c9:77:53:0b:d7:8c:54:5d:96:af:0a:35:a6:64:87:45:
         7a:86:5e:c8:c1:c7:96:68:dc:db:3a:b0:6b:b3:05:c9:8c:fb:
         bc:6f:fa:39:d8:8e:b1:5b:b6:45:7d:9e:be:25:4a:34:3b:fc:
         67:cb:a0:eb:fc:57:2c:86:d8:61:dc:83:69:80:85:ae:eb:cd:
         bf:de:5e:2c:32:66:d0:57:e3:77:e4:24:12:60:78:cd:07:5b:
         5a:20:7f:28:e3:cf:15:a4:48:2c:db:d6:f1:b2:24:3f:ca:8f:
         75:ff:70:21:10:33:72:62:e4:d8:3f:8d:c7:a9:ed:4f:56:ca:
         09:94:f0:8e:b3:80:0c:51:3b:2a:7e:ff:ec:0a:fd:52:61:aa:
         92:24:6f:86:34:74:a8:e5:e4:b5:de:5f:89:ff:38:2f:94:a8:
         93:c7:7a:70:c7:29:c2:55:8c:f0:8c:6f:94:d8:3c:d6:36:20:
         81:70:de:f2:80:39:a7:05:40:4e:84:78:bf:8a:c6:a0:45:94:
         c0:9d:d1:0d:34:75:2b:aa:f1:7d:c0:ad:3a:7a:64:cc:89:3e:
         4e:58:d9:fa:c0:bc:1a:e9:2f:a4:a3:9c:13:24:21:73:de:23:
         ab:94:3b:a6
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYLJ8u1VTq8DC6tfNEhAMY17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMTE1N2U4MWI3YzllNDMzNjBhMWNiNTBhMzE0MDExNzU5
MjE4MDgwHhcNMjIwODIzMDkwNTE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjY4YThlOTJjMGMzZGYyN2EzMGFlN2M5MzIyN2FiMjRlYTk4ZDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQAmlOV8OKlyZMDBfN3PpBJCQa2B
eXsNICvmaoD6ihGJFb2IMBloO8bo88ZJhcytdYBBHZAPW0Xc6nvg+WTd6OpI6+Vp
fFUKapEktKLKkb1foM1Qxw7GNT+8qKO0fQM2pPXHVmVh6JXkRClgob8Odq0vZobk
jSFuK4wwLiSpI0e0X8uMS5R1004+zoLF1q7Qv2HecVmw1J6plvQAo8eHb12xG4ty
p99JvTI8Xj4/uOUzrhvvJycih8RMFcxHOK+pK0j7vZ9oF6kLIV0bpFYRxGodaF+z
1wqJl+hGIW2YDuHhIn9Q0Blo9f7wmAvL4kFTxCxMoAUZ9rB4OURZ/BFl7wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFIZoqOksDD3yejCufJMierJOqY0GMB8GA1UdIwQY
MBaAFPsRV+gbfJ5DNgoctQoxQBF1khgIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14Rlg2QnQ4bmtNMkNoeTFDakZBRVhXU0dBZy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvMTkzYzcxLWM5NGEtNDE2Zi1hMTg2
LTQxNjY2NGYwMWEyYy8xL2htaW82U3dNUGZKNk1LNThreUo2c2s2cGpRWS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTQvMTkzYzcxLWM5NGEtNDE2Zi1hMTg2LTQxNjY2NGYwMWEy
Yy8xLzEteEZYNkJ0OG5rTTJDaHkxQ2pGQUVYV1NHQWcuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBbGYw
DQYJKoZIhvcNAQELBQADggEBAIkRJIq53TCIp5JF1tlyWBaGqhc5yXdTC9eMVF2W
rwo1pmSHRXqGXsjBx5Zo3Ns6sGuzBcmM+7xv+jnYjrFbtkV9nr4lSjQ7/GfLoOv8
VyyG2GHcg2mAha7rzb/eXiwyZtBX43fkJBJgeM0HW1ogfyjjzxWkSCzb1vGyJD/K
j3X/cCEQM3Ji5Ng/jcep7U9WygmU8I6zgAxROyp+/+wK/VJhqpIkb4Y0dKjl5LXe
X4n/OC+UqJPHenDHKcJVjPCMb5TYPNY2IIFw3vKAOacFQE6EeL+KxqBFlMCd0Q00
dSuq8X3ArTp6ZMyJPk5Y2frAvBrpL6SjnBMkIXPeI6uUO6Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:00 2024 by rpki-client on console-fra.rpki-client.org