Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/uZvcVZ_5m5pvs_PtUD218A7eCMc.roa
File:                     uZvcVZ_5m5pvs_PtUD218A7eCMc.roa (raw, json)
Hash identifier:          1LzAnESvv27BoeNRq3CsgSR2ffd6lzmz5gB7Do67yu0=
Subject key identifier:   B9:9B:DC:55:9F:F9:9B:9A:6F:B3:F3:ED:50:3D:B5:F0:0E:DE:08:C7
Certificate issuer:       /CN=170ef71a422a2f0fe91160579a4050618d8baf10
Certificate serial:       035B8AAD
Authority key identifier: 17:0E:F7:1A:42:2A:2F:0F:E9:11:60:57:9A:40:50:61:8D:8B:AF:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fw73GkIqLw_pEWBXmkBQYY2LrxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/uZvcVZ_5m5pvs_PtUD218A7eCMc.roa
Signing time:             Sat 01 Jan 2022 05:54:35 +0000
ROA not before:           Sat 01 Jan 2022 05:54:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     54103
IP address blocks:        185.51.48.0/22 maxlen: 22
                          46.244.116.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56330925 (0x35b8aad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=170ef71a422a2f0fe91160579a4050618d8baf10
        Validity
            Not Before: Jan  1 05:54:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b99bdc559ff99b9a6fb3f3ed503db5f00ede08c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:65:36:d8:3e:94:b5:22:9d:6a:d7:3b:f2:d7:
                    fe:92:28:2d:74:85:c2:e7:b0:3a:25:4e:c7:c0:6e:
                    f8:6b:8e:50:2a:4f:01:de:a2:71:2c:e3:90:34:e2:
                    a6:0f:fd:13:12:17:8c:7e:6d:a4:17:1d:d6:56:45:
                    9b:b7:b7:b1:99:27:bb:1c:76:eb:b8:72:b5:30:f6:
                    a4:6b:4d:17:6e:46:11:65:2c:72:f2:7c:fe:25:77:
                    58:c4:86:92:ba:e6:4c:7e:4b:fc:33:6d:af:39:72:
                    2a:cb:2e:c3:2f:5f:e9:84:9d:ea:e9:b2:04:f7:a1:
                    30:58:79:fb:e5:d4:be:27:0f:9c:e1:62:9f:13:ca:
                    c0:6a:48:62:06:5b:3c:80:77:41:fd:8b:51:20:72:
                    e7:85:99:db:46:10:bc:6c:b4:df:39:75:2e:20:e6:
                    44:8f:e0:56:e0:94:af:9a:2d:47:41:63:ed:ba:7c:
                    ac:b0:8b:b5:53:76:cc:28:b9:52:7f:1c:cd:45:e3:
                    d2:c2:e0:19:0c:eb:0f:6c:82:39:de:bb:92:3a:bc:
                    9b:b2:14:e6:23:83:b8:58:5c:b1:ad:e3:a0:53:b6:
                    f4:82:63:45:f4:7e:3a:54:24:9c:31:84:d6:1c:07:
                    99:e7:a4:39:1d:7e:52:2f:b4:da:07:b5:cc:4f:f7:
                    ac:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9B:DC:55:9F:F9:9B:9A:6F:B3:F3:ED:50:3D:B5:F0:0E:DE:08:C7
            X509v3 Authority Key Identifier:
                keyid:17:0E:F7:1A:42:2A:2F:0F:E9:11:60:57:9A:40:50:61:8D:8B:AF:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fw73GkIqLw_pEWBXmkBQYY2LrxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/uZvcVZ_5m5pvs_PtUD218A7eCMc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/Fw73GkIqLw_pEWBXmkBQYY2LrxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.244.116.0/22
                  185.51.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:f1:ea:c5:89:55:6a:57:e9:92:b3:b7:2a:80:fa:67:11:ec:
         4f:f8:66:82:a1:5e:64:e8:a7:4c:72:33:c3:be:17:3f:95:00:
         f2:2d:25:b0:6c:c5:6e:2d:3a:b4:5f:40:ac:62:ac:73:f8:6e:
         2e:86:2d:22:9c:05:e2:36:e1:89:e2:f6:df:83:4b:58:43:06:
         9c:75:19:f1:08:76:26:7f:00:98:f3:b9:c3:e0:fe:06:d8:72:
         4f:5d:48:7b:2e:01:2e:bd:e7:c4:25:d7:42:f3:61:fa:08:06:
         f6:4a:73:d4:ce:e1:99:db:e8:1b:b1:be:9e:43:3d:f0:99:c7:
         59:0d:08:3f:95:83:6b:6d:2f:1c:58:58:60:08:10:4c:81:f0:
         4c:51:bb:52:d5:1e:52:61:a2:5b:af:65:8f:43:d4:a7:3c:81:
         52:42:ce:f3:79:23:0c:05:bf:cb:47:f1:d3:e5:2f:ab:93:f9:
         29:63:41:bb:d9:b7:fc:4a:3a:7a:02:08:a0:57:79:20:60:53:
         30:e4:be:0a:54:0f:c4:de:84:cc:3f:2b:63:6e:c2:70:41:ab:
         c6:f2:59:f4:18:98:6a:a0:07:30:db:a8:96:1c:19:bd:83:77:
         31:a6:8d:57:24:46:dd:7e:f8:f3:13:d1:95:f8:a8:9f:31:5e:
         90:d8:a4:44
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA1uKrTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NzBlZjcxYTQyMmEyZjBmZTkxMTYwNTc5YTQwNTA2MThkOGJhZjEwMB4XDTIyMDEw
MTA1NTQzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjk5YmRjNTU5ZmY5
OWI5YTZmYjNmM2VkNTAzZGI1ZjAwZWRlMDhjNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKdlNtg+lLUinWrXO/LX/pIoLXSFwuewOiVOx8Bu+GuOUCpP
Ad6icSzjkDTipg/9ExIXjH5tpBcd1lZFm7e3sZknuxx267hytTD2pGtNF25GEWUs
cvJ8/iV3WMSGkrrmTH5L/DNtrzlyKssuwy9f6YSd6umyBPehMFh5++XUvicPnOFi
nxPKwGpIYgZbPIB3Qf2LUSBy54WZ20YQvGy03zl1LiDmRI/gVuCUr5otR0Fj7bp8
rLCLtVN2zCi5Un8czUXj0sLgGQzrD2yCOd67kjq8m7IU5iODuFhcsa3joFO29IJj
RfR+OlQknDGE1hwHmeekOR1+Ui+02ge1zE/3rBMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBS5m9xVn/mbmm+z8+1QPbXwDt4IxzAfBgNVHSMEGDAWgBQXDvcaQiovD+kR
YFeaQFBhjYuvEDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0Z3NzNHa0lxTHdfcEVXQlhta0JRWVkyTHJ4QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTUvZTVmN2U5LTgwZjktNDMxNy1iMjFlLTgzMzZmZWM0ODhmMy8x
L3VadmNWWl81bTVwdnNfUHRVRDIxOEE3ZUNNYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUv
ZTVmN2U5LTgwZjktNDMxNy1iMjFlLTgzMzZmZWM0ODhmMy8xL0Z3NzNHa0lxTHdf
cEVXQlhta0JRWVkyTHJ4QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAi70dAMEArkzMDANBgkqhkiG9w0B
AQsFAAOCAQEAGvHqxYlValfpkrO3KoD6ZxHsT/hmgqFeZOinTHIzw74XP5UA8i0l
sGzFbi06tF9ArGKsc/huLoYtIpwF4jbhieL234NLWEMGnHUZ8Qh2Jn8AmPO5w+D+
BthyT11Iey4BLr3nxCXXQvNh+ggG9kpz1M7hmdvoG7G+nkM98JnHWQ0IP5WDa20v
HFhYYAgQTIHwTFG7UtUeUmGiW69lj0PUpzyBUkLO83kjDAW/y0fx0+Uvq5P5KWNB
u9m3/Eo6egIIoFd5IGBTMOS+ClQPxN6EzD8rY27CcEGrxvJZ9BiYaqAHMNuolhwZ
vYN3MaaNVyRG3X748xPRlfionzFekNikRA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:15 2024 by rpki-client on console-fra.rpki-client.org