Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ff63d8-feca-43cd-904d-72b32d951953/1/YzG7nrHTyIH3nFZk4xcrsok0lwQ.roa
File:                     YzG7nrHTyIH3nFZk4xcrsok0lwQ.roa (raw, json)
Hash identifier:          XnQ86MHV1HBB2VbbEtrAUxH5Eec65j7V8UomR7o9VSs=
Subject key identifier:   63:31:BB:9E:B1:D3:C8:81:F7:9C:56:64:E3:17:2B:B2:89:34:97:04
Certificate issuer:       /CN=d481a627017d1a06cedd0b48e4fc6fcff586dd94
Certificate serial:       045A4F8D
Authority key identifier: D4:81:A6:27:01:7D:1A:06:CE:DD:0B:48:E4:FC:6F:CF:F5:86:DD:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IGmJwF9GgbO3QtI5Pxvz_WG3ZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/ff63d8-feca-43cd-904d-72b32d951953/1/YzG7nrHTyIH3nFZk4xcrsok0lwQ.roa
Signing time:             Fri 24 Jun 2022 19:24:41 +0000
ROA not before:           Fri 24 Jun 2022 19:24:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42926
IP address blocks:        93.180.132.0/24 maxlen: 24
                          93.180.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73027469 (0x45a4f8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d481a627017d1a06cedd0b48e4fc6fcff586dd94
        Validity
            Not Before: Jun 24 19:24:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6331bb9eb1d3c881f79c5664e3172bb289349704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f4:d2:a8:b7:ea:31:5f:7e:52:5c:1a:ce:27:
                    5f:c3:97:cd:d2:34:f7:c1:e8:14:e6:46:22:c4:c9:
                    f1:9a:b2:0a:28:34:44:81:7e:ed:0f:17:f7:07:d3:
                    23:14:88:a0:2e:3a:68:78:51:e9:0f:25:d1:de:bd:
                    0e:4b:9f:40:b8:0a:e4:f7:9b:4f:36:77:f7:22:e0:
                    4d:ad:05:22:d2:ab:e9:67:b6:06:cc:7a:7f:3b:15:
                    e6:55:89:78:7e:28:2b:7a:3f:fa:e1:05:51:fb:47:
                    f8:84:62:32:01:2b:72:91:94:24:a1:dc:a5:95:c1:
                    f2:58:0a:c9:96:4c:c2:12:39:89:83:56:a0:01:9d:
                    b8:8c:94:30:1b:3b:16:27:7d:83:76:a7:7f:39:ff:
                    f1:3a:72:c9:fc:c2:e4:8d:ff:c8:e8:c4:ef:84:3b:
                    0f:66:7f:a8:00:c0:73:dc:44:64:23:d3:1c:4f:b6:
                    0b:94:c7:3c:8a:f1:ac:d7:5e:f6:16:bc:14:76:93:
                    ed:bb:83:75:7f:23:af:32:f1:ee:84:cd:c1:c2:8a:
                    0b:b3:68:55:d1:39:54:1f:50:dd:f6:58:7a:3e:2e:
                    b1:e8:b2:0e:7a:80:9f:45:1d:fe:d2:ba:85:4e:72:
                    98:81:5f:97:09:91:59:35:44:ae:32:e3:60:74:17:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:31:BB:9E:B1:D3:C8:81:F7:9C:56:64:E3:17:2B:B2:89:34:97:04
            X509v3 Authority Key Identifier:
                keyid:D4:81:A6:27:01:7D:1A:06:CE:DD:0B:48:E4:FC:6F:CF:F5:86:DD:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IGmJwF9GgbO3QtI5Pxvz_WG3ZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ff63d8-feca-43cd-904d-72b32d951953/1/YzG7nrHTyIH3nFZk4xcrsok0lwQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ff63d8-feca-43cd-904d-72b32d951953/1/1IGmJwF9GgbO3QtI5Pxvz_WG3ZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.180.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:f3:b4:5e:e0:d7:77:b4:d5:a4:fd:5c:26:40:2d:50:55:c9:
         a0:33:58:7e:de:a4:96:86:6a:07:77:d7:a7:8c:a2:c4:5b:4d:
         94:b9:84:73:bf:29:61:e1:30:45:0a:d3:68:c8:8b:03:b2:0a:
         6b:78:44:d3:72:96:c2:32:87:c3:1d:8d:5c:0f:ec:12:c3:0c:
         ca:d0:e0:e8:7c:81:75:aa:c2:b6:89:80:d2:56:9e:28:49:00:
         09:a5:b3:78:18:09:be:bd:81:10:cc:91:06:81:52:47:10:8b:
         97:a9:59:12:57:70:bb:e4:12:cb:ff:b9:46:20:01:2d:0e:a1:
         57:80:8c:88:29:00:09:7c:d6:13:7e:e2:0e:1d:99:72:28:14:
         55:e8:4b:91:c7:db:17:89:b1:b3:af:a9:cd:14:c1:da:2f:fb:
         fd:4e:d9:58:53:9e:c9:d8:6f:7d:a8:3e:2e:0e:38:c5:61:80:
         0d:35:45:71:18:11:29:6c:91:a0:b9:58:e4:f0:a6:1c:14:c6:
         b0:54:75:be:46:81:69:05:7d:f5:d0:ce:29:96:77:a1:a2:49:
         86:0c:63:d0:45:b0:d9:f8:34:60:50:69:54:90:1f:5f:37:b4:
         4d:19:8f:27:0d:4c:cf:01:c2:16:8e:48:40:67:71:0a:90:e3:
         ac:e1:e5:43
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBFpPjTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NDgxYTYyNzAxN2QxYTA2Y2VkZDBiNDhlNGZjNmZjZmY1ODZkZDk0MB4XDTIyMDYy
NDE5MjQ0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjMzMWJiOWViMWQz
Yzg4MWY3OWM1NjY0ZTMxNzJiYjI4OTM0OTcwNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALX00qi36jFfflJcGs4nX8OXzdI098HoFOZGIsTJ8ZqyCig0
RIF+7Q8X9wfTIxSIoC46aHhR6Q8l0d69DkufQLgK5PebTzZ39yLgTa0FItKr6We2
Bsx6fzsV5lWJeH4oK3o/+uEFUftH+IRiMgErcpGUJKHcpZXB8lgKyZZMwhI5iYNW
oAGduIyUMBs7Fid9g3anfzn/8TpyyfzC5I3/yOjE74Q7D2Z/qADAc9xEZCPTHE+2
C5THPIrxrNde9ha8FHaT7buDdX8jrzLx7oTNwcKKC7NoVdE5VB9Q3fZYej4useiy
DnqAn0Ud/tK6hU5ymIFflwmRWTVErjLjYHQXuGkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRjMbuesdPIgfecVmTjFyuyiTSXBDAfBgNVHSMEGDAWgBTUgaYnAX0aBs7d
C0jk/G/P9YbdlDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFJR21Kd0Y5R2diTzNRdEk1UHh2el9XRzNaUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTkvZmY2M2Q4LWZlY2EtNDNjZC05MDRkLTcyYjMyZDk1MTk1My8x
L1l6RzduckhUeUlIM25GWms0eGNyc29rMGx3US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkv
ZmY2M2Q4LWZlY2EtNDNjZC05MDRkLTcyYjMyZDk1MTk1My8xLzFJR21Kd0Y5R2di
TzNRdEk1UHh2el9XRzNaUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAV20hDANBgkqhkiG9w0BAQsFAAOC
AQEASPO0XuDXd7TVpP1cJkAtUFXJoDNYft6kloZqB3fXp4yixFtNlLmEc78pYeEw
RQrTaMiLA7IKa3hE03KWwjKHwx2NXA/sEsMMytDg6HyBdarCtomA0laeKEkACaWz
eBgJvr2BEMyRBoFSRxCLl6lZEldwu+QSy/+5RiABLQ6hV4CMiCkACXzWE37iDh2Z
cigUVehLkcfbF4mxs6+pzRTB2i/7/U7ZWFOeydhvfag+Lg44xWGADTVFcRgRKWyR
oLlY5PCmHBTGsFR1vkaBaQV99dDOKZZ3oaJJhgxj0EWw2fg0YFBpVJAfXze0TRmP
Jw1MzwHCFo5IQGdxCpDjrOHlQw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:51 2024 by rpki-client on console-fra.rpki-client.org