Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f81e7e-a594-466d-b926-813d6a6355e6/1/E-RAcQAAKMuKaEJ7XqwNOc4xlXE.roa
File:                     E-RAcQAAKMuKaEJ7XqwNOc4xlXE.roa (raw, json)
Hash identifier:          Et5RWQV7Q01+PyeU9s6e92Y0wMDu3YYmis/dHQS/QkA=
Subject key identifier:   13:E4:40:71:00:00:28:CB:8A:68:42:7B:5E:AC:0D:39:CE:31:95:71
Certificate issuer:       /CN=be21aeaabecaac83ba86847e1598eea838f2039c
Certificate serial:       08447E
Authority key identifier: BE:21:AE:AA:BE:CA:AC:83:BA:86:84:7E:15:98:EE:A8:38:F2:03:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/viGuqr7KrIO6hoR-FZjuqDjyA5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f81e7e-a594-466d-b926-813d6a6355e6/1/E-RAcQAAKMuKaEJ7XqwNOc4xlXE.roa
Signing time:             Mon 10 Jan 2022 16:27:10 +0000
ROA not before:           Mon 10 Jan 2022 16:27:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200845
IP address blocks:        185.149.80.0/22 maxlen: 22
                          185.253.224.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541822 (0x8447e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be21aeaabecaac83ba86847e1598eea838f2039c
        Validity
            Not Before: Jan 10 16:27:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=13e44071000028cb8a68427b5eac0d39ce319571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6f:6c:2c:2f:4c:23:0e:c4:c8:2e:fc:96:58:
                    5a:98:0f:48:15:f5:8a:f2:a8:61:17:3b:cd:47:31:
                    fa:56:35:a9:a0:23:7d:84:d5:f0:1a:92:8c:6a:51:
                    c6:d8:2f:44:17:56:e7:50:8d:73:45:a5:08:1a:89:
                    69:6d:9b:d7:55:3d:8a:aa:63:d6:5e:8e:78:8a:44:
                    31:f7:a9:37:f3:64:5a:98:a9:7f:79:72:6d:ff:21:
                    07:89:be:5f:c6:0b:79:77:2a:25:3d:01:a3:46:d0:
                    41:3b:91:c8:3c:f1:62:d1:38:ec:a2:a4:e1:3f:b5:
                    a4:d8:b5:0c:59:7d:9f:e7:eb:98:b0:98:21:e1:d7:
                    6b:ec:ef:1d:46:2b:4f:95:e8:cc:8c:85:e2:92:ce:
                    88:e2:06:ed:3d:d1:9c:53:bf:e4:4b:44:4e:d4:78:
                    d1:ee:23:de:17:1c:7c:8e:25:42:ec:1c:85:c6:48:
                    da:4c:d0:9d:83:db:06:68:8c:9f:2f:62:d2:d5:01:
                    f7:02:96:38:ba:d8:1b:36:ea:f2:0d:ae:af:ed:26:
                    7d:09:5e:ad:83:ce:86:ed:50:17:5f:6a:db:e4:0b:
                    8a:5e:4d:b7:fb:97:4d:bc:12:44:98:ec:af:f7:56:
                    dc:9c:7b:41:67:a9:9b:58:34:11:08:48:b3:20:d2:
                    bd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E4:40:71:00:00:28:CB:8A:68:42:7B:5E:AC:0D:39:CE:31:95:71
            X509v3 Authority Key Identifier:
                keyid:BE:21:AE:AA:BE:CA:AC:83:BA:86:84:7E:15:98:EE:A8:38:F2:03:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viGuqr7KrIO6hoR-FZjuqDjyA5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f81e7e-a594-466d-b926-813d6a6355e6/1/E-RAcQAAKMuKaEJ7XqwNOc4xlXE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f81e7e-a594-466d-b926-813d6a6355e6/1/viGuqr7KrIO6hoR-FZjuqDjyA5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.149.80.0/22
                  185.253.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:3f:54:35:49:48:c1:2e:8a:ea:fb:60:a5:ae:80:4b:74:32:
         dc:4f:cb:3c:69:c6:1f:71:e6:da:7e:18:6c:ab:5a:97:48:ba:
         a0:6c:bc:72:3d:24:42:bb:f6:60:03:7f:e5:fc:d7:32:5a:6a:
         35:0d:16:5a:bf:8b:1b:82:01:ab:12:a6:f0:c5:12:79:45:a5:
         5a:c9:7f:3f:ee:d1:c1:54:15:78:e8:18:14:78:fc:90:d2:ca:
         ff:4d:93:c7:a0:47:36:8f:7b:ee:0b:f8:b6:e1:76:0c:c8:dc:
         18:e0:ef:59:bb:8a:9a:1a:99:99:f2:49:d5:46:6e:28:a4:4c:
         34:1c:b5:e3:4f:69:b1:bf:49:43:ba:f0:5b:e9:4d:c5:20:bc:
         1e:44:17:35:ed:94:43:89:3e:9e:ee:77:46:7d:72:ff:df:2f:
         57:e8:6e:fc:87:5a:76:6a:b6:aa:a4:d0:d4:0f:fc:46:de:98:
         f5:92:94:03:08:94:b7:8d:5c:43:23:93:7b:96:26:37:6b:f3:
         1c:cc:88:d0:43:67:b7:5c:11:aa:0d:33:a0:34:ab:b3:30:49:
         7d:97:dd:6b:6f:74:7f:17:64:0a:57:89:c4:be:d6:92:97:30:
         63:51:67:ed:30:9e:79:2e:8b:c3:ef:20:d6:1a:5c:79:1f:d6:
         9d:18:6b:ac
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIDCER+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJl
MjFhZWFhYmVjYWFjODNiYTg2ODQ3ZTE1OThlZWE4MzhmMjAzOWMwHhcNMjIwMTEw
MTYyNzEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxM2U0NDA3MTAwMDAy
OGNiOGE2ODQyN2I1ZWFjMGQzOWNlMzE5NTcxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjW9sLC9MIw7EyC78llhamA9IFfWK8qhhFzvNRzH6VjWpoCN9
hNXwGpKMalHG2C9EF1bnUI1zRaUIGolpbZvXVT2KqmPWXo54ikQx96k382RamKl/
eXJt/yEHib5fxgt5dyolPQGjRtBBO5HIPPFi0TjsoqThP7Wk2LUMWX2f5+uYsJgh
4ddr7O8dRitPlejMjIXiks6I4gbtPdGcU7/kS0RO1HjR7iPeFxx8jiVC7ByFxkja
TNCdg9sGaIyfL2LS1QH3ApY4utgbNuryDa6v7SZ9CV6tg86G7VAXX2rb5AuKXk23
+5dNvBJEmOyv91bcnHtBZ6mbWDQRCEizINK9mwIDAQABo4ICDzCCAgswHQYDVR0O
BBYEFBPkQHEAACjLimhCe16sDTnOMZVxMB8GA1UdIwQYMBaAFL4hrqq+yqyDuoaE
fhWY7qg48gOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
dmlHdXFyN0tySU82aG9SLUZaanVxRGp5QTV3LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC81Yy9mODFlN2UtYTU5NC00NjZkLWI5MjYtODEzZDZhNjM1NWU2LzEv
RS1SQWNRQUFLTXVLYUVKN1hxd05PYzR4bFhFLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9m
ODFlN2UtYTU5NC00NjZkLWI5MjYtODEzZDZhNjM1NWU2LzEvdmlHdXFyN0tySU82
aG9SLUZaanVxRGp5QTV3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuZVQAwQCuf3gMA0GCSqGSIb3DQEB
CwUAA4IBAQCAP1Q1SUjBLorq+2ClroBLdDLcT8s8acYfcebafhhsq1qXSLqgbLxy
PSRCu/ZgA3/l/NcyWmo1DRZav4sbggGrEqbwxRJ5RaVayX8/7tHBVBV46BgUePyQ
0sr/TZPHoEc2j3vuC/i24XYMyNwY4O9Zu4qaGpmZ8knVRm4opEw0HLXjT2mxv0lD
uvBb6U3FILweRBc17ZRDiT6e7ndGfXL/3y9X6G78h1p2araqpNDUD/xG3pj1kpQD
CJS3jVxDI5N7liY3a/MczIjQQ2e3XBGqDTOgNKuzMEl9l91rb3R/F2QKV4nEvtaS
lzBjUWftMJ55LovD7yDWGlx5H9adGGus
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:19 2024 by rpki-client on console-fra.rpki-client.org