Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3547ff-202c-492f-9699-b27c80107861/1/td613IGQZWY9_piyyhYxmHiTUXk.roa
File:                     td613IGQZWY9_piyyhYxmHiTUXk.roa (raw, json)
Hash identifier:          G6XZndYGwN1BTYq8oxxrJnY+/O+CB3hMkusegUctfkg=
Subject key identifier:   B5:DE:B5:DC:81:90:65:66:3D:FE:98:B2:CA:16:31:98:78:93:51:79
Certificate issuer:       /CN=947b9c9d1c1bebca2605323946c809887be90871
Certificate serial:       02C23F40
Authority key identifier: 94:7B:9C:9D:1C:1B:EB:CA:26:05:32:39:46:C8:09:88:7B:E9:08:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lHucnRwb68omBTI5RsgJiHvpCHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/3547ff-202c-492f-9699-b27c80107861/1/td613IGQZWY9_piyyhYxmHiTUXk.roa
Signing time:             Sat 01 Jan 2022 00:50:29 +0000
ROA not before:           Sat 01 Jan 2022 00:50:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        193.149.2.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46284608 (0x2c23f40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947b9c9d1c1bebca2605323946c809887be90871
        Validity
            Not Before: Jan  1 00:50:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b5deb5dc819065663dfe98b2ca16319878935179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ab:3b:76:70:47:06:15:f2:68:59:36:f9:dd:
                    8a:34:ac:eb:d1:77:69:1b:35:92:4a:11:be:f0:45:
                    f7:13:ab:b2:51:b1:42:22:c6:9c:36:1c:d6:05:76:
                    8a:a8:1d:e9:1d:fa:23:47:7e:c5:f2:c1:66:a0:79:
                    d9:73:e0:ea:f1:98:72:3f:8d:cd:02:7c:4d:ed:26:
                    2f:58:5c:6a:1d:e8:51:ee:46:35:5e:5d:3c:a0:c8:
                    5b:cb:3e:43:db:bc:4d:d8:b8:ce:73:87:4c:52:a6:
                    ea:aa:4d:f2:c3:c8:41:0b:5c:f3:fa:7f:7e:f8:5b:
                    b8:8e:c9:b2:50:b2:7d:fe:6c:f4:8f:ae:3f:36:b4:
                    ab:36:d8:06:ae:0b:be:f3:27:80:86:d0:77:d6:21:
                    29:93:2b:20:23:fb:ed:d8:2f:33:23:4f:24:8f:c9:
                    59:99:47:20:2f:58:99:0a:75:47:53:68:32:15:54:
                    41:aa:a3:d3:fb:86:8e:69:b1:d3:89:93:50:b3:d5:
                    b0:bd:0b:22:3f:b9:54:38:e4:05:57:11:4f:19:50:
                    f5:bd:bc:4e:15:81:f4:a0:52:ec:8d:91:50:02:19:
                    eb:18:ac:4d:ac:fe:18:4c:be:7b:20:9c:a4:84:3c:
                    2f:90:f4:55:be:01:78:90:9b:45:f1:a6:6d:ee:63:
                    0e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DE:B5:DC:81:90:65:66:3D:FE:98:B2:CA:16:31:98:78:93:51:79
            X509v3 Authority Key Identifier:
                keyid:94:7B:9C:9D:1C:1B:EB:CA:26:05:32:39:46:C8:09:88:7B:E9:08:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHucnRwb68omBTI5RsgJiHvpCHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3547ff-202c-492f-9699-b27c80107861/1/td613IGQZWY9_piyyhYxmHiTUXk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3547ff-202c-492f-9699-b27c80107861/1/lHucnRwb68omBTI5RsgJiHvpCHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:81:c8:6c:83:d7:b3:69:70:a5:5d:16:c8:a8:41:cb:c4:04:
         04:35:64:ef:1a:e1:1c:25:94:cb:f4:2c:93:02:9b:7d:a6:06:
         d8:2d:19:ef:6c:6d:9b:e1:72:41:f3:5f:1c:3d:cc:3b:31:88:
         26:c0:e3:c6:15:d6:1c:ef:76:c6:63:53:a1:9f:a2:1c:c7:c9:
         0b:67:1c:7c:f8:d3:5c:82:ba:57:ac:b9:4b:25:b5:44:11:6d:
         f7:37:32:5c:30:92:8a:0e:74:d4:42:13:fe:6b:b6:2e:27:c9:
         9d:bb:40:f5:f8:ef:90:2e:4c:41:45:ae:bc:8a:94:e5:99:ce:
         ee:36:a0:ba:bb:a7:ee:5b:5a:cb:b9:0b:6f:ec:6d:88:dc:e2:
         25:7a:98:d0:09:25:90:18:7b:42:e3:f5:8d:d2:51:95:59:cd:
         eb:c1:7e:bc:a2:7d:5a:00:63:df:60:7b:eb:00:a4:ab:8d:69:
         d3:dd:d9:62:20:e4:e0:80:e3:6d:87:37:21:81:6c:7c:5f:13:
         26:ed:d5:8a:14:d8:e5:e3:5a:9a:39:67:91:60:e6:21:0c:3d:
         d6:ad:36:d2:80:cc:32:05:4e:0a:df:41:88:f9:b8:9e:80:5b:
         d3:e1:0e:63:ba:ba:dc:1e:ce:69:af:c6:9a:cb:bd:71:a2:9d:
         08:b2:be:dd
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAsI/QDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NDdiOWM5ZDFjMWJlYmNhMjYwNTMyMzk0NmM4MDk4ODdiZTkwODcxMB4XDTIyMDEw
MTAwNTAyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjVkZWI1ZGM4MTkw
NjU2NjNkZmU5OGIyY2ExNjMxOTg3ODkzNTE3OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK2rO3ZwRwYV8mhZNvndijSs69F3aRs1kkoRvvBF9xOrslGx
QiLGnDYc1gV2iqgd6R36I0d+xfLBZqB52XPg6vGYcj+NzQJ8Te0mL1hcah3oUe5G
NV5dPKDIW8s+Q9u8Tdi4znOHTFKm6qpN8sPIQQtc8/p/fvhbuI7JslCyff5s9I+u
Pza0qzbYBq4LvvMngIbQd9YhKZMrICP77dgvMyNPJI/JWZlHIC9YmQp1R1NoMhVU
Qaqj0/uGjmmx04mTULPVsL0LIj+5VDjkBVcRTxlQ9b28ThWB9KBS7I2RUAIZ6xis
Taz+GEy+eyCcpIQ8L5D0Vb4BeJCbRfGmbe5jDhMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS13rXcgZBlZj3+mLLKFjGYeJNReTAfBgNVHSMEGDAWgBSUe5ydHBvryiYF
MjlGyAmIe+kIcTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2xIdWNuUndiNjhvbUJUSTVSc2dKaUh2cENIRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjkvMzU0N2ZmLTIwMmMtNDkyZi05Njk5LWIyN2M4MDEwNzg2MS8x
L3RkNjEzSUdRWldZOV9waXl5aFl4bUhpVFVYay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkv
MzU0N2ZmLTIwMmMtNDkyZi05Njk5LWIyN2M4MDEwNzg2MS8xL2xIdWNuUndiNjhv
bUJUSTVSc2dKaUh2cENIRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcGVAjANBgkqhkiG9w0BAQsFAAOC
AQEAQ4HIbIPXs2lwpV0WyKhBy8QEBDVk7xrhHCWUy/QskwKbfaYG2C0Z72xtm+Fy
QfNfHD3MOzGIJsDjxhXWHO92xmNToZ+iHMfJC2ccfPjTXIK6V6y5SyW1RBFt9zcy
XDCSig501EIT/mu2LifJnbtA9fjvkC5MQUWuvIqU5ZnO7jagurun7ltay7kLb+xt
iNziJXqY0AklkBh7QuP1jdJRlVnN68F+vKJ9WgBj32B76wCkq41p093ZYiDk4IDj
bYc3IYFsfF8TJu3VihTY5eNamjlnkWDmIQw91q020oDMMgVOCt9BiPm4noBb0+EO
Y7q63B7Oaa/Gmsu9caKdCLK+3Q==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:06:59 2025 by rpki-client