Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/374491-eca6-4f15-9ad6-0c1ecf186dab/1/EvWwihTJ9tM7I1_DHJcqfBLBOWY.roa
File:                     EvWwihTJ9tM7I1_DHJcqfBLBOWY.roa (raw, json)
Hash identifier:          s4XMcu5a6QjKlFIBGniU9c7TCC2Raf9r5SuIkjruD6Y=
Subject key identifier:   12:F5:B0:8A:14:C9:F6:D3:3B:23:5F:C3:1C:97:2A:7C:12:C1:39:66
Certificate issuer:       /CN=9b1e39f2f6cae7b2b06d8ab36ae4725d151e73c1
Certificate serial:       012B865C
Authority key identifier: 9B:1E:39:F2:F6:CA:E7:B2:B0:6D:8A:B3:6A:E4:72:5D:15:1E:73:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mx458vbK57KwbYqzauRyXRUec8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/374491-eca6-4f15-9ad6-0c1ecf186dab/1/EvWwihTJ9tM7I1_DHJcqfBLBOWY.roa
Signing time:             Sat 01 Jan 2022 08:06:16 +0000
ROA not before:           Sat 01 Jan 2022 08:06:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15626
IP address blocks:        130.193.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19629660 (0x12b865c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b1e39f2f6cae7b2b06d8ab36ae4725d151e73c1
        Validity
            Not Before: Jan  1 08:06:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=12f5b08a14c9f6d33b235fc31c972a7c12c13966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:db:54:a1:c7:4a:ba:ec:64:63:74:75:1c:b4:
                    a8:77:08:bb:73:59:03:1f:87:67:12:82:71:6b:e2:
                    c6:6b:38:8c:2f:9b:a1:40:0c:38:87:d4:b7:ac:a0:
                    1c:94:30:2b:0f:02:9b:c3:25:05:63:7d:75:3d:d0:
                    bf:ee:ab:b5:35:8a:6a:09:0a:c5:17:46:cd:3f:d4:
                    5d:80:eb:45:5b:c1:2e:01:5c:6e:c7:5d:d8:9e:ec:
                    42:e4:6d:ce:d5:14:ac:c9:cb:eb:9f:ef:09:ef:bf:
                    12:0c:7e:a6:25:d4:54:15:7e:4c:a4:dc:e7:f8:8d:
                    8a:c5:90:48:3c:43:0c:a6:0a:5c:a0:e9:e0:55:05:
                    d7:3c:9c:d2:42:87:4f:48:af:c4:25:1b:43:1d:0f:
                    0d:06:b5:3c:90:83:e0:89:92:20:a1:9b:37:53:2c:
                    0f:17:cb:46:a2:46:db:6c:05:6c:27:82:9d:91:c9:
                    a0:18:a8:03:72:63:8a:6d:ee:b1:52:f1:f1:57:62:
                    19:6e:dd:70:1e:89:a7:25:97:e1:a4:41:6b:7f:25:
                    46:a1:3d:92:06:06:d7:d1:52:ae:69:1e:93:23:94:
                    96:d1:db:98:8e:04:27:74:77:28:d2:6f:c2:24:c3:
                    4b:db:25:87:f5:46:c7:bb:6a:88:56:84:6b:05:20:
                    6d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F5:B0:8A:14:C9:F6:D3:3B:23:5F:C3:1C:97:2A:7C:12:C1:39:66
            X509v3 Authority Key Identifier:
                keyid:9B:1E:39:F2:F6:CA:E7:B2:B0:6D:8A:B3:6A:E4:72:5D:15:1E:73:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx458vbK57KwbYqzauRyXRUec8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/374491-eca6-4f15-9ad6-0c1ecf186dab/1/EvWwihTJ9tM7I1_DHJcqfBLBOWY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/374491-eca6-4f15-9ad6-0c1ecf186dab/1/mx458vbK57KwbYqzauRyXRUec8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.193.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:bf:4a:02:94:b5:b6:2d:e2:ec:fe:92:95:8d:46:bc:96:24:
         1d:7e:c6:d0:10:67:4e:de:0c:f0:f3:52:9c:11:8a:fd:b5:f4:
         3e:72:76:1e:b0:3a:3c:90:0f:0a:1f:0a:0a:c5:15:ae:5a:d3:
         cc:bc:45:a9:fc:03:9a:e8:63:21:d1:42:f7:fe:4e:10:5b:aa:
         76:3d:ae:1a:33:9a:0a:3a:27:1e:d9:02:1d:60:95:ea:4b:66:
         31:5b:c0:d1:2a:77:91:65:cd:37:30:d1:1b:37:fe:53:f5:01:
         1b:aa:8d:15:65:e8:93:94:61:3e:1a:e0:d7:53:df:9f:39:6e:
         7d:c5:31:fd:74:ec:98:25:75:3c:d2:30:27:b9:6e:3d:c1:c8:
         34:d3:0d:de:48:c0:fc:b4:fb:e9:20:26:b5:a9:72:61:c6:69:
         88:fd:bc:f5:41:5c:41:04:65:84:a3:14:7c:78:08:63:2d:ae:
         51:59:bb:fb:a2:f5:c6:76:04:bb:25:42:b9:dd:eb:52:19:57:
         9d:3f:2c:d6:a0:c3:12:67:5a:52:a7:f3:7d:ac:2d:1c:c9:bb:
         0c:7c:0b:df:42:c4:e0:44:76:0b:3c:65:04:58:56:84:b5:6c:
         89:5c:0d:71:ff:4a:92:79:99:a6:94:ee:6e:48:d6:d9:53:bc:
         3e:7f:e6:f5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEASuGXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
YjFlMzlmMmY2Y2FlN2IyYjA2ZDhhYjM2YWU0NzI1ZDE1MWU3M2MxMB4XDTIyMDEw
MTA4MDYxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTJmNWIwOGExNGM5
ZjZkMzNiMjM1ZmMzMWM5NzJhN2MxMmMxMzk2NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOLbVKHHSrrsZGN0dRy0qHcIu3NZAx+HZxKCcWvixms4jC+b
oUAMOIfUt6ygHJQwKw8Cm8MlBWN9dT3Qv+6rtTWKagkKxRdGzT/UXYDrRVvBLgFc
bsdd2J7sQuRtztUUrMnL65/vCe+/Egx+piXUVBV+TKTc5/iNisWQSDxDDKYKXKDp
4FUF1zyc0kKHT0ivxCUbQx0PDQa1PJCD4ImSIKGbN1MsDxfLRqJG22wFbCeCnZHJ
oBioA3Jjim3usVLx8VdiGW7dcB6JpyWX4aRBa38lRqE9kgYG19FSrmkekyOUltHb
mI4EJ3R3KNJvwiTDS9slh/VGx7tqiFaEawUgbQUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQS9bCKFMn20zsjX8Mclyp8EsE5ZjAfBgNVHSMEGDAWgBSbHjny9srnsrBt
irNq5HJdFR5zwTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L214NDU4dmJLNTdLd2JZcXphdVJ5WFJVZWM4RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmQvMzc0NDkxLWVjYTYtNGYxNS05YWQ2LTBjMWVjZjE4NmRhYi8x
L0V2V3dpaFRKOXRNN0kxX0RISmNxZkJMQk9XWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQv
Mzc0NDkxLWVjYTYtNGYxNS05YWQ2LTBjMWVjZjE4NmRhYi8xL214NDU4dmJLNTdL
d2JZcXphdVJ5WFJVZWM4RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAILBTzANBgkqhkiG9w0BAQsFAAOC
AQEAKr9KApS1ti3i7P6SlY1GvJYkHX7G0BBnTt4M8PNSnBGK/bX0PnJ2HrA6PJAP
Ch8KCsUVrlrTzLxFqfwDmuhjIdFC9/5OEFuqdj2uGjOaCjonHtkCHWCV6ktmMVvA
0Sp3kWXNNzDRGzf+U/UBG6qNFWXok5RhPhrg11PfnzlufcUx/XTsmCV1PNIwJ7lu
PcHINNMN3kjA/LT76SAmtalyYcZpiP289UFcQQRlhKMUfHgIYy2uUVm7+6L1xnYE
uyVCud3rUhlXnT8s1qDDEmdaUqfzfawtHMm7DHwL30LE4ER2CzxlBFhWhLVsiVwN
cf9KknmZppTubkjW2VO8Pn/m9Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:05 2024 by rpki-client on console-fra.rpki-client.org