Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/af7r9ATZoxe0Bt4ZCMo4Ubzrf0U.roa
File:                     af7r9ATZoxe0Bt4ZCMo4Ubzrf0U.roa (raw, json)
Hash identifier:          VSInx8x8JbZaQI2WmeEBQUIp+jkwD66dIC7RhOFpy6c=
Subject key identifier:   69:FE:EB:F4:04:D9:A3:17:B4:06:DE:19:08:CA:38:51:BC:EB:7F:45
Certificate issuer:       /CN=be96a9409d995e702b212c93f6d4c99a9db26e4a
Certificate serial:       0184D1E8BBEDCC5D172F85DEA147627EBF06
Authority key identifier: BE:96:A9:40:9D:99:5E:70:2B:21:2C:93:F6:D4:C9:9A:9D:B2:6E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vpapQJ2ZXnArISyT9tTJmp2ybko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/af7r9ATZoxe0Bt4ZCMo4Ubzrf0U.roa
Signing time:             Fri 02 Dec 2022 08:16:41 +0000
ROA not before:           Fri 02 Dec 2022 08:16:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200444
IP address blocks:        195.244.88.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:d1:e8:bb:ed:cc:5d:17:2f:85:de:a1:47:62:7e:bf:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be96a9409d995e702b212c93f6d4c99a9db26e4a
        Validity
            Not Before: Dec  2 08:16:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=69feebf404d9a317b406de1908ca3851bceb7f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:40:29:76:cc:ef:ff:e9:2f:8e:07:ae:82:6b:
                    4d:1f:48:7c:40:e1:fb:07:96:f7:35:96:76:db:0e:
                    98:cb:04:d2:2e:ef:ae:77:e8:74:19:7b:50:21:a9:
                    60:41:dd:15:cd:71:d3:57:07:c1:d1:79:c9:f2:d8:
                    7d:c8:8b:86:81:6e:10:f4:9a:95:27:4b:2d:b1:b3:
                    21:d0:1e:5a:54:5f:ef:fc:5c:61:8e:e2:ff:a4:38:
                    36:d5:31:da:2e:69:5e:d6:bc:7c:4a:2b:d4:20:e8:
                    2b:14:a9:ea:3b:64:21:c5:39:a9:b3:65:da:43:b5:
                    13:02:d0:bf:00:41:06:6e:ac:3b:16:fc:02:e2:37:
                    29:35:60:ed:c4:cf:28:97:c9:a4:8f:df:c2:28:4d:
                    7c:fc:eb:26:00:dc:7c:20:d7:71:de:05:81:2c:c5:
                    65:a0:6f:65:b2:6e:7a:f4:63:19:e5:ac:13:79:e5:
                    37:f2:0f:6a:59:2f:bd:d4:4f:3b:a4:af:44:7b:eb:
                    b5:80:d7:8d:af:d3:d2:51:a4:6f:ab:e8:b7:5e:34:
                    f3:61:80:d1:e8:4e:a5:bb:b0:40:a7:2d:6c:80:6e:
                    5c:9f:29:f0:dc:03:f1:c0:56:7e:cb:d8:60:bb:14:
                    cb:87:16:0e:90:e0:33:f9:74:26:7a:dd:a7:48:3b:
                    39:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FE:EB:F4:04:D9:A3:17:B4:06:DE:19:08:CA:38:51:BC:EB:7F:45
            X509v3 Authority Key Identifier:
                keyid:BE:96:A9:40:9D:99:5E:70:2B:21:2C:93:F6:D4:C9:9A:9D:B2:6E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpapQJ2ZXnArISyT9tTJmp2ybko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/af7r9ATZoxe0Bt4ZCMo4Ubzrf0U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d11a1f-d2c0-4e04-94b6-5ad6a220bf4e/1/vpapQJ2ZXnArISyT9tTJmp2ybko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.244.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:20:16:8a:06:ed:05:38:e7:88:c8:40:ac:ff:cf:5e:86:16:
         cf:89:e9:3c:a4:51:a7:27:a9:df:53:69:88:c4:ac:92:ae:a7:
         91:dc:18:9b:34:44:b8:c9:1a:23:70:bf:71:c3:25:68:50:db:
         52:11:1c:0e:9b:7a:65:ac:cb:a0:1a:dc:e6:48:eb:cb:04:70:
         82:a5:24:45:38:54:21:ed:3e:e1:94:09:e4:91:0e:e9:bd:50:
         13:03:0b:13:08:f7:bb:7c:13:f3:b6:79:9b:60:57:39:84:31:
         c1:fd:fb:8f:fd:d2:04:e1:20:9e:0e:24:52:dc:67:4c:be:40:
         69:ca:45:e2:b4:15:94:14:ae:3f:cf:31:c7:60:1c:5b:77:e8:
         9b:3d:fa:d3:15:70:e3:cf:bc:c5:7a:73:33:73:c7:6b:14:ce:
         e0:62:4f:2c:97:fd:30:15:7e:c9:8c:c2:fc:38:ae:82:92:d1:
         8c:06:fb:da:70:62:32:ac:3d:da:54:eb:32:2f:f0:62:bd:1d:
         36:d1:dd:70:19:34:58:57:03:c7:64:98:35:16:e7:57:19:4f:
         c0:0d:1e:d7:36:8f:89:70:c0:06:7a:61:c0:73:21:54:7c:23:
         42:53:cf:3b:07:49:37:c9:5b:0b:83:81:36:2d:05:e0:20:c5:
         55:a7:6b:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYTR6LvtzF0XL4XeoUdifr8GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlOTZhOTQwOWQ5OTVlNzAyYjIxMmM5M2Y2ZDRjOTlhOWRi
MjZlNGEwHhcNMjIxMjAyMDgxNjQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWZlZWJmNDA0ZDlhMzE3YjQwNmRlMTkwOGNhMzg1MWJjZWI3ZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskApdszv/+kvjgeugmtNH0h8QOH7
B5b3NZZ22w6YywTSLu+ud+h0GXtQIalgQd0VzXHTVwfB0XnJ8th9yIuGgW4Q9JqV
J0stsbMh0B5aVF/v/FxhjuL/pDg21THaLmle1rx8SivUIOgrFKnqO2QhxTmps2Xa
Q7UTAtC/AEEGbqw7FvwC4jcpNWDtxM8ol8mkj9/CKE18/OsmANx8INdx3gWBLMVl
oG9lsm569GMZ5awTeeU38g9qWS+91E87pK9Ee+u1gNeNr9PSUaRvq+i3XjTzYYDR
6E6lu7BApy1sgG5cnynw3APxwFZ+y9hguxTLhxYOkOAz+XQmet2nSDs56QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGn+6/QE2aMXtAbeGQjKOFG8639FMB8GA1UdIwQY
MBaAFL6WqUCdmV5wKyEsk/bUyZqdsm5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnBhcFFKMlpYbkFySVN5VDl0VEptcDJ5YmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kMTFhMWYtZDJjMC00ZTA0LTk0YjYt
NWFkNmEyMjBiZjRlLzEvYWY3cjlBVFpveGUwQnQ0WkNNbzRVYnpyZjBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9kMTFhMWYtZDJjMC00ZTA0LTk0YjYtNWFkNmEyMjBiZjRl
LzEvdnBhcFFKMlpYbkFySVN5VDl0VEptcDJ5YmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/RYMA0G
CSqGSIb3DQEBCwUAA4IBAQBZIBaKBu0FOOeIyECs/89ehhbPiek8pFGnJ6nfU2mI
xKySrqeR3BibNES4yRojcL9xwyVoUNtSERwOm3plrMugGtzmSOvLBHCCpSRFOFQh
7T7hlAnkkQ7pvVATAwsTCPe7fBPztnmbYFc5hDHB/fuP/dIE4SCeDiRS3GdMvkBp
ykXitBWUFK4/zzHHYBxbd+ibPfrTFXDjz7zFenMzc8drFM7gYk8sl/0wFX7JjML8
OK6CktGMBvvacGIyrD3aVOsyL/BivR020d1wGTRYVwPHZJg1FudXGU/ADR7XNo+J
cMAGemHAcyFUfCNCU887B0k3yVsLg4E2LQXgIMVVp2t2
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:23 2024 by rpki-client on console-ams.rpki-client.org