Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/HkkQKWr3kOwJyB9X7vhoM687RGg.roa
File:                     HkkQKWr3kOwJyB9X7vhoM687RGg.roa (raw, json)
Hash identifier:          aYMnKfFiSfaRI4vnaKxwjgjOEZdVZFCXsx+eiVwNHX8=
Subject key identifier:   1E:49:10:29:6A:F7:90:EC:09:C8:1F:57:EE:F8:68:33:AF:3B:44:68
Certificate issuer:       /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial:       0181EDC74B013267F61A0EE3888EB6E7BD72
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/HkkQKWr3kOwJyB9X7vhoM687RGg.roa
Signing time:             Mon 11 Jul 2022 15:01:09 +0000
ROA not before:           Mon 11 Jul 2022 15:01:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7029
IP address blocks:        176.118.80.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:ed:c7:4b:01:32:67:f6:1a:0e:e3:88:8e:b6:e7:bd:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
        Validity
            Not Before: Jul 11 15:01:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1e4910296af790ec09c81f57eef86833af3b4468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:83:ea:01:1b:43:98:d7:df:d2:4a:e1:85:7d:
                    07:c7:b6:90:3e:55:1a:82:05:2b:ae:79:e4:16:a8:
                    0b:54:e6:4c:f5:2e:e9:b8:f9:bf:62:b1:ef:e1:18:
                    06:57:90:3f:76:5d:87:e6:ea:63:c1:fd:c9:f5:32:
                    a2:b2:9b:ba:45:f9:9c:16:9e:38:c1:89:20:94:58:
                    86:8e:01:ca:1d:22:4f:a9:17:a2:4f:1d:10:5e:c5:
                    6c:73:cb:78:38:a1:51:45:fb:df:7f:6f:d3:13:46:
                    f4:28:96:17:41:23:03:d5:e9:0c:8e:dd:76:39:07:
                    23:f8:16:0d:7e:f9:cd:1f:72:01:3f:1f:ae:41:40:
                    19:21:58:5b:2a:fd:c1:6e:c8:e1:40:73:0f:ff:56:
                    a2:9f:86:75:98:0a:52:94:18:66:bc:60:9a:a3:c2:
                    8d:10:a6:8d:02:0a:fc:90:92:31:ba:6b:73:17:69:
                    04:a2:5e:5f:dc:3c:af:f7:42:f6:50:06:35:23:2f:
                    7c:af:0d:44:0b:ee:37:a0:b7:35:d2:ea:3c:d7:9c:
                    8b:fc:97:36:41:cb:88:a5:57:5f:e8:f8:49:90:22:
                    03:c1:7d:b4:b4:e7:c9:d1:a7:6b:ce:69:a7:cf:a2:
                    12:ff:82:eb:dc:29:e5:f4:a5:ff:e1:51:a5:ed:4d:
                    66:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:49:10:29:6A:F7:90:EC:09:C8:1F:57:EE:F8:68:33:AF:3B:44:68
            X509v3 Authority Key Identifier:
                keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/HkkQKWr3kOwJyB9X7vhoM687RGg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.118.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a2:ab:6c:2d:36:ed:19:64:16:f8:1e:25:4a:07:f6:20:0c:4b:
         53:10:2f:52:32:f5:dd:e1:06:6f:52:ee:44:91:1b:0d:18:0c:
         e4:ca:56:fd:17:41:ad:d8:32:4d:f3:72:09:57:e5:91:9b:df:
         ab:0d:c1:b1:87:4f:a5:b2:68:be:8d:8b:27:59:b0:bc:bf:98:
         e4:53:35:db:03:44:18:0c:6e:20:76:26:2a:45:0e:4e:6a:47:
         3b:38:7f:90:04:0e:1c:85:9c:72:b1:1e:80:ed:fa:eb:4a:f5:
         7e:1e:67:29:1d:ea:1b:11:b6:ab:2f:fc:7d:a0:25:f9:50:aa:
         50:26:c8:21:e0:b1:f0:90:f3:04:d4:89:c7:7f:c0:a8:21:32:
         2a:3d:f3:b2:f8:2a:fb:9a:ab:38:7a:30:c0:c6:4c:a8:f6:73:
         11:e6:92:76:35:b9:d1:13:d8:0e:0b:28:a5:69:3e:19:6d:06:
         26:49:8c:8b:06:89:14:53:4d:e8:12:ab:9f:a2:d5:38:97:3a:
         df:52:35:60:17:14:15:6e:c6:f4:b4:35:32:a9:50:87:31:f8:
         8e:8f:14:57:be:ab:c6:b2:b4:2f:c0:16:6e:5e:af:1d:49:2a:
         81:26:b5:f9:56:33:36:8b:2f:20:6b:7d:09:3a:91:81:e0:57:
         57:e0:5d:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHtx0sBMmf2Gg7jiI62571yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NDQ2ODBjMjBkMWFmMDFmMTY5YjE4YWM5Yzc3ZDk4Nzcx
MzNjZGUwHhcNMjIwNzExMTUwMTA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTQ5MTAyOTZhZjc5MGVjMDljODFmNTdlZWY4NjgzM2FmM2I0NDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYPqARtDmNff0krhhX0Hx7aQPlUa
ggUrrnnkFqgLVOZM9S7puPm/YrHv4RgGV5A/dl2H5upjwf3J9TKispu6RfmcFp44
wYkglFiGjgHKHSJPqReiTx0QXsVsc8t4OKFRRfvff2/TE0b0KJYXQSMD1ekMjt12
OQcj+BYNfvnNH3IBPx+uQUAZIVhbKv3BbsjhQHMP/1ain4Z1mApSlBhmvGCao8KN
EKaNAgr8kJIxumtzF2kEol5f3Dyv90L2UAY1Iy98rw1EC+43oLc10uo815yL/Jc2
QcuIpVdf6PhJkCIDwX20tOfJ0adrzmmnz6IS/4Lr3Cnl9KX/4VGl7U1m+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB5JEClq95DsCcgfV+74aDOvO0RoMB8GA1UdIwQY
MBaAFElEaAwg0a8B8WmxisnHfZh3EzzeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1VSb0RDRFJyd0h4YWJHS3ljZDltSGNUUE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83ZGVlMDktY2QyZS00MDMwLWFiOTIt
ZWJkY2MwMmZiYWU5LzEvSGtrUUtXcjNrT3dKeUI5WDd2aG9NNjg3UkdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83ZGVlMDktY2QyZS00MDMwLWFiOTItZWJkY2MwMmZiYWU5
LzEvU1VSb0RDRFJyd0h4YWJHS3ljZDltSGNUUE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsHZQMA0G
CSqGSIb3DQEBCwUAA4IBAQCiq2wtNu0ZZBb4HiVKB/YgDEtTEC9SMvXd4QZvUu5E
kRsNGAzkylb9F0Gt2DJN83IJV+WRm9+rDcGxh0+lsmi+jYsnWbC8v5jkUzXbA0QY
DG4gdiYqRQ5Oakc7OH+QBA4chZxysR6A7frrSvV+HmcpHeobEbarL/x9oCX5UKpQ
Jsgh4LHwkPME1InHf8CoITIqPfOy+Cr7mqs4ejDAxkyo9nMR5pJ2NbnRE9gOCyil
aT4ZbQYmSYyLBokUU03oEqufotU4lzrfUjVgFxQVbsb0tDUyqVCHMfiOjxRXvqvG
srQvwBZuXq8dSSqBJrX5VjM2iy8ga30JOpGB4FdX4F3G
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:52 2024 by rpki-client on console-fra.rpki-client.org