Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/d42db6-7715-4588-8051-601601085b7a/1/eVwHK6yeiG76-qwTox_JLJqPmMQ.roa
File:                     eVwHK6yeiG76-qwTox_JLJqPmMQ.roa (raw, json)
Hash identifier:          N/QD4sASERK+3rnONo9u550fk+y3Chblhrue6lXpvqk=
Subject key identifier:   79:5C:07:2B:AC:9E:88:6E:FA:FA:AC:13:A3:1F:C9:2C:9A:8F:98:C4
Certificate issuer:       /CN=1762467884a3245ad2486bcccfa61cf8cc546357
Certificate serial:       035EB808
Authority key identifier: 17:62:46:78:84:A3:24:5A:D2:48:6B:CC:CF:A6:1C:F8:CC:54:63:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F2JGeISjJFrSSGvMz6Yc-MxUY1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/d42db6-7715-4588-8051-601601085b7a/1/eVwHK6yeiG76-qwTox_JLJqPmMQ.roa
Signing time:             Sat 01 Jan 2022 06:02:11 +0000
ROA not before:           Sat 01 Jan 2022 06:02:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205979
IP address blocks:        185.157.112.0/24 maxlen: 24
                          185.157.115.0/24 maxlen: 24
                          185.157.113.0/24 maxlen: 24
                          185.157.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56539144 (0x35eb808)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1762467884a3245ad2486bcccfa61cf8cc546357
        Validity
            Not Before: Jan  1 06:02:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=795c072bac9e886efafaac13a31fc92c9a8f98c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:46:60:83:7e:c6:c2:78:60:7b:8e:06:69:
                    32:f2:61:ec:44:03:00:07:ef:13:79:b1:02:3b:78:
                    0a:87:8d:dd:c7:1e:e7:31:89:73:ea:2c:3c:2b:fc:
                    6b:81:81:e1:af:38:05:bd:cd:da:ce:85:ad:cf:3f:
                    fe:16:a9:9a:8e:98:ae:e0:13:eb:83:88:70:9e:77:
                    9a:b4:b8:05:43:82:c5:31:85:23:97:a2:5d:26:0f:
                    30:90:13:88:d5:f5:0b:41:8b:96:18:be:97:18:97:
                    e8:7c:0f:10:ee:a0:37:80:b6:c0:06:ee:88:d5:35:
                    30:7f:d7:3c:19:7c:d1:e9:e3:1f:53:af:d5:17:02:
                    13:e1:11:4d:13:34:cb:42:92:07:78:ef:e3:d7:cc:
                    27:9f:7b:da:6b:3f:ca:5c:20:da:a1:6e:de:17:12:
                    2a:2f:3e:d0:97:54:5a:42:da:b6:15:f0:ef:b5:39:
                    de:cb:e0:03:aa:8c:f2:a4:28:bf:d5:37:b0:a3:9f:
                    1b:ee:6c:4d:a9:bf:d4:ff:11:c4:10:04:66:31:c3:
                    f2:a7:3b:be:57:0b:84:2d:00:64:09:14:17:c5:25:
                    67:63:92:7b:cb:3b:82:2e:3a:1a:6b:dd:3d:17:fe:
                    06:4b:71:16:07:bc:37:cb:70:50:b3:4b:0e:c9:c5:
                    33:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5C:07:2B:AC:9E:88:6E:FA:FA:AC:13:A3:1F:C9:2C:9A:8F:98:C4
            X509v3 Authority Key Identifier:
                keyid:17:62:46:78:84:A3:24:5A:D2:48:6B:CC:CF:A6:1C:F8:CC:54:63:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2JGeISjJFrSSGvMz6Yc-MxUY1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d42db6-7715-4588-8051-601601085b7a/1/eVwHK6yeiG76-qwTox_JLJqPmMQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d42db6-7715-4588-8051-601601085b7a/1/F2JGeISjJFrSSGvMz6Yc-MxUY1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.157.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:c3:63:b4:09:35:a9:76:c5:5f:53:30:a5:fd:4f:d8:93:de:
         df:86:66:a5:97:b5:95:31:6d:a2:7f:63:16:8c:36:71:0e:c1:
         e5:d0:ed:58:85:b7:53:48:c6:ea:3b:33:aa:dc:74:ca:19:3a:
         76:0c:0b:1a:49:4d:72:ef:97:6d:d2:1a:3b:77:a3:3b:89:34:
         42:42:27:fc:3f:4c:cb:eb:66:4a:b9:2e:9b:f6:11:2a:b0:c2:
         16:0e:68:cc:40:67:00:d6:53:c7:1f:20:b3:66:cc:bf:0b:71:
         25:a8:13:74:03:65:34:df:ea:86:a7:4c:12:81:8b:1c:c1:5f:
         9b:16:2d:23:4e:ce:0b:32:b1:13:9c:39:d2:85:0f:bb:3c:b9:
         e3:e5:51:e7:72:72:c8:1b:dc:1c:57:36:92:36:12:d0:03:06:
         a2:02:c6:84:cc:7a:59:3a:25:3e:53:12:7a:f3:d3:c4:8b:cb:
         2f:59:38:2e:a2:52:c4:da:b6:e5:77:80:aa:20:65:f4:41:27:
         0c:0a:5b:ae:40:a2:6d:74:3b:57:4d:18:63:0e:72:06:59:71:
         83:23:bf:01:8a:94:39:01:56:3d:8d:d1:8c:8d:4e:74:68:06:
         cd:54:17:f6:8a:e8:af:32:76:65:7a:2b:19:6e:5c:d8:b1:fc:
         f7:4d:43:6a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA164CDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NzYyNDY3ODg0YTMyNDVhZDI0ODZiY2NjZmE2MWNmOGNjNTQ2MzU3MB4XDTIyMDEw
MTA2MDIxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzk1YzA3MmJhYzll
ODg2ZWZhZmFhYzEzYTMxZmM5MmM5YThmOThjNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKpfRmCDfsbCeGB7jgZpMvJh7EQDAAfvE3mxAjt4CoeN3cce
5zGJc+osPCv8a4GB4a84Bb3N2s6Frc8//hapmo6YruAT64OIcJ53mrS4BUOCxTGF
I5eiXSYPMJATiNX1C0GLlhi+lxiX6HwPEO6gN4C2wAbuiNU1MH/XPBl80enjH1Ov
1RcCE+ERTRM0y0KSB3jv49fMJ5972ms/ylwg2qFu3hcSKi8+0JdUWkLathXw77U5
3svgA6qM8qQov9U3sKOfG+5sTam/1P8RxBAEZjHD8qc7vlcLhC0AZAkUF8UlZ2OS
e8s7gi46GmvdPRf+BktxFge8N8twULNLDsnFMwECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR5XAcrrJ6Ibvr6rBOjH8ksmo+YxDAfBgNVHSMEGDAWgBQXYkZ4hKMkWtJI
a8zPphz4zFRjVzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0YySkdlSVNqSkZyU1NHdk16NlljLU14VVkxYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzYvZDQyZGI2LTc3MTUtNDU4OC04MDUxLTYwMTYwMTA4NWI3YS8x
L2VWd0hLNnllaUc3Ni1xd1RveF9KTEpxUG1NUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYv
ZDQyZGI2LTc3MTUtNDU4OC04MDUxLTYwMTYwMTA4NWI3YS8xL0YySkdlSVNqSkZy
U1NHdk16NlljLU14VVkxYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArmdcDANBgkqhkiG9w0BAQsFAAOC
AQEAXsNjtAk1qXbFX1Mwpf1P2JPe34ZmpZe1lTFton9jFow2cQ7B5dDtWIW3U0jG
6jszqtx0yhk6dgwLGklNcu+XbdIaO3ejO4k0QkIn/D9My+tmSrkum/YRKrDCFg5o
zEBnANZTxx8gs2bMvwtxJagTdANlNN/qhqdMEoGLHMFfmxYtI07OCzKxE5w50oUP
uzy54+VR53JyyBvcHFc2kjYS0AMGogLGhMx6WTolPlMSevPTxIvLL1k4LqJSxNq2
5XeAqiBl9EEnDApbrkCibXQ7V00YYw5yBllxgyO/AYqUOQFWPY3RjI1OdGgGzVQX
9ororzJ2ZXorGW5c2LH8901Dag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:23 2024 by rpki-client on console-fra.rpki-client.org