Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/5_y-c8lCXCvhvMDOsxkF3f__ZHs.roa
File:                     5_y-c8lCXCvhvMDOsxkF3f__ZHs.roa (raw, json)
Hash identifier:          r6ardMC5Au//Tulxi7wUJTsGmIGHqwUmvPpRQjdw+3o=
Subject key identifier:   E7:FC:BE:73:C9:42:5C:2B:E1:BC:C0:CE:B3:19:05:DD:FF:FF:64:7B
Certificate issuer:       /CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Certificate serial:       01857169BE8DB7F80531214A81205D008CD8
Authority key identifier: 80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/5_y-c8lCXCvhvMDOsxkF3f__ZHs.roa
Signing time:             Mon 02 Jan 2023 07:37:13 +0000
ROA not before:           Mon 02 Jan 2023 07:37:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209732
IP address blocks:        193.151.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:69:be:8d:b7:f8:05:31:21:4a:81:20:5d:00:8c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
        Validity
            Not Before: Jan  2 07:37:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e7fcbe73c9425c2be1bcc0ceb31905ddffff647b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:83:e7:75:7b:11:b2:00:3e:2e:dc:ee:3c:35:
                    f5:89:a3:8f:51:c3:d9:8b:27:12:8e:86:66:64:d8:
                    87:48:78:3a:53:57:09:d2:50:ff:83:0e:16:6f:e1:
                    bb:7f:73:27:1a:71:c7:fe:aa:49:65:6a:ff:61:fe:
                    78:4f:a3:02:ce:ed:80:b9:5c:15:27:9b:d4:b4:4e:
                    4c:b8:7e:d3:b0:02:a9:7e:13:1b:a7:eb:4f:ce:39:
                    31:ba:dc:22:c0:61:ad:d6:c4:dd:50:4b:a8:1f:67:
                    b4:37:83:2e:ec:eb:18:a9:32:91:1f:7d:46:50:f6:
                    36:27:f5:5e:4c:fd:4f:50:46:bb:4a:c5:bd:7c:02:
                    27:ec:66:3d:57:07:75:ea:21:89:71:cf:99:cd:36:
                    57:4e:0c:dc:93:e1:4e:ec:15:23:68:90:f8:95:d1:
                    6d:06:e8:7d:ac:a6:d7:28:87:99:b7:91:e4:b6:9b:
                    2c:d1:a0:38:b0:9a:cb:a5:81:6a:42:89:31:da:ba:
                    c3:aa:b2:6a:08:34:0e:11:ba:15:43:5b:40:2a:0c:
                    4c:8c:00:fe:e8:6c:bb:b8:56:80:1f:cf:b5:ea:59:
                    fc:3f:b7:67:38:a2:25:f7:dc:54:70:bd:4c:6b:2a:
                    f3:2c:6e:dc:c2:19:33:9a:02:4b:4c:5c:ba:67:7c:
                    bd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FC:BE:73:C9:42:5C:2B:E1:BC:C0:CE:B3:19:05:DD:FF:FF:64:7B
            X509v3 Authority Key Identifier:
                keyid:80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/5_y-c8lCXCvhvMDOsxkF3f__ZHs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.151.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:27:a8:10:d7:95:43:ef:37:6e:d6:14:22:9f:dc:d9:41:eb:
         4e:fe:f4:ca:bd:66:04:6e:e4:42:9a:00:68:a2:a1:c7:1d:f0:
         d6:2c:5d:71:50:66:1c:86:85:5e:8f:ec:ee:54:6b:5e:5f:a1:
         e4:d9:97:e6:29:15:37:98:50:a9:d4:d1:c6:3a:54:f0:04:a8:
         95:1c:94:c7:30:bf:51:3b:eb:47:d2:9c:ca:c7:bf:d7:32:e4:
         ee:55:80:ee:79:be:f8:6f:d1:16:ec:18:01:7e:91:d7:dc:fc:
         3f:4a:21:2f:f6:16:19:7d:b7:0f:6f:a5:9e:4f:32:bd:ff:5e:
         b7:f4:94:bc:b9:31:03:21:00:fa:15:8d:af:05:57:2a:79:e8:
         ac:01:8c:22:e0:13:2a:e5:24:82:88:57:af:c7:16:39:ee:db:
         7e:39:18:f8:d2:71:bb:2c:11:ec:99:e4:ef:9a:6f:31:82:cf:
         81:81:31:a7:c0:f7:d0:13:8c:f7:42:65:cc:a6:1f:b7:37:43:
         3c:34:73:e1:9a:e3:e7:c5:d9:68:d5:36:a0:7c:69:4b:d2:27:
         16:4f:92:42:32:88:35:7e:d0:2b:99:9a:77:5f:63:35:98:d1:
         b5:1d:0a:de:2b:11:6a:aa:73:75:f8:64:27:9c:46:24:9f:52:
         89:29:63:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxab6Nt/gFMSFKgSBdAIzYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZTQ4NDg1Y2U5YjBlNDI1NjQwODA0ZWRjMGVkMmJhNmI4
ZjRiOGYwHhcNMjMwMTAyMDczNzEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2ZjYmU3M2M5NDI1YzJiZTFiY2MwY2ViMzE5MDVkZGZmZmY2NDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIPndXsRsgA+LtzuPDX1iaOPUcPZ
iycSjoZmZNiHSHg6U1cJ0lD/gw4Wb+G7f3MnGnHH/qpJZWr/Yf54T6MCzu2AuVwV
J5vUtE5MuH7TsAKpfhMbp+tPzjkxutwiwGGt1sTdUEuoH2e0N4Mu7OsYqTKRH31G
UPY2J/VeTP1PUEa7SsW9fAIn7GY9Vwd16iGJcc+ZzTZXTgzck+FO7BUjaJD4ldFt
Buh9rKbXKIeZt5Hktpss0aA4sJrLpYFqQokx2rrDqrJqCDQOEboVQ1tAKgxMjAD+
6Gy7uFaAH8+16ln8P7dnOKIl99xUcL1MayrzLG7cwhkzmgJLTFy6Z3y9RwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOf8vnPJQlwr4bzAzrMZBd3//2R7MB8GA1UdIwQY
MBaAFIDkhIXOmw5CVkCATtwO0rprj0uPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ09TRWhjNmJEa0pXUUlCTzNBN1N1bXVQUzQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82ZGM5NzgtYmZkNi00MWVjLThhM2Et
YzAzMDE3ZTk4YzUzLzEvNV95LWM4bENYQ3Zodk1ET3N4a0YzZl9fWkhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS82ZGM5NzgtYmZkNi00MWVjLThhM2EtYzAzMDE3ZTk4YzUz
LzEvZ09TRWhjNmJEa0pXUUlCTzNBN1N1bXVQUzQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZelMA0G
CSqGSIb3DQEBCwUAA4IBAQCnJ6gQ15VD7zdu1hQin9zZQetO/vTKvWYEbuRCmgBo
oqHHHfDWLF1xUGYchoVej+zuVGteX6Hk2ZfmKRU3mFCp1NHGOlTwBKiVHJTHML9R
O+tH0pzKx7/XMuTuVYDueb74b9EW7BgBfpHX3Pw/SiEv9hYZfbcPb6WeTzK9/163
9JS8uTEDIQD6FY2vBVcqeeisAYwi4BMq5SSCiFevxxY57tt+ORj40nG7LBHsmeTv
mm8xgs+BgTGnwPfQE4z3QmXMph+3N0M8NHPhmuPnxdlo1TagfGlL0icWT5JCMog1
ftArmZp3X2M1mNG1HQreKxFqqnN1+GQnnEYkn1KJKWPG
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:59 2024 by rpki-client on console-fra.rpki-client.org