Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/a67609-38c9-44c7-840b-dd90afdaf5c7/1/Ek9o5ka71DKMDLeoqlfXboM-5Rc.roa
File:                     Ek9o5ka71DKMDLeoqlfXboM-5Rc.roa (raw, json)
Hash identifier:          UhctXG9OiyqphaFFlrHHz2fzuVy0lqLpWXXD1hu5SvU=
Subject key identifier:   12:4F:68:E6:46:BB:D4:32:8C:0C:B7:A8:AA:57:D7:6E:83:3E:E5:17
Certificate issuer:       /CN=9c1927417d461755aefac39978a58be1d322d0c0
Certificate serial:       0A942FDA
Authority key identifier: 9C:19:27:41:7D:46:17:55:AE:FA:C3:99:78:A5:8B:E1:D3:22:D0:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nBknQX1GF1Wu-sOZeKWL4dMi0MA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/a67609-38c9-44c7-840b-dd90afdaf5c7/1/Ek9o5ka71DKMDLeoqlfXboM-5Rc.roa
Signing time:             Thu 24 Mar 2022 11:10:41 +0000
ROA not before:           Thu 24 Mar 2022 11:10:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12345
IP address blocks:        185.251.46.0/23 maxlen: 24
                          185.247.228.0/24 maxlen: 24
                          185.247.229.0/24 maxlen: 24
                          185.251.250.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177483738 (0xa942fda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c1927417d461755aefac39978a58be1d322d0c0
        Validity
            Not Before: Mar 24 11:10:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=124f68e646bbd4328c0cb7a8aa57d76e833ee517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4c:7f:98:32:2b:9a:57:c3:b6:20:56:fe:7c:
                    30:89:1b:f1:7e:7d:48:c1:91:86:e9:58:dc:3b:7a:
                    85:9a:df:1b:87:2d:8b:ed:92:d8:08:f5:f7:f6:d4:
                    21:b2:93:c2:03:79:15:e6:f0:9b:47:4d:f7:51:b9:
                    57:b5:da:31:ac:1a:ca:8f:25:a4:a4:e2:24:64:ea:
                    5f:1d:1d:7a:71:ae:8d:1f:56:eb:61:3d:92:84:a8:
                    c5:72:07:72:61:a5:34:97:4a:ea:c7:70:c4:70:9e:
                    18:f3:78:98:06:ca:e2:ac:11:f4:87:29:1d:33:f2:
                    51:04:07:28:fd:80:2e:e3:43:83:e7:d9:cb:a1:c7:
                    9e:d6:f9:1d:97:52:3d:4a:68:1c:37:a2:29:26:72:
                    70:64:e6:3a:3d:fd:9c:8a:f8:0b:f9:33:e3:7d:1e:
                    ee:73:18:41:fb:e8:e8:83:1a:15:64:88:92:66:b8:
                    4c:57:38:17:09:23:3c:92:d7:c2:59:df:db:49:9d:
                    ab:24:29:dc:c9:b4:12:54:9f:18:10:bb:c7:fe:ee:
                    cc:20:84:4d:ef:31:86:2c:ef:1a:4d:74:5e:43:21:
                    fa:e5:91:e3:3e:4e:b8:e5:85:b9:14:93:60:41:4a:
                    a4:93:32:32:a0:cc:06:f0:59:e0:46:99:95:60:cd:
                    7f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4F:68:E6:46:BB:D4:32:8C:0C:B7:A8:AA:57:D7:6E:83:3E:E5:17
            X509v3 Authority Key Identifier:
                keyid:9C:19:27:41:7D:46:17:55:AE:FA:C3:99:78:A5:8B:E1:D3:22:D0:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBknQX1GF1Wu-sOZeKWL4dMi0MA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a67609-38c9-44c7-840b-dd90afdaf5c7/1/Ek9o5ka71DKMDLeoqlfXboM-5Rc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a67609-38c9-44c7-840b-dd90afdaf5c7/1/nBknQX1GF1Wu-sOZeKWL4dMi0MA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.247.228.0/23
                  185.251.46.0/23
                  185.251.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:36:f1:76:ee:b1:91:b5:6a:33:5a:bf:f2:91:43:d7:22:47:
         8a:18:98:03:3f:be:48:19:b9:de:b4:1a:de:29:cd:5e:36:da:
         2c:9d:a6:67:21:7f:27:f7:d4:a7:ae:53:33:42:1b:b0:7a:9f:
         36:e2:67:5d:21:9e:25:1f:c5:e4:43:5c:76:49:17:f0:d8:8b:
         ed:df:21:f3:31:41:3f:31:7b:53:6c:fd:1a:e5:bd:ab:36:40:
         4c:b9:83:d3:4f:b7:be:0b:ea:d3:b0:30:e7:0e:05:72:f3:c8:
         9e:53:f2:9d:3c:fb:1d:02:d2:ae:47:10:b1:82:84:41:7a:6f:
         25:29:d2:aa:ef:a0:f2:18:a7:2c:b5:7f:78:f1:94:dd:79:ee:
         e3:32:82:db:87:0f:2e:c5:66:63:51:89:de:c7:4f:36:81:ac:
         2c:fa:f3:19:f8:bd:1d:cf:1a:e9:56:53:c1:f5:ec:9e:b0:07:
         fb:73:fb:08:ab:f1:d7:c0:bf:0f:b1:4b:58:c2:24:32:a9:d2:
         6f:a0:2a:4a:9f:38:16:d3:c6:7c:e6:f6:b3:d5:cb:61:c6:1c:
         b0:bd:e9:88:63:c9:a0:e7:4a:e0:5b:69:d4:ca:55:fc:6e:b0:
         f3:f6:87:98:e4:5c:ed:0c:b6:93:e0:9f:a8:0c:59:c9:9b:3a:
         0e:7e:73:90
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIECpQv2jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
YzE5Mjc0MTdkNDYxNzU1YWVmYWMzOTk3OGE1OGJlMWQzMjJkMGMwMB4XDTIyMDMy
NDExMTA0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTI0ZjY4ZTY0NmJi
ZDQzMjhjMGNiN2E4YWE1N2Q3NmU4MzNlZTUxNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIFMf5gyK5pXw7YgVv58MIkb8X59SMGRhulY3Dt6hZrfG4ct
i+2S2Aj19/bUIbKTwgN5Febwm0dN91G5V7XaMawayo8lpKTiJGTqXx0denGujR9W
62E9koSoxXIHcmGlNJdK6sdwxHCeGPN4mAbK4qwR9IcpHTPyUQQHKP2ALuNDg+fZ
y6HHntb5HZdSPUpoHDeiKSZycGTmOj39nIr4C/kz430e7nMYQfvo6IMaFWSIkma4
TFc4FwkjPJLXwlnf20mdqyQp3Mm0ElSfGBC7x/7uzCCETe8xhizvGk10XkMh+uWR
4z5OuOWFuRSTYEFKpJMyMqDMBvBZ4EaZlWDNf6cCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQST2jmRrvUMowMt6iqV9dugz7lFzAfBgNVHSMEGDAWgBScGSdBfUYXVa76
w5l4pYvh0yLQwDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25Ca25RWDFHRjFXdS1zT1plS1dMNGRNaTBNQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2MvYTY3NjA5LTM4YzktNDRjNy04NDBiLWRkOTBhZmRhZjVjNy8x
L0VrOW81a2E3MURLTURMZW9xbGZYYm9NLTVSYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Mv
YTY3NjA5LTM4YzktNDRjNy04NDBiLWRkOTBhZmRhZjVjNy8xL25Ca25RWDFHRjFX
dS1zT1plS1dMNGRNaTBNQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAbn35AMEAbn7LgMEAbn7+jANBgkq
hkiG9w0BAQsFAAOCAQEAiDbxdu6xkbVqM1q/8pFD1yJHihiYAz++SBm53rQa3inN
XjbaLJ2mZyF/J/fUp65TM0IbsHqfNuJnXSGeJR/F5ENcdkkX8NiL7d8h8zFBPzF7
U2z9GuW9qzZATLmD00+3vgvq07Aw5w4FcvPInlPynTz7HQLSrkcQsYKEQXpvJSnS
qu+g8hinLLV/ePGU3Xnu4zKC24cPLsVmY1GJ3sdPNoGsLPrzGfi9Hc8a6VZTwfXs
nrAH+3P7CKvx18C/D7FLWMIkMqnSb6AqSp84FtPGfOb2s9XLYcYcsL3piGPJoOdK
4Ftp1MpV/G6w8/aHmORc7Qy2k+CfqAxZyZs6Dn5zkA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:16 2024 by rpki-client on console-fra.rpki-client.org