Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3925db-5b3c-40a2-a3a1-233db82cad9c/1/DgeDW9BVvWkgY2CaDz-ZcC7P9-c.roa
File:                     DgeDW9BVvWkgY2CaDz-ZcC7P9-c.roa (raw, json)
Hash identifier:          VdxxEZyShI8C7aHKUBCNC0Zs7MgWtZ7OGwgLMLM7D8Y=
Subject key identifier:   0E:07:83:5B:D0:55:BD:69:20:63:60:9A:0F:3F:99:70:2E:CF:F7:E7
Certificate issuer:       /CN=5780c0c438cc5dcb7a869d26b4ab83da447de28d
Certificate serial:       0187D5EF4979FB4BC6B4FDAF3ECCB9D05BB1
Authority key identifier: 57:80:C0:C4:38:CC:5D:CB:7A:86:9D:26:B4:AB:83:DA:44:7D:E2:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V4DAxDjMXct6hp0mtKuD2kR94o0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/3925db-5b3c-40a2-a3a1-233db82cad9c/1/DgeDW9BVvWkgY2CaDz-ZcC7P9-c.roa
Signing time:             Mon 01 May 2023 06:10:41 +0000
ROA not before:           Mon 01 May 2023 06:10:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48011
IP address blocks:        185.104.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:d5:ef:49:79:fb:4b:c6:b4:fd:af:3e:cc:b9:d0:5b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5780c0c438cc5dcb7a869d26b4ab83da447de28d
        Validity
            Not Before: May  1 06:10:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0e07835bd055bd692063609a0f3f99702ecff7e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a8:71:80:a6:08:68:b2:dd:f8:91:02:ee:44:
                    25:51:39:73:2e:0b:5e:65:e3:8e:92:9d:e5:2a:ae:
                    9b:95:32:d2:6d:16:5d:e5:49:4f:22:e1:05:b7:4f:
                    cd:f4:2f:36:18:a9:8b:6d:0f:a4:6a:82:ff:93:ce:
                    8d:4d:21:4f:13:83:03:56:d5:58:c8:d1:14:b5:f9:
                    c9:e0:69:48:f2:85:10:12:2f:09:1b:5a:49:7e:b8:
                    d9:38:ee:89:e7:22:1f:e8:3f:fc:c2:16:03:b8:d7:
                    52:3e:05:87:6c:de:27:6d:8f:50:c9:7c:86:6d:55:
                    cb:c6:6f:ba:3b:3b:8f:41:5a:97:74:e0:5e:8c:cc:
                    78:0d:da:84:b4:2b:75:a3:01:7f:20:c8:25:f0:b8:
                    ad:f6:34:81:0b:8d:c3:00:23:68:5b:8a:76:6b:f3:
                    af:b4:de:a6:de:1b:eb:44:8b:fb:8f:09:0f:9a:e3:
                    c6:ab:a2:55:6e:13:84:21:b9:68:8c:3e:4d:b8:c5:
                    b1:2f:d3:1f:d7:89:ed:bc:ba:be:a8:6e:85:9a:fb:
                    8b:fc:8f:57:72:9a:ce:c3:57:e3:c9:78:82:f2:58:
                    4e:ed:11:88:9d:eb:00:1d:8d:4e:49:d9:aa:c7:9d:
                    ea:41:b7:33:c9:ed:88:24:0a:d7:68:fa:c5:51:75:
                    ca:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:07:83:5B:D0:55:BD:69:20:63:60:9A:0F:3F:99:70:2E:CF:F7:E7
            X509v3 Authority Key Identifier:
                keyid:57:80:C0:C4:38:CC:5D:CB:7A:86:9D:26:B4:AB:83:DA:44:7D:E2:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4DAxDjMXct6hp0mtKuD2kR94o0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3925db-5b3c-40a2-a3a1-233db82cad9c/1/DgeDW9BVvWkgY2CaDz-ZcC7P9-c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3925db-5b3c-40a2-a3a1-233db82cad9c/1/V4DAxDjMXct6hp0mtKuD2kR94o0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.104.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:5e:57:16:15:c9:80:e7:2e:47:99:cf:e0:05:15:0f:2c:59:
         17:fe:3a:97:c1:32:09:6e:8d:6f:61:51:2d:57:2f:e4:d8:68:
         4b:08:de:cb:9e:cd:cf:1a:b3:06:4d:4a:69:fa:d8:97:d9:d7:
         bb:5f:5d:85:16:63:f7:4a:cd:2f:4e:7a:42:cd:94:51:5a:41:
         71:9c:66:1f:83:0e:fe:50:c6:17:02:ce:26:39:f5:e3:87:4d:
         f3:d3:dc:57:05:ec:d5:a3:94:a4:fd:5d:a5:ff:6e:0c:57:f1:
         58:3d:aa:c8:a5:d1:36:a3:ca:e7:6b:51:a4:ca:c0:4b:ea:46:
         d1:66:af:7a:99:51:cb:28:3f:d2:a0:75:f3:7b:b9:23:43:78:
         44:a6:74:64:d7:94:52:a2:4c:ff:6f:79:1d:b4:15:e0:49:f7:
         2f:12:1c:b4:1b:68:51:f0:3f:69:63:5b:15:65:b0:76:32:a5:
         e3:8d:46:a5:c0:d3:47:c2:14:ec:e8:92:21:53:3e:ba:6b:64:
         2f:f3:e1:f9:19:35:b2:61:44:6b:e2:b6:e9:23:c3:0a:a6:de:
         fa:42:42:15:42:b7:64:ae:c3:27:13:50:bf:fb:27:fd:37:91:
         13:6a:79:ca:5a:3a:9a:f7:34:90:10:83:87:b3:f1:9a:3c:ba:
         16:c1:df:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfV70l5+0vGtP2vPsy50FuxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ODBjMGM0MzhjYzVkY2I3YTg2OWQyNmI0YWI4M2RhNDQ3
ZGUyOGQwHhcNMjMwNTAxMDYxMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTA3ODM1YmQwNTViZDY5MjA2MzYwOWEwZjNmOTk3MDJlY2ZmN2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqhxgKYIaLLd+JEC7kQlUTlzLgte
ZeOOkp3lKq6blTLSbRZd5UlPIuEFt0/N9C82GKmLbQ+kaoL/k86NTSFPE4MDVtVY
yNEUtfnJ4GlI8oUQEi8JG1pJfrjZOO6J5yIf6D/8whYDuNdSPgWHbN4nbY9QyXyG
bVXLxm+6OzuPQVqXdOBejMx4DdqEtCt1owF/IMgl8Lit9jSBC43DACNoW4p2a/Ov
tN6m3hvrRIv7jwkPmuPGq6JVbhOEIblojD5NuMWxL9Mf14ntvLq+qG6FmvuL/I9X
cprOw1fjyXiC8lhO7RGInesAHY1OSdmqx53qQbczye2IJArXaPrFUXXKaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA4Hg1vQVb1pIGNgmg8/mXAuz/fnMB8GA1UdIwQY
MBaAFFeAwMQ4zF3LeoadJrSrg9pEfeKNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjREQXhEak1YY3Q2aHAwbXRLdUQya1I5NG8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zOTI1ZGItNWIzYy00MGEyLWEzYTEt
MjMzZGI4MmNhZDljLzEvRGdlRFc5QlZ2V2tnWTJDYUR6LVpjQzdQOS1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8zOTI1ZGItNWIzYy00MGEyLWEzYTEtMjMzZGI4MmNhZDlj
LzEvVjREQXhEak1YY3Q2aHAwbXRLdUQya1I5NG8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWi9MA0G
CSqGSIb3DQEBCwUAA4IBAQB7XlcWFcmA5y5Hmc/gBRUPLFkX/jqXwTIJbo1vYVEt
Vy/k2GhLCN7Lns3PGrMGTUpp+tiX2de7X12FFmP3Ss0vTnpCzZRRWkFxnGYfgw7+
UMYXAs4mOfXjh03z09xXBezVo5Sk/V2l/24MV/FYParIpdE2o8rna1GkysBL6kbR
Zq96mVHLKD/SoHXze7kjQ3hEpnRk15RSokz/b3kdtBXgSfcvEhy0G2hR8D9pY1sV
ZbB2MqXjjUalwNNHwhTs6JIhUz66a2Qv8+H5GTWyYURr4rbpI8MKpt76QkIVQrdk
rsMnE1C/+yf9N5ETannKWjqa9zSQEIOHs/GaPLoWwd+F
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:57 2024 by rpki-client on console-ams.rpki-client.org