Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/1980c3-aec1-485b-82a0-d6e869dcd558/1/d1mfFkhdnfwhnQmsh6B3CCgjKQ0.roa
File:                     d1mfFkhdnfwhnQmsh6B3CCgjKQ0.roa (raw, json)
Hash identifier:          EcMUZPjgyxW0R8MPjUYBfKwikN6L0QxmqPkF63YWm1A=
Subject key identifier:   77:59:9F:16:48:5D:9D:FC:21:9D:09:AC:87:A0:77:08:28:23:29:0D
Certificate issuer:       /CN=fd60dbd9a63e1d3b8ecb5c0b3fcb71a2499d86bd
Certificate serial:       0182D4540B3D0DB99EEB3D143D87D2E45426
Authority key identifier: FD:60:DB:D9:A6:3E:1D:3B:8E:CB:5C:0B:3F:CB:71:A2:49:9D:86:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_WDb2aY-HTuOy1wLP8txokmdhr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/1980c3-aec1-485b-82a0-d6e869dcd558/1/d1mfFkhdnfwhnQmsh6B3CCgjKQ0.roa
Signing time:             Thu 25 Aug 2022 09:27:33 +0000
ROA not before:           Thu 25 Aug 2022 09:27:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209326
IP address blocks:        130.193.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:d4:54:0b:3d:0d:b9:9e:eb:3d:14:3d:87:d2:e4:54:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd60dbd9a63e1d3b8ecb5c0b3fcb71a2499d86bd
        Validity
            Not Before: Aug 25 09:27:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=77599f16485d9dfc219d09ac87a077082823290d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2e:24:70:f7:8b:02:17:ce:64:2f:06:63:a1:
                    11:f4:43:c0:71:fa:83:f6:3c:55:fa:d7:0f:4b:87:
                    f5:28:17:57:53:97:cb:04:ea:df:ba:93:e5:67:f7:
                    ed:62:fc:4b:cb:aa:a8:67:df:6d:85:da:cb:88:bc:
                    fc:76:ad:3d:76:e4:a3:a9:6c:df:01:93:2c:d4:a5:
                    61:be:3d:c8:b2:62:a8:29:96:0b:84:70:30:c5:6d:
                    a3:ac:ad:9b:d6:a0:00:ca:61:3c:7e:99:d1:42:df:
                    65:1e:c9:8f:62:c8:08:4e:60:66:6a:2d:92:84:b1:
                    dc:81:c8:14:b4:b2:73:96:bd:28:c9:50:7c:f9:f7:
                    88:8a:3c:14:d9:fd:bb:2c:b5:43:cd:36:c7:ca:28:
                    19:77:2a:24:c2:a9:34:33:ff:d9:d3:d3:55:08:42:
                    81:38:28:11:06:34:9b:bf:7c:c2:40:7e:cd:f9:e0:
                    cc:c4:a2:bb:e0:3a:47:87:20:30:5d:73:a7:80:95:
                    f6:6d:bb:63:29:40:60:fc:e5:16:82:49:fc:7e:f6:
                    07:10:df:2e:02:b3:85:d7:c3:f8:9f:3e:8a:59:1d:
                    27:5d:00:14:c1:f3:d6:4f:8c:4b:f3:da:ad:3c:66:
                    31:cf:1f:62:81:76:af:28:06:a2:91:5a:82:1f:dd:
                    b5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:59:9F:16:48:5D:9D:FC:21:9D:09:AC:87:A0:77:08:28:23:29:0D
            X509v3 Authority Key Identifier:
                keyid:FD:60:DB:D9:A6:3E:1D:3B:8E:CB:5C:0B:3F:CB:71:A2:49:9D:86:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WDb2aY-HTuOy1wLP8txokmdhr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1980c3-aec1-485b-82a0-d6e869dcd558/1/d1mfFkhdnfwhnQmsh6B3CCgjKQ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1980c3-aec1-485b-82a0-d6e869dcd558/1/_WDb2aY-HTuOy1wLP8txokmdhr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.193.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:59:73:b7:0e:8c:a3:c4:d5:21:b5:bb:a0:44:f0:f3:c6:a2:
         aa:97:d6:fa:ab:5e:7e:9f:9a:77:6a:a8:c8:f3:64:15:2a:a5:
         79:ec:87:d5:c2:15:c1:ee:eb:cf:14:d2:25:7a:4e:1f:61:97:
         fb:51:01:e0:d9:8b:28:41:66:36:f9:b4:69:f2:4b:07:79:47:
         7b:85:12:53:1f:79:9c:46:49:0e:98:5a:7f:2e:73:ee:2c:aa:
         f5:a8:0d:4b:10:b9:5c:4d:29:5d:de:14:0f:ec:0e:29:c7:66:
         ef:95:49:ff:dd:26:f4:65:e5:bc:92:ce:64:88:8c:a0:3a:2d:
         32:18:d7:fb:05:4a:ee:c5:c2:88:92:d9:ca:59:a8:30:11:ed:
         67:0e:4c:81:44:ed:38:64:d8:9b:21:a5:d2:9e:75:f0:7a:4b:
         7a:ce:52:34:4c:84:b9:65:a3:7c:f1:93:3b:2d:da:bd:12:54:
         c2:71:22:b3:67:95:e8:99:60:76:86:02:e9:f9:c2:4f:92:28:
         99:7f:87:9d:9b:db:40:03:2b:8a:62:d5:15:fa:5b:42:02:07:
         84:88:6f:71:f6:71:47:a2:7d:05:ca:92:31:7e:7c:b2:30:bf:
         4d:8e:c3:10:76:7e:5c:28:a1:94:cd:85:51:2e:f0:57:80:88:
         9d:a5:b1:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLUVAs9Dbme6z0UPYfS5FQmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkNjBkYmQ5YTYzZTFkM2I4ZWNiNWMwYjNmY2I3MWEyNDk5
ZDg2YmQwHhcNMjIwODI1MDkyNzMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzU5OWYxNjQ4NWQ5ZGZjMjE5ZDA5YWM4N2EwNzcwODI4MjMyOTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi4kcPeLAhfOZC8GY6ER9EPAcfqD
9jxV+tcPS4f1KBdXU5fLBOrfupPlZ/ftYvxLy6qoZ99thdrLiLz8dq09duSjqWzf
AZMs1KVhvj3IsmKoKZYLhHAwxW2jrK2b1qAAymE8fpnRQt9lHsmPYsgITmBmai2S
hLHcgcgUtLJzlr0oyVB8+feIijwU2f27LLVDzTbHyigZdyokwqk0M//Z09NVCEKB
OCgRBjSbv3zCQH7N+eDMxKK74DpHhyAwXXOngJX2bbtjKUBg/OUWgkn8fvYHEN8u
ArOF18P4nz6KWR0nXQAUwfPWT4xL89qtPGYxzx9igXavKAaikVqCH921HQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHdZnxZIXZ38IZ0JrIegdwgoIykNMB8GA1UdIwQY
MBaAFP1g29mmPh07jstcCz/LcaJJnYa9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1dEYjJhWS1IVHVPeTF3TFA4dHhva21kaHIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8xOTgwYzMtYWVjMS00ODViLTgyYTAt
ZDZlODY5ZGNkNTU4LzEvZDFtZkZraGRuZndoblFtc2g2QjNDQ2dqS1EwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8xOTgwYzMtYWVjMS00ODViLTgyYTAtZDZlODY5ZGNkNTU4
LzEvX1dEYjJhWS1IVHVPeTF3TFA4dHhva21kaHIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgsEAMA0G
CSqGSIb3DQEBCwUAA4IBAQAnWXO3DoyjxNUhtbugRPDzxqKql9b6q15+n5p3aqjI
82QVKqV57IfVwhXB7uvPFNIlek4fYZf7UQHg2YsoQWY2+bRp8ksHeUd7hRJTH3mc
RkkOmFp/LnPuLKr1qA1LELlcTSld3hQP7A4px2bvlUn/3Sb0ZeW8ks5kiIygOi0y
GNf7BUruxcKIktnKWagwEe1nDkyBRO04ZNibIaXSnnXwekt6zlI0TIS5ZaN88ZM7
Ldq9ElTCcSKzZ5XomWB2hgLp+cJPkiiZf4edm9tAAyuKYtUV+ltCAgeEiG9x9nFH
on0FypIxfnyyML9NjsMQdn5cKKGUzYVRLvBXgIidpbFa
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:34 2024 by rpki-client on console-fra.rpki-client.org