Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dd068a-2ea4-4e8d-9300-a05680fb9e50/1/0XdjF0PaXCyOkVsPe96tuACcdxQ.roa
File:                     0XdjF0PaXCyOkVsPe96tuACcdxQ.roa (raw, json)
Hash identifier:          fafI0w1UzAjMNdjBaaxI+Z+GirVKgKxaoB+KelQcfFg=
Subject key identifier:   D1:77:63:17:43:DA:5C:2C:8E:91:5B:0F:7B:DE:AD:B8:00:9C:77:14
Certificate issuer:       /CN=a7b52b24c1da522ed3ffee71362dbc15c9dae6fa
Certificate serial:       986E03
Authority key identifier: A7:B5:2B:24:C1:DA:52:2E:D3:FF:EE:71:36:2D:BC:15:C9:DA:E6:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p7UrJMHaUi7T_-5xNi28Fcna5vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/dd068a-2ea4-4e8d-9300-a05680fb9e50/1/0XdjF0PaXCyOkVsPe96tuACcdxQ.roa
Signing time:             Sat 01 Jan 2022 02:55:11 +0000
ROA not before:           Sat 01 Jan 2022 02:55:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     10753
IP address blocks:        176.126.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9989635 (0x986e03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7b52b24c1da522ed3ffee71362dbc15c9dae6fa
        Validity
            Not Before: Jan  1 02:55:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d177631743da5c2c8e915b0f7bdeadb8009c7714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2b:49:29:81:76:65:0f:24:d0:02:16:fb:ad:
                    a8:fb:05:12:e0:b7:1c:60:0b:2f:25:3e:cc:f7:1d:
                    82:f9:3a:93:fe:42:d2:6c:de:86:d0:48:70:4d:79:
                    23:37:07:21:38:1b:53:ec:0e:56:76:6b:34:57:97:
                    ec:ef:ee:ae:cb:0b:08:3d:2e:e0:15:57:a8:ab:2c:
                    86:6e:0c:be:d4:90:6e:e7:b3:36:e5:b9:95:86:30:
                    78:f1:62:ba:b9:cd:8d:5e:8a:0a:e9:3c:17:f8:24:
                    7c:ac:42:a1:b9:7c:6c:d6:c4:ae:0a:4f:ca:a4:9b:
                    d4:2f:a6:c9:68:07:0b:44:42:a5:30:43:10:7b:da:
                    19:a7:1a:e7:04:31:31:41:39:15:75:a9:44:16:f1:
                    d6:20:66:73:05:f4:11:16:dc:2f:4a:ea:02:bc:fb:
                    65:86:2c:b2:6f:18:91:bd:e7:0f:87:02:59:70:22:
                    4b:05:20:46:40:93:98:4d:44:13:f5:0c:0e:20:c1:
                    42:2e:6b:89:66:a2:25:be:f2:fa:58:66:ab:3b:09:
                    2e:37:91:d9:08:59:3e:b5:d0:62:e9:b0:c3:f2:4f:
                    08:ee:c4:1b:0f:3d:3d:6d:96:2d:a2:dc:37:7f:5d:
                    48:63:cb:4f:4a:14:96:64:65:d7:ec:f1:ca:a7:14:
                    7b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:77:63:17:43:DA:5C:2C:8E:91:5B:0F:7B:DE:AD:B8:00:9C:77:14
            X509v3 Authority Key Identifier:
                keyid:A7:B5:2B:24:C1:DA:52:2E:D3:FF:EE:71:36:2D:BC:15:C9:DA:E6:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7UrJMHaUi7T_-5xNi28Fcna5vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dd068a-2ea4-4e8d-9300-a05680fb9e50/1/0XdjF0PaXCyOkVsPe96tuACcdxQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dd068a-2ea4-4e8d-9300-a05680fb9e50/1/p7UrJMHaUi7T_-5xNi28Fcna5vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:74:10:38:30:08:31:6a:ec:46:32:21:de:22:41:4b:e2:61:
         a4:64:87:a4:7a:74:43:23:ea:6c:d7:79:04:51:92:a6:14:b2:
         2b:cf:cc:a0:36:30:8c:75:36:7d:2a:a5:e5:4b:e0:7c:e8:4d:
         5c:d0:10:0b:ac:50:be:e1:ae:f2:d7:c2:52:50:d6:bb:d7:f3:
         62:d2:ac:81:54:0d:88:83:59:05:43:24:9b:f4:f9:2c:b1:d1:
         4a:be:50:98:91:8c:a9:54:a2:cf:e0:ad:aa:a4:7b:b3:2f:0a:
         8c:4a:4d:64:52:37:fd:c7:b1:46:9d:61:0b:05:58:7f:2d:6d:
         11:04:db:84:94:a3:c1:0d:a8:58:a3:7e:64:be:57:cc:7e:d7:
         f6:d0:6d:50:ae:00:07:c0:96:75:63:a6:0c:3d:75:65:a7:2f:
         dc:7b:a4:ca:a2:74:07:76:82:5b:6f:d0:0f:1c:48:c5:09:5b:
         de:60:0a:75:cb:4f:26:08:bc:db:7f:b5:6d:a9:ff:4c:ec:92:
         cc:f8:82:96:f4:dd:b9:e0:8d:5c:d5:ad:f5:6d:29:fa:c4:48:
         08:26:37:cc:77:13:94:3e:5e:75:a3:e6:f9:18:ef:b1:fd:6e:
         1d:fc:3b:cf:26:89:27:65:3c:1a:28:8b:62:78:4c:74:09:57:
         c3:0c:93:b9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAJhuAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
N2I1MmIyNGMxZGE1MjJlZDNmZmVlNzEzNjJkYmMxNWM5ZGFlNmZhMB4XDTIyMDEw
MTAyNTUxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDE3NzYzMTc0M2Rh
NWMyYzhlOTE1YjBmN2JkZWFkYjgwMDljNzcxNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN8rSSmBdmUPJNACFvutqPsFEuC3HGALLyU+zPcdgvk6k/5C
0mzehtBIcE15IzcHITgbU+wOVnZrNFeX7O/urssLCD0u4BVXqKsshm4MvtSQbuez
NuW5lYYwePFiurnNjV6KCuk8F/gkfKxCobl8bNbErgpPyqSb1C+myWgHC0RCpTBD
EHvaGaca5wQxMUE5FXWpRBbx1iBmcwX0ERbcL0rqArz7ZYYssm8Ykb3nD4cCWXAi
SwUgRkCTmE1EE/UMDiDBQi5riWaiJb7y+lhmqzsJLjeR2QhZPrXQYumww/JPCO7E
Gw89PW2WLaLcN39dSGPLT0oUlmRl1+zxyqcUe1cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTRd2MXQ9pcLI6RWw973q24AJx3FDAfBgNVHSMEGDAWgBSntSskwdpSLtP/
7nE2LbwVydrm+jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3A3VXJKTUhhVWk3VF8tNXhOaTI4RmNuYTV2by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODcvZGQwNjhhLTJlYTQtNGU4ZC05MzAwLWEwNTY4MGZiOWU1MC8x
LzBYZGpGMFBhWEN5T2tWc1BlOTZ0dUFDY2R4US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcv
ZGQwNjhhLTJlYTQtNGU4ZC05MzAwLWEwNTY4MGZiOWU1MC8xL3A3VXJKTUhhVWk3
VF8tNXhOaTI4RmNuYTV2by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALB+aTANBgkqhkiG9w0BAQsFAAOC
AQEAJXQQODAIMWrsRjIh3iJBS+JhpGSHpHp0QyPqbNd5BFGSphSyK8/MoDYwjHU2
fSql5UvgfOhNXNAQC6xQvuGu8tfCUlDWu9fzYtKsgVQNiINZBUMkm/T5LLHRSr5Q
mJGMqVSiz+CtqqR7sy8KjEpNZFI3/cexRp1hCwVYfy1tEQTbhJSjwQ2oWKN+ZL5X
zH7X9tBtUK4AB8CWdWOmDD11Zacv3HukyqJ0B3aCW2/QDxxIxQlb3mAKdctPJgi8
23+1ban/TOySzPiClvTdueCNXNWt9W0p+sRICCY3zHcTlD5edaPm+Rjvsf1uHfw7
zyaJJ2U8GiiLYnhMdAlXwwyTuQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:49 2024 by rpki-client on console-fra.rpki-client.org