Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dd068a-2ea4-4e8d-9300-a05680fb9e50/1/GGEthDQwM4clcinG0zFUzuuEGys.roa
File:                     GGEthDQwM4clcinG0zFUzuuEGys.roa (raw, json)
Hash identifier:          G/5BIYnXwUSQKYSz6isHX2iI1VXt+mDBoiDXXN/7IsM=
Subject key identifier:   18:61:2D:84:34:30:33:87:25:72:29:C6:D3:31:54:CE:EB:84:1B:2B
Certificate issuer:       /CN=a7b52b24c1da522ed3ffee71362dbc15c9dae6fa
Certificate serial:       018385538B2FCA46DD6D1E543F657DA659C1
Authority key identifier: A7:B5:2B:24:C1:DA:52:2E:D3:FF:EE:71:36:2D:BC:15:C9:DA:E6:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p7UrJMHaUi7T_-5xNi28Fcna5vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/dd068a-2ea4-4e8d-9300-a05680fb9e50/1/GGEthDQwM4clcinG0zFUzuuEGys.roa
Signing time:             Wed 28 Sep 2022 18:19:48 +0000
ROA not before:           Wed 28 Sep 2022 18:19:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        176.126.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:85:53:8b:2f:ca:46:dd:6d:1e:54:3f:65:7d:a6:59:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7b52b24c1da522ed3ffee71362dbc15c9dae6fa
        Validity
            Not Before: Sep 28 18:19:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=18612d8434303387257229c6d33154ceeb841b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:96:a8:7f:43:d7:e4:10:47:13:38:95:4c:e4:
                    fd:75:ad:f9:53:9a:84:eb:9b:af:a7:1a:0e:49:93:
                    8f:a5:89:ea:79:88:e4:56:b9:b9:c3:a5:d7:2b:d7:
                    55:32:40:b9:fb:2d:c5:2c:ef:b4:83:58:c6:e1:a3:
                    73:17:77:79:ea:f7:48:ad:5d:d3:16:fb:14:d3:5c:
                    16:85:a1:a8:a3:d3:45:22:e6:2d:db:16:a3:b8:c2:
                    53:51:7f:03:34:32:ad:db:cf:9c:17:79:11:5c:a8:
                    13:de:39:01:4e:bd:8c:b2:ed:c3:45:63:23:63:e3:
                    e2:b9:14:7f:5f:ac:c0:7f:c7:60:39:55:87:58:82:
                    b1:15:17:7f:d8:22:8a:49:1a:84:1a:ea:67:18:e2:
                    ae:07:0c:6c:ba:e5:44:bb:1d:5e:40:d8:9e:93:5c:
                    c0:19:ce:81:25:b8:91:87:ee:83:fd:2b:2d:79:64:
                    20:1d:e1:4c:d7:f2:5e:ce:7f:52:83:e0:4b:24:19:
                    81:67:0f:3b:b6:6c:61:98:82:c8:38:fd:85:10:f9:
                    9e:1f:35:1f:05:a7:88:4c:9e:56:ff:e1:98:d3:b9:
                    c8:49:b3:85:a9:7a:37:5e:8e:49:37:a2:c2:f2:3d:
                    17:3b:e7:2b:de:72:ee:eb:d8:56:58:86:1d:74:e5:
                    22:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:61:2D:84:34:30:33:87:25:72:29:C6:D3:31:54:CE:EB:84:1B:2B
            X509v3 Authority Key Identifier:
                keyid:A7:B5:2B:24:C1:DA:52:2E:D3:FF:EE:71:36:2D:BC:15:C9:DA:E6:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7UrJMHaUi7T_-5xNi28Fcna5vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dd068a-2ea4-4e8d-9300-a05680fb9e50/1/GGEthDQwM4clcinG0zFUzuuEGys.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dd068a-2ea4-4e8d-9300-a05680fb9e50/1/p7UrJMHaUi7T_-5xNi28Fcna5vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:11:cd:46:7c:0e:50:59:09:2c:82:73:63:f9:56:21:ed:a9:
         a2:ac:5e:c5:a2:f0:32:b7:c0:1b:8b:36:cf:e8:a6:fe:6c:cd:
         a3:1b:09:8e:a5:15:82:fb:3e:7e:af:ed:f7:6c:6d:c7:a3:f9:
         a6:f6:e6:ec:96:60:fc:fd:af:39:57:ed:fd:44:6a:a2:b2:49:
         fe:84:c7:17:69:58:90:94:4a:30:50:23:a9:51:d8:68:04:18:
         56:c6:36:e7:d6:90:ba:eb:b7:40:90:19:45:39:7f:f3:6e:5a:
         72:47:5e:b1:8d:3a:e8:da:e9:55:d7:07:68:d3:d9:b5:80:3a:
         c3:19:8d:3c:56:a2:63:26:b6:0b:5f:7d:52:7b:eb:a2:18:93:
         9c:ba:22:95:1a:0a:8d:32:15:66:fa:1f:96:47:36:41:90:bb:
         5b:05:40:8b:0f:6f:26:c6:91:fd:31:fc:df:96:12:cf:49:85:
         db:d1:49:27:04:3e:12:6f:7d:05:0f:1b:37:94:94:93:23:d0:
         ad:62:59:c6:f1:a5:80:36:9a:57:cd:38:7f:e4:a6:ac:05:03:
         21:9c:a1:5e:cf:43:cf:0e:06:2c:d6:94:f1:60:b7:59:13:b6:
         e9:de:df:40:00:11:81:ec:85:14:e1:95:4f:48:54:07:cd:e7:
         96:42:b9:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOFU4svykbdbR5UP2V9plnBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YjUyYjI0YzFkYTUyMmVkM2ZmZWU3MTM2MmRiYzE1Yzlk
YWU2ZmEwHhcNMjIwOTI4MTgxOTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODYxMmQ4NDM0MzAzMzg3MjU3MjI5YzZkMzMxNTRjZWViODQxYjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5aof0PX5BBHEziVTOT9da35U5qE
65uvpxoOSZOPpYnqeYjkVrm5w6XXK9dVMkC5+y3FLO+0g1jG4aNzF3d56vdIrV3T
FvsU01wWhaGoo9NFIuYt2xajuMJTUX8DNDKt28+cF3kRXKgT3jkBTr2Msu3DRWMj
Y+PiuRR/X6zAf8dgOVWHWIKxFRd/2CKKSRqEGupnGOKuBwxsuuVEux1eQNiek1zA
Gc6BJbiRh+6D/SsteWQgHeFM1/Jezn9Sg+BLJBmBZw87tmxhmILIOP2FEPmeHzUf
BaeITJ5W/+GY07nISbOFqXo3Xo5JN6LC8j0XO+cr3nLu69hWWIYddOUiZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBhhLYQ0MDOHJXIpxtMxVM7rhBsrMB8GA1UdIwQY
MBaAFKe1KyTB2lIu0//ucTYtvBXJ2ub6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDdVckpNSGFVaTdUXy01eE5pMjhGY25hNXZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kZDA2OGEtMmVhNC00ZThkLTkzMDAt
YTA1NjgwZmI5ZTUwLzEvR0dFdGhEUXdNNGNsY2luRzB6RlV6dXVFR3lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9kZDA2OGEtMmVhNC00ZThkLTkzMDAtYTA1NjgwZmI5ZTUw
LzEvcDdVckpNSGFVaTdUXy01eE5pMjhGY25hNXZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsH5pMA0G
CSqGSIb3DQEBCwUAA4IBAQC0Ec1GfA5QWQksgnNj+VYh7amirF7FovAyt8AbizbP
6Kb+bM2jGwmOpRWC+z5+r+33bG3Ho/mm9ubslmD8/a85V+39RGqiskn+hMcXaViQ
lEowUCOpUdhoBBhWxjbn1pC667dAkBlFOX/zblpyR16xjTro2ulV1wdo09m1gDrD
GY08VqJjJrYLX31Se+uiGJOcuiKVGgqNMhVm+h+WRzZBkLtbBUCLD28mxpH9Mfzf
lhLPSYXb0UknBD4Sb30FDxs3lJSTI9CtYlnG8aWANppXzTh/5KasBQMhnKFez0PP
DgYs1pTxYLdZE7bp3t9AABGB7IUU4ZVPSFQHzeeWQrk+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:49 2024 by rpki-client on console-fra.rpki-client.org