Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/9sEWlrVANt_ZoKaNAKS-G-1qhd4.roa
File:                     9sEWlrVANt_ZoKaNAKS-G-1qhd4.roa (raw, json)
Hash identifier:          dTTt3RE6TYQ95CAjVZtiIfXw5R1DRxqGhjnXs3HtscA=
Subject key identifier:   F6:C1:16:96:B5:40:36:DF:D9:A0:A6:8D:00:A4:BE:1B:ED:6A:85:DE
Certificate issuer:       /CN=a5915bc8a982fe61eb4aed5418323288329504d7
Certificate serial:       0771A196
Authority key identifier: A5:91:5B:C8:A9:82:FE:61:EB:4A:ED:54:18:32:32:88:32:95:04:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pZFbyKmC_mHrSu1UGDIyiDKVBNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/9sEWlrVANt_ZoKaNAKS-G-1qhd4.roa
Signing time:             Sat 07 May 2022 04:42:51 +0000
ROA not before:           Sat 07 May 2022 04:42:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43046
IP address blocks:        195.225.58.0/24 maxlen: 24
                          195.225.58.0/23 maxlen: 23
                          195.225.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124887446 (0x771a196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5915bc8a982fe61eb4aed5418323288329504d7
        Validity
            Not Before: May  7 04:42:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f6c11696b54036dfd9a0a68d00a4be1bed6a85de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9c:c8:4c:cc:fe:07:2f:5f:23:10:f5:ce:76:
                    70:61:3c:b1:37:b5:19:49:e3:76:71:ec:be:9d:2e:
                    10:5f:cd:3c:43:62:af:f6:fd:2b:ee:a2:dd:61:46:
                    28:b9:ad:c5:5c:8d:d3:81:f5:55:79:8e:ce:7f:ae:
                    52:e5:c0:17:a6:eb:3d:96:03:58:dd:19:bd:77:b9:
                    3b:88:d2:f3:c7:ee:06:64:88:37:81:04:b3:84:a8:
                    e9:93:e8:66:fb:80:29:9e:0d:64:42:c0:3e:ac:78:
                    bf:06:93:81:c3:3e:da:38:93:eb:b1:3f:3d:3d:7f:
                    b9:19:2a:c1:5b:63:3c:2d:89:82:bd:f9:49:a2:f1:
                    39:a1:c3:41:29:05:1f:3f:f4:e2:47:7f:c5:c2:1f:
                    1a:f8:65:82:33:df:b9:d8:a6:37:c1:ee:ca:cc:97:
                    6b:59:2a:dc:a2:12:b4:2f:3e:91:a0:30:ec:c6:c0:
                    bc:f5:34:29:92:96:3c:94:d6:8b:a2:a6:2f:3d:eb:
                    81:5d:51:0e:ff:d0:17:9e:35:e9:80:dd:60:71:b1:
                    91:95:65:47:09:0e:b6:ee:bf:0a:7b:d7:80:54:98:
                    1d:bd:49:7c:d4:90:b2:d7:ba:8b:98:6d:6c:80:1e:
                    a1:78:a2:56:36:55:aa:8b:a3:11:d0:29:1b:ac:13:
                    b5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C1:16:96:B5:40:36:DF:D9:A0:A6:8D:00:A4:BE:1B:ED:6A:85:DE
            X509v3 Authority Key Identifier:
                keyid:A5:91:5B:C8:A9:82:FE:61:EB:4A:ED:54:18:32:32:88:32:95:04:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZFbyKmC_mHrSu1UGDIyiDKVBNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/9sEWlrVANt_ZoKaNAKS-G-1qhd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8e37d3-c632-48b8-9b0b-5012054f9d26/1/pZFbyKmC_mHrSu1UGDIyiDKVBNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.225.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:77:67:f9:66:80:59:fa:5f:cf:f5:3f:eb:6f:95:a7:10:d9:
         cf:51:0a:f7:45:5d:2d:11:91:49:f5:19:6f:3d:03:a6:75:c8:
         5b:04:98:54:2c:ce:cc:f5:7f:24:f7:6c:48:22:c3:56:6d:be:
         d0:43:3a:86:a9:6a:22:8e:22:38:ee:46:84:58:82:42:7f:12:
         67:5d:2b:c3:83:d2:41:b1:38:bd:38:33:21:bf:89:02:2f:dc:
         63:9e:8e:c6:30:f6:27:74:05:66:2a:3b:cb:7d:d0:3a:23:1a:
         9f:0f:93:8d:54:24:f3:45:23:10:cb:5d:56:e4:b2:2e:a9:07:
         71:3c:63:bf:37:7b:68:96:de:11:5e:c8:fd:1a:a3:26:6f:fe:
         a9:e2:87:ab:f1:b5:fc:52:36:49:88:4e:1f:77:a1:b5:6f:78:
         58:3f:d9:74:bd:b8:96:50:38:72:f8:27:01:83:f0:55:eb:ff:
         1f:02:76:e3:66:35:51:a2:68:89:ad:fb:a7:82:6a:28:49:6d:
         34:c8:12:31:e5:89:02:46:fe:ae:34:7b:05:90:09:b2:60:06:
         a5:fd:ab:ab:52:21:68:b3:4e:95:b3:fa:bb:9b:21:67:fc:3b:
         05:7b:53:b4:2d:36:8c:6a:8b:7a:f8:0b:4f:8b:26:89:ca:55:
         7f:b6:45:67
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB3GhljANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NTkxNWJjOGE5ODJmZTYxZWI0YWVkNTQxODMyMzI4ODMyOTUwNGQ3MB4XDTIyMDUw
NzA0NDI1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjZjMTE2OTZiNTQw
MzZkZmQ5YTBhNjhkMDBhNGJlMWJlZDZhODVkZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ+cyEzM/gcvXyMQ9c52cGE8sTe1GUnjdnHsvp0uEF/NPENi
r/b9K+6i3WFGKLmtxVyN04H1VXmOzn+uUuXAF6brPZYDWN0ZvXe5O4jS88fuBmSI
N4EEs4So6ZPoZvuAKZ4NZELAPqx4vwaTgcM+2jiT67E/PT1/uRkqwVtjPC2Jgr35
SaLxOaHDQSkFHz/04kd/xcIfGvhlgjPfudimN8HuysyXa1kq3KIStC8+kaAw7MbA
vPU0KZKWPJTWi6KmLz3rgV1RDv/QF5416YDdYHGxkZVlRwkOtu6/CnvXgFSYHb1J
fNSQste6i5htbIAeoXiiVjZVqoujEdApG6wTta0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT2wRaWtUA239mgpo0ApL4b7WqF3jAfBgNVHSMEGDAWgBSlkVvIqYL+YetK
7VQYMjKIMpUE1zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BaRmJ5S21DX21IclN1MVVHREl5aURLVkJOYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGYvOGUzN2QzLWM2MzItNDhiOC05YjBiLTUwMTIwNTRmOWQyNi8x
LzlzRVdsclZBTnRfWm9LYU5BS1MtRy0xcWhkNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYv
OGUzN2QzLWM2MzItNDhiOC05YjBiLTUwMTIwNTRmOWQyNi8xL3BaRmJ5S21DX21I
clN1MVVHREl5aURLVkJOYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcPhOjANBgkqhkiG9w0BAQsFAAOC
AQEAfXdn+WaAWfpfz/U/62+VpxDZz1EK90VdLRGRSfUZbz0DpnXIWwSYVCzOzPV/
JPdsSCLDVm2+0EM6hqlqIo4iOO5GhFiCQn8SZ10rw4PSQbE4vTgzIb+JAi/cY56O
xjD2J3QFZio7y33QOiManw+TjVQk80UjEMtdVuSyLqkHcTxjvzd7aJbeEV7I/Rqj
Jm/+qeKHq/G1/FI2SYhOH3ehtW94WD/ZdL24llA4cvgnAYPwVev/HwJ242Y1UaJo
ia37p4JqKEltNMgSMeWJAkb+rjR7BZAJsmAGpf2rq1IhaLNOlbP6u5shZ/w7BXtT
tC02jGqLevgLT4smicpVf7ZFZw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-fra.rpki-client.org