Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/q3kYXONAy0fmAuz1emZlKAPevUo.roa
File:                     q3kYXONAy0fmAuz1emZlKAPevUo.roa (raw, json)
Hash identifier:          HaSW02+cQ2RKnh18EFvdsrf6mgrRvhwKcqb6uiNve+E=
Subject key identifier:   AB:79:18:5C:E3:40:CB:47:E6:02:EC:F5:7A:66:65:28:03:DE:BD:4A
Certificate issuer:       /CN=26472cfdcd392a184f1f051320bba806a204c6cd
Certificate serial:       2C18
Authority key identifier: 26:47:2C:FD:CD:39:2A:18:4F:1F:05:13:20:BB:A8:06:A2:04:C6:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jkcs_c05KhhPHwUTILuoBqIExs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/q3kYXONAy0fmAuz1emZlKAPevUo.roa
Signing time:             Mon 07 Feb 2022 14:01:48 +0000
ROA not before:           Mon 07 Feb 2022 14:01:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     52000
IP address blocks:        185.124.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11288 (0x2c18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26472cfdcd392a184f1f051320bba806a204c6cd
        Validity
            Not Before: Feb  7 14:01:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ab79185ce340cb47e602ecf57a66652803debd4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:13:f8:ea:73:98:de:87:78:29:40:85:1f:
                    d6:ab:c3:29:ce:a7:9c:a7:ff:63:80:15:f4:25:06:
                    97:a2:f1:a5:d5:51:c8:bf:10:77:f4:f9:93:fe:de:
                    29:96:03:df:13:9d:70:a3:cc:dd:6a:5b:c0:67:5e:
                    5c:73:33:91:83:89:7a:18:87:0f:fb:fa:ee:c1:d6:
                    e4:a0:90:92:67:f2:f6:88:2a:eb:c6:a4:c1:79:f8:
                    b2:9f:e0:e9:f6:31:ad:85:6c:c0:20:18:fd:ca:cc:
                    08:03:ac:a0:37:6c:eb:18:3f:e9:25:20:29:50:76:
                    b8:44:8b:df:ff:c5:1d:83:ff:64:89:78:39:6f:e5:
                    5a:4b:45:ac:6b:a4:7a:4c:6f:27:26:51:52:bb:76:
                    df:51:d9:50:de:67:be:94:51:0e:20:88:6b:9a:e1:
                    e0:d2:8c:57:94:fa:b4:65:ef:3d:6b:58:01:39:74:
                    3b:97:45:17:72:c6:29:2d:be:47:b4:cf:30:ba:6e:
                    86:b6:64:ed:16:5d:2b:55:d2:ca:c5:99:bb:ec:80:
                    58:3e:88:a3:cd:8c:b6:3f:7b:2e:c1:f8:1c:96:21:
                    f6:43:ba:b9:39:9b:08:08:da:39:d7:f0:70:78:05:
                    e5:77:c1:ec:6b:80:7e:1b:fc:3b:9e:39:a3:15:77:
                    07:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:79:18:5C:E3:40:CB:47:E6:02:EC:F5:7A:66:65:28:03:DE:BD:4A
            X509v3 Authority Key Identifier:
                keyid:26:47:2C:FD:CD:39:2A:18:4F:1F:05:13:20:BB:A8:06:A2:04:C6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jkcs_c05KhhPHwUTILuoBqIExs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/q3kYXONAy0fmAuz1emZlKAPevUo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/Jkcs_c05KhhPHwUTILuoBqIExs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.124.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:59:85:78:dc:d8:85:82:48:b0:83:d5:46:dd:bb:e3:70:d5:
         eb:c5:73:38:e2:f6:ee:7c:95:89:60:96:14:df:ff:db:71:fd:
         b5:47:ec:f6:4f:ce:d2:49:2a:ed:00:49:54:f5:a7:9a:3e:2f:
         19:17:12:70:c0:ef:b8:f2:de:75:fa:22:aa:1c:99:b8:7e:cd:
         17:a0:10:d8:ac:b5:48:cf:2f:ea:21:6c:67:e8:1c:8e:84:aa:
         30:d9:b8:19:77:cb:ee:cb:11:e8:59:3b:0d:b4:33:5b:75:81:
         87:85:d9:86:99:9d:d0:a8:70:cb:1d:db:e4:33:bb:42:e5:45:
         73:cf:23:59:d8:0c:2b:dd:6c:8e:83:b8:b9:f5:c7:e4:ed:3d:
         ad:c1:e2:4d:85:bc:22:92:fe:37:a2:13:a3:dd:76:8f:56:0a:
         b8:12:ec:cb:b2:ca:3c:fb:b3:21:67:22:9a:51:1d:bb:e2:87:
         bd:ad:74:ea:f4:1b:26:75:cb:9d:c1:58:fc:4e:55:3c:74:48:
         71:e9:1f:a3:15:ec:b1:a6:c5:14:dc:30:da:12:cb:e6:bb:21:
         da:84:ed:c3:8f:66:c4:88:d4:7c:13:da:c9:85:4c:c9:3a:b6:
         60:8b:e1:02:3e:33:ca:54:b9:a0:08:af:91:4b:14:28:c8:9f:
         ac:b3:72:78
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICLBgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjY0
NzJjZmRjZDM5MmExODRmMWYwNTEzMjBiYmE4MDZhMjA0YzZjZDAeFw0yMjAyMDcx
NDAxNDhaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGFiNzkxODVjZTM0MGNi
NDdlNjAyZWNmNTdhNjY2NTI4MDNkZWJkNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwTRP46nOY3od4KUCFH9arwynOp5yn/2OAFfQlBpei8aXVUci/
EHf0+ZP+3imWA98TnXCjzN1qW8BnXlxzM5GDiXoYhw/7+u7B1uSgkJJn8vaIKuvG
pMF5+LKf4On2Ma2FbMAgGP3KzAgDrKA3bOsYP+klIClQdrhEi9//xR2D/2SJeDlv
5VpLRaxrpHpMbycmUVK7dt9R2VDeZ76UUQ4giGua4eDSjFeU+rRl7z1rWAE5dDuX
RRdyxiktvke0zzC6boa2ZO0WXStV0srFmbvsgFg+iKPNjLY/ey7B+ByWIfZDurk5
mwgI2jnX8HB4BeV3wexrgH4b/DueOaMVdwehAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQUq3kYXONAy0fmAuz1emZlKAPevUowHwYDVR0jBBgwFoAUJkcs/c05KhhPHwUT
ILuoBqIExs0wDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEF
BQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9K
a2NzX2MwNUtoaFBId1VUSUx1b0JxSUV4czAuY2VyMIGNBggrBgEFBQcBCwSBgDB+
MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxULzk3Lzg2OWVhZS0yYTA3LTRiNjctYTZhYi0wZjQ5MTBiNTUzZDkvMS9x
M2tZWE9OQXkwZm1BdXoxZW1abEtBUGV2VW8ucm9hMIGBBgNVHR8EejB4MHagdKBy
hnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3Lzg2
OWVhZS0yYTA3LTRiNjctYTZhYi0wZjQ5MTBiNTUzZDkvMS9Ka2NzX2MwNUtoaFBI
d1VUSUx1b0JxSUV4czAuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5fEAwDQYJKoZIhvcNAQELBQADggEB
AHpZhXjc2IWCSLCD1Ubdu+Nw1evFczji9u58lYlglhTf/9tx/bVH7PZPztJJKu0A
SVT1p5o+LxkXEnDA77jy3nX6Iqocmbh+zRegENistUjPL+ohbGfoHI6EqjDZuBl3
y+7LEehZOw20M1t1gYeF2YaZndCocMsd2+Qzu0LlRXPPI1nYDCvdbI6DuLn1x+Tt
Pa3B4k2FvCKS/jeiE6Pddo9WCrgS7Muyyjz7syFnIppRHbvih72tdOr0GyZ1y53B
WPxOVTx0SHHpH6MV7LGmxRTcMNoSy+a7IdqE7cOPZsSI1HwT2smFTMk6tmCL4QI+
M8pUuaAIr5FLFCjIn6yzcng=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:55 2024 by rpki-client on console-ams.rpki-client.org