Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f097b6-7a7f-4f16-a60e-3699707b8631/1/guy063GTCaOEfgSx7B66tjF-BKQ.roa
File:                     guy063GTCaOEfgSx7B66tjF-BKQ.roa (raw, json)
Hash identifier:          QhemRna8f8dXlE3jJZAYzJK0BYFBr8GH2m8CEfsrMTA=
Subject key identifier:   82:EC:B4:EB:71:93:09:A3:84:7E:04:B1:EC:1E:BA:B6:31:7E:04:A4
Certificate issuer:       /CN=ff32cec606fb6f6fd6ae7be874826c302b695ef3
Certificate serial:       C3A417
Authority key identifier: FF:32:CE:C6:06:FB:6F:6F:D6:AE:7B:E8:74:82:6C:30:2B:69:5E:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_zLOxgb7b2_WrnvodIJsMCtpXvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/f097b6-7a7f-4f16-a60e-3699707b8631/1/guy063GTCaOEfgSx7B66tjF-BKQ.roa
Signing time:             Mon 25 Apr 2022 17:51:55 +0000
ROA not before:           Mon 25 Apr 2022 17:51:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62240
IP address blocks:        185.140.174.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12821527 (0xc3a417)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff32cec606fb6f6fd6ae7be874826c302b695ef3
        Validity
            Not Before: Apr 25 17:51:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=82ecb4eb719309a3847e04b1ec1ebab6317e04a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:72:62:93:7b:c8:d0:71:41:d0:7f:ee:cc:2a:
                    cd:3a:b3:ab:7a:77:f7:31:b7:4f:55:b4:79:2d:c7:
                    d6:01:ea:cf:5b:d6:60:dc:91:d6:3f:85:a1:96:cb:
                    f1:64:6a:bd:4d:03:23:6e:2d:bc:0d:ab:a4:86:e0:
                    5d:7a:04:16:ca:f2:68:54:c9:9c:1a:d6:b9:74:d4:
                    9c:3e:f1:66:7b:8a:86:55:7e:b6:84:b6:e4:38:40:
                    f7:31:e8:7b:6b:36:b8:d0:94:e1:fc:94:17:54:7d:
                    3e:75:8c:9f:f4:47:93:3d:97:9b:f1:c7:bc:0d:84:
                    4a:19:5f:f1:66:aa:68:a5:01:31:63:96:c8:14:bd:
                    bc:a1:c2:a4:29:30:6d:f6:6d:b6:12:14:07:44:20:
                    64:c9:71:46:a8:ef:0c:a2:33:3e:b8:66:ba:46:93:
                    0f:65:38:e7:0e:93:82:76:e9:ef:f4:cb:3b:98:2b:
                    e4:af:14:47:cc:a6:5c:4b:3e:79:f4:8b:41:7c:bc:
                    f8:fc:48:ff:e8:4c:a1:bb:5a:11:7a:17:f6:1a:06:
                    7e:d6:8b:68:24:1d:a4:f1:e3:44:3d:09:13:41:6c:
                    30:2d:06:d1:af:47:83:8f:c7:5d:3a:f2:4c:d9:e3:
                    7b:52:62:52:86:1e:1d:d2:c9:42:cb:ab:c8:db:0c:
                    6e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EC:B4:EB:71:93:09:A3:84:7E:04:B1:EC:1E:BA:B6:31:7E:04:A4
            X509v3 Authority Key Identifier:
                keyid:FF:32:CE:C6:06:FB:6F:6F:D6:AE:7B:E8:74:82:6C:30:2B:69:5E:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLOxgb7b2_WrnvodIJsMCtpXvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f097b6-7a7f-4f16-a60e-3699707b8631/1/guy063GTCaOEfgSx7B66tjF-BKQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f097b6-7a7f-4f16-a60e-3699707b8631/1/_zLOxgb7b2_WrnvodIJsMCtpXvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.140.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:0f:f2:7d:fe:62:40:48:24:ac:01:f7:6b:ac:82:4a:2c:19:
         bc:bb:51:d9:5f:e2:d0:76:81:04:fd:7f:03:97:26:65:57:8c:
         1f:29:c7:a6:c2:2d:48:18:eb:ff:be:d7:6e:db:13:0e:15:d9:
         f3:64:34:87:76:d4:0d:a5:e0:ed:07:50:62:9d:d5:f1:76:01:
         3f:7d:0e:5a:22:ce:87:39:b9:67:3f:1e:06:a4:1d:52:a4:d2:
         84:f4:f8:61:38:c8:b8:46:12:e0:da:9b:de:81:75:80:13:05:
         e2:05:e6:09:d9:67:58:20:a1:4d:88:50:1b:49:40:f2:04:74:
         ab:ee:01:84:29:d4:1e:af:78:63:27:8b:ed:9a:e8:bc:d6:5a:
         bd:01:db:66:f0:ce:3d:20:16:92:be:27:e4:68:33:f3:2d:68:
         36:45:7b:03:5b:5a:10:ca:05:47:af:36:c9:ae:99:45:bf:a8:
         85:4e:5d:2b:3e:29:9e:f1:f4:7d:7f:0a:4d:af:17:2e:40:37:
         bd:f5:01:bd:39:4a:e5:da:bc:3c:36:c7:a6:5f:45:06:d1:ea:
         f2:c2:46:cb:ca:8f:50:a5:9d:d4:2a:c6:74:d5:f8:5e:ef:6c:
         d8:26:ae:0b:ff:08:96:61:07:e2:f8:05:cf:3c:8e:0c:69:99:
         c0:ac:20:cc
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAMOkFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZjMyY2VjNjA2ZmI2ZjZmZDZhZTdiZTg3NDgyNmMzMDJiNjk1ZWYzMB4XDTIyMDQy
NTE3NTE1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODJlY2I0ZWI3MTkz
MDlhMzg0N2UwNGIxZWMxZWJhYjYzMTdlMDRhNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJlyYpN7yNBxQdB/7swqzTqzq3p39zG3T1W0eS3H1gHqz1vW
YNyR1j+FoZbL8WRqvU0DI24tvA2rpIbgXXoEFsryaFTJnBrWuXTUnD7xZnuKhlV+
toS25DhA9zHoe2s2uNCU4fyUF1R9PnWMn/RHkz2Xm/HHvA2EShlf8WaqaKUBMWOW
yBS9vKHCpCkwbfZtthIUB0QgZMlxRqjvDKIzPrhmukaTD2U45w6Tgnbp7/TLO5gr
5K8UR8ymXEs+efSLQXy8+PxI/+hMobtaEXoX9hoGftaLaCQdpPHjRD0JE0FsMC0G
0a9Hg4/HXTryTNnje1JiUoYeHdLJQsuryNsMbmUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSC7LTrcZMJo4R+BLHsHrq2MX4EpDAfBgNVHSMEGDAWgBT/Ms7GBvtvb9au
e+h0gmwwK2le8zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L196TE94Z2I3YjJfV3Judm9kSUpzTUN0cFh2TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWEvZjA5N2I2LTdhN2YtNGYxNi1hNjBlLTM2OTk3MDdiODYzMS8x
L2d1eTA2M0dUQ2FPRWZnU3g3QjY2dGpGLUJLUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEv
ZjA5N2I2LTdhN2YtNGYxNi1hNjBlLTM2OTk3MDdiODYzMS8xL196TE94Z2I3YjJf
V3Judm9kSUpzTUN0cFh2TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmMrjANBgkqhkiG9w0BAQsFAAOC
AQEAOA/yff5iQEgkrAH3a6yCSiwZvLtR2V/i0HaBBP1/A5cmZVeMHynHpsItSBjr
/77XbtsTDhXZ82Q0h3bUDaXg7QdQYp3V8XYBP30OWiLOhzm5Zz8eBqQdUqTShPT4
YTjIuEYS4Nqb3oF1gBMF4gXmCdlnWCChTYhQG0lA8gR0q+4BhCnUHq94YyeL7Zro
vNZavQHbZvDOPSAWkr4n5Ggz8y1oNkV7A1taEMoFR682ya6ZRb+ohU5dKz4pnvH0
fX8KTa8XLkA3vfUBvTlK5dq8PDbHpl9FBtHq8sJGy8qPUKWd1CrGdNX4Xu9s2Cau
C/8IlmEH4vgFzzyODGmZwKwgzA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:32:41 2025 by rpki-client