Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/951c4a-b053-4b73-986e-141faeeca25b/1/q_SilLDcr3AklFc2zeeBouelwzk.roa
File:                     q_SilLDcr3AklFc2zeeBouelwzk.roa (raw, json)
Hash identifier:          sgyRnqH44pG2IZjuVaVW/KXQIl2KZ586FprTpQj4CU0=
Subject key identifier:   AB:F4:A2:94:B0:DC:AF:70:24:94:57:36:CD:E7:81:A2:E7:A5:C3:39
Certificate issuer:       /CN=63c088eadc52cc6d35a7fb765182080a7446f76a
Certificate serial:       018CC64B0775EF2B522116876F0E1DA485D1
Authority key identifier: 63:C0:88:EA:DC:52:CC:6D:35:A7:FB:76:51:82:08:0A:74:46:F7:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y8CI6txSzG01p_t2UYIICnRG92o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/951c4a-b053-4b73-986e-141faeeca25b/1/q_SilLDcr3AklFc2zeeBouelwzk.roa
Signing time:             Mon 01 Jan 2024 18:30:54 +0000
ROA not before:           Mon 01 Jan 2024 18:30:54 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     39855
IP address blocks:        185.198.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4b:07:75:ef:2b:52:21:16:87:6f:0e:1d:a4:85:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63c088eadc52cc6d35a7fb765182080a7446f76a
        Validity
            Not Before: Jan  1 18:30:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=abf4a294b0dcaf7024945736cde781a2e7a5c339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6c:2c:e0:92:5f:79:70:c1:cc:a5:5a:6f:00:
                    d9:9c:7d:99:86:ee:d5:43:f2:8a:3b:71:2f:be:3c:
                    f6:f7:a1:b8:e2:3a:dc:59:10:f5:ad:9e:d3:17:04:
                    c1:8f:62:ef:82:25:ff:1e:95:a5:07:7d:0b:96:41:
                    8d:a5:b4:fd:3d:44:12:67:45:d6:89:71:ae:4b:1a:
                    e6:62:7d:6f:83:71:42:df:60:22:ed:ee:4d:1d:51:
                    cf:55:16:58:0d:10:13:ef:b6:55:ad:55:8d:30:cd:
                    0f:8d:46:6f:17:51:fe:c2:cd:0d:a4:a3:a0:c5:e5:
                    66:d4:a6:33:90:c6:29:4f:ba:6a:9b:ff:b2:63:16:
                    be:9c:0e:f1:fe:6f:b1:e5:df:b7:a0:d5:ed:16:65:
                    ae:c7:78:64:9a:d7:26:93:bd:4c:93:d4:42:d4:82:
                    b8:93:33:75:f8:30:41:77:6f:c8:0c:f7:9d:1b:12:
                    e4:52:56:42:67:a3:61:70:25:68:a0:b7:08:87:1c:
                    ea:4d:74:ba:00:0e:e3:53:29:89:81:2e:21:d4:49:
                    d6:a8:54:6f:c4:35:7e:0c:a7:9a:b9:b3:1c:e4:f2:
                    b1:f0:32:c5:af:69:a6:91:f0:ac:ec:bf:f3:13:d2:
                    73:0c:d3:32:42:64:2b:b4:ab:26:b3:01:2c:cc:9a:
                    78:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F4:A2:94:B0:DC:AF:70:24:94:57:36:CD:E7:81:A2:E7:A5:C3:39
            X509v3 Authority Key Identifier:
                keyid:63:C0:88:EA:DC:52:CC:6D:35:A7:FB:76:51:82:08:0A:74:46:F7:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8CI6txSzG01p_t2UYIICnRG92o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/951c4a-b053-4b73-986e-141faeeca25b/1/q_SilLDcr3AklFc2zeeBouelwzk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/951c4a-b053-4b73-986e-141faeeca25b/1/Y8CI6txSzG01p_t2UYIICnRG92o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.198.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:82:2c:a4:1e:30:63:0a:5a:4b:59:03:c5:43:59:a7:eb:78:
         3e:b8:d7:49:e0:d5:ea:ee:cc:69:70:e0:24:56:1a:aa:10:7d:
         50:db:62:c9:f2:54:0f:5b:90:24:f7:2d:4c:65:8e:85:47:43:
         a5:b9:87:48:95:a7:64:48:b2:c0:03:62:fd:a0:62:82:70:67:
         4c:4d:e3:00:b6:b1:f0:4f:87:44:67:5b:ce:ae:ae:37:60:70:
         fa:90:ee:d0:78:17:ef:6f:4c:48:be:95:92:0b:16:20:3b:95:
         d7:45:bc:28:b2:e8:18:43:35:0b:ae:db:cb:9d:c6:7d:d9:94:
         13:f2:7c:79:76:18:96:c7:bd:53:f2:d5:75:5c:e8:e6:d7:0d:
         c4:f2:d7:f9:8a:45:63:04:06:a0:84:0c:7c:13:46:ad:13:f4:
         cf:e6:4f:ff:00:57:11:fa:84:f1:82:0c:42:e7:0b:21:f1:2e:
         02:d5:c3:62:c5:c1:7d:96:57:13:e2:dc:62:e0:15:49:95:eb:
         cd:69:da:9f:92:ba:59:9f:1c:b0:5b:4a:c5:1e:d8:4c:00:1f:
         1d:f5:44:90:80:c5:1c:1d:f9:0f:2f:27:fd:a3:e0:7a:a9:e7:
         00:a1:1c:52:27:68:31:5f:b5:c0:9c:e0:2e:21:46:11:53:c9:
         22:00:a7:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSwd17ytSIRaHbw4dpIXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYzA4OGVhZGM1MmNjNmQzNWE3ZmI3NjUxODIwODBhNzQ0
NmY3NmEwHhcNMjQwMTAxMTgzMDU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmY0YTI5NGIwZGNhZjcwMjQ5NDU3MzZjZGU3ODFhMmU3YTVjMzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2ws4JJfeXDBzKVabwDZnH2Zhu7V
Q/KKO3Evvjz296G44jrcWRD1rZ7TFwTBj2LvgiX/HpWlB30LlkGNpbT9PUQSZ0XW
iXGuSxrmYn1vg3FC32Ai7e5NHVHPVRZYDRAT77ZVrVWNMM0PjUZvF1H+ws0NpKOg
xeVm1KYzkMYpT7pqm/+yYxa+nA7x/m+x5d+3oNXtFmWux3hkmtcmk71Mk9RC1IK4
kzN1+DBBd2/IDPedGxLkUlZCZ6NhcCVooLcIhxzqTXS6AA7jUymJgS4h1EnWqFRv
xDV+DKeaubMc5PKx8DLFr2mmkfCs7L/zE9JzDNMyQmQrtKsmswEszJp4eQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKv0opSw3K9wJJRXNs3ngaLnpcM5MB8GA1UdIwQY
MBaAFGPAiOrcUsxtNaf7dlGCCAp0RvdqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWThDSTZ0eFN6RzAxcF90MlVZSUlDblJHOTJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85NTFjNGEtYjA1My00YjczLTk4NmUt
MTQxZmFlZWNhMjViLzEvcV9TaWxMRGNyM0FrbEZjMnplZUJvdWVsd3prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi85NTFjNGEtYjA1My00YjczLTk4NmUtMTQxZmFlZWNhMjVi
LzEvWThDSTZ0eFN6RzAxcF90MlVZSUlDblJHOTJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucabMA0G
CSqGSIb3DQEBCwUAA4IBAQCOgiykHjBjClpLWQPFQ1mn63g+uNdJ4NXq7sxpcOAk
VhqqEH1Q22LJ8lQPW5Ak9y1MZY6FR0OluYdIladkSLLAA2L9oGKCcGdMTeMAtrHw
T4dEZ1vOrq43YHD6kO7QeBfvb0xIvpWSCxYgO5XXRbwosugYQzULrtvLncZ92ZQT
8nx5dhiWx71T8tV1XOjm1w3E8tf5ikVjBAaghAx8E0atE/TP5k//AFcR+oTxggxC
5wsh8S4C1cNixcF9llcT4txi4BVJlevNadqfkrpZnxywW0rFHthMAB8d9USQgMUc
HfkPLyf9o+B6qecAoRxSJ2gxX7XAnOAuIUYRU8kiAKc2
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:46 2024 by rpki-client on console-ams.rpki-client.org