Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/0eUy8cp6TRvmPhxnk7ISpoBOJyM.roa
File:                     0eUy8cp6TRvmPhxnk7ISpoBOJyM.roa (raw, json)
Hash identifier:          FYFYRylysASr62gUj773ZcUcPstDfDmITye0h2zA5Ck=
Subject key identifier:   D1:E5:32:F1:CA:7A:4D:1B:E6:3E:1C:67:93:B2:12:A6:80:4E:27:23
Certificate issuer:       /CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Certificate serial:       02FA9310
Authority key identifier: 42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/0eUy8cp6TRvmPhxnk7ISpoBOJyM.roa
Signing time:             Sat 01 Jan 2022 04:57:54 +0000
ROA not before:           Sat 01 Jan 2022 04:57:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47602
IP address blocks:        185.216.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49976080 (0x2fa9310)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f48f7fae012916a775d5e3b6fa231098343ea0
        Validity
            Not Before: Jan  1 04:57:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d1e532f1ca7a4d1be63e1c6793b212a6804e2723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:45:a4:ea:53:ab:33:68:ec:fe:d1:f5:74:28:
                    3c:6a:64:21:4a:e6:33:10:9b:ca:ef:1c:c4:28:da:
                    80:0c:9a:25:18:18:ac:71:b1:2f:19:e3:10:7a:e4:
                    dc:c7:0c:b1:43:85:f7:2e:cd:a8:d9:95:5e:1a:2c:
                    1e:ef:cf:8a:83:96:9c:aa:cc:80:27:83:99:b6:37:
                    84:a1:18:16:dd:f3:d1:97:66:be:86:7d:05:f3:98:
                    a8:d8:4a:15:4d:c2:8e:57:4a:e2:c0:fe:5b:10:12:
                    51:3f:62:76:94:60:82:57:1d:a1:23:22:62:9a:13:
                    e5:4d:0d:4c:fb:ae:4e:66:5c:20:e1:04:23:86:19:
                    94:bf:12:41:4b:ce:30:9d:7b:14:4a:eb:a6:3e:07:
                    fe:4c:95:06:a8:59:ad:e6:70:e7:5a:82:ec:f7:be:
                    30:b2:f2:6f:16:3f:fd:ec:9d:65:c0:1e:15:02:15:
                    e0:70:20:2b:79:5a:c7:4e:11:4b:44:25:62:1e:93:
                    a4:8d:d2:0e:31:eb:26:1f:e1:d6:40:c8:f3:6c:1f:
                    ad:33:7a:b4:9e:54:83:37:73:09:c5:8d:34:00:e0:
                    07:ae:9b:78:22:79:42:b3:a2:81:db:ca:67:a4:c8:
                    e9:4b:6f:c3:3d:ac:84:12:d3:b1:fe:19:d3:30:c2:
                    41:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E5:32:F1:CA:7A:4D:1B:E6:3E:1C:67:93:B2:12:A6:80:4E:27:23
            X509v3 Authority Key Identifier:
                keyid:42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/0eUy8cp6TRvmPhxnk7ISpoBOJyM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:2d:b4:84:a0:7c:b1:4c:b6:fb:d8:0c:95:24:0e:cc:7f:87:
         3d:4f:5a:2b:a6:c2:58:6a:d2:2a:18:ad:6e:5f:d3:8b:44:b8:
         1e:bc:31:2d:b2:5d:66:04:d0:3a:1d:b2:9d:16:c2:d7:fc:7b:
         fc:2c:e6:cc:ec:27:24:b5:e1:33:d0:bd:b1:b5:33:03:1e:84:
         e1:7e:6d:81:8f:e2:a9:d4:90:ae:55:52:56:f9:24:2f:b4:d9:
         47:7a:2f:75:99:47:65:22:02:66:ac:c0:1d:ac:cc:8d:45:64:
         1e:d9:38:15:c5:ab:29:04:32:95:02:16:ab:1b:8c:fd:47:16:
         52:a7:d2:8e:e7:52:7c:fc:a0:da:4a:65:86:9a:08:38:90:0d:
         c5:95:2a:6e:a8:23:15:10:37:26:9f:3b:57:15:4c:ef:c1:04:
         00:29:c5:50:11:16:5a:56:9f:ee:06:b9:93:a6:fa:8f:a3:a6:
         36:c7:92:5e:f4:d7:ee:ec:36:9d:5c:3a:a1:79:6f:36:29:1f:
         c3:e0:ad:38:e6:dc:ec:17:e0:fd:e3:f1:5a:cd:f6:7e:98:9f:
         44:ac:cd:65:a5:24:9e:9b:ee:8a:a5:a4:1b:5f:67:66:02:f5:
         69:ac:32:b6:82:fd:bd:1e:44:93:0b:bf:1a:38:0e:5a:ce:3e:
         5c:70:61:df
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAvqTEDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MmY0OGY3ZmFlMDEyOTE2YTc3NWQ1ZTNiNmZhMjMxMDk4MzQzZWEwMB4XDTIyMDEw
MTA0NTc1NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDFlNTMyZjFjYTdh
NGQxYmU2M2UxYzY3OTNiMjEyYTY4MDRlMjcyMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMdFpOpTqzNo7P7R9XQoPGpkIUrmMxCbyu8cxCjagAyaJRgY
rHGxLxnjEHrk3McMsUOF9y7NqNmVXhosHu/PioOWnKrMgCeDmbY3hKEYFt3z0Zdm
voZ9BfOYqNhKFU3CjldK4sD+WxASUT9idpRgglcdoSMiYpoT5U0NTPuuTmZcIOEE
I4YZlL8SQUvOMJ17FErrpj4H/kyVBqhZreZw51qC7Pe+MLLybxY//eydZcAeFQIV
4HAgK3lax04RS0QlYh6TpI3SDjHrJh/h1kDI82wfrTN6tJ5UgzdzCcWNNADgB66b
eCJ5QrOigdvKZ6TI6Utvwz2shBLTsf4Z0zDCQSkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTR5TLxynpNG+Y+HGeTshKmgE4nIzAfBgNVHSMEGDAWgBRC9I9/rgEpFqd1
1eO2+iMQmDQ+oDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1F2U1BmNjRCS1JhbmRkWGp0dm9qRUpnMFBxQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWYvNDk0NDU1LTFkMmUtNGUyYi04ZjBlLTlhMGNmY2U4NzhhNC8x
LzBlVXk4Y3A2VFJ2bVBoeG5rN0lTcG9CT0p5TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYv
NDk0NDU1LTFkMmUtNGUyYi04ZjBlLTlhMGNmY2U4NzhhNC8xL1F2U1BmNjRCS1Jh
bmRkWGp0dm9qRUpnMFBxQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnYvjANBgkqhkiG9w0BAQsFAAOC
AQEAPy20hKB8sUy2+9gMlSQOzH+HPU9aK6bCWGrSKhitbl/Ti0S4HrwxLbJdZgTQ
Oh2ynRbC1/x7/CzmzOwnJLXhM9C9sbUzAx6E4X5tgY/iqdSQrlVSVvkkL7TZR3ov
dZlHZSICZqzAHazMjUVkHtk4FcWrKQQylQIWqxuM/UcWUqfSjudSfPyg2kplhpoI
OJANxZUqbqgjFRA3Jp87VxVM78EEACnFUBEWWlaf7ga5k6b6j6OmNseSXvTX7uw2
nVw6oXlvNikfw+CtOObc7Bfg/ePxWs32fpifRKzNZaUknpvuiqWkG19nZgL1aawy
toL9vR5Ekwu/GjgOWs4+XHBh3w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-fra.rpki-client.org