Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/6qU6lKP0IjN7mshlfyzm7Sc4wn4.roa
File:                     6qU6lKP0IjN7mshlfyzm7Sc4wn4.roa (raw, json)
Hash identifier:          ++jaHchRw7S5+/M/Y4WLIGbo4nVBKjhxyeIRR20j/Ks=
Subject key identifier:   EA:A5:3A:94:A3:F4:22:33:7B:9A:C8:65:7F:2C:E6:ED:27:38:C2:7E
Certificate issuer:       /CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Certificate serial:       0187A7AEC4528086B6C3D3779DB706E48F3E
Authority key identifier: 62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/6qU6lKP0IjN7mshlfyzm7Sc4wn4.roa
Signing time:             Sat 22 Apr 2023 06:37:41 +0000
ROA not before:           Sat 22 Apr 2023 06:37:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204548
IP address blocks:        185.139.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:a7:ae:c4:52:80:86:b6:c3:d3:77:9d:b7:06:e4:8f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
        Validity
            Not Before: Apr 22 06:37:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eaa53a94a3f422337b9ac8657f2ce6ed2738c27e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:15:f5:35:7e:63:f1:0a:db:76:52:6d:49:56:
                    74:4b:ca:e9:06:87:59:76:7f:a3:6d:13:3a:db:f7:
                    68:89:46:87:13:ed:0e:0b:9b:9c:7b:bc:71:d4:fd:
                    ba:3c:e2:a2:da:94:9a:f4:f1:68:62:b5:5d:33:8a:
                    24:17:99:d9:73:d7:9d:04:a6:82:1c:89:52:b7:b8:
                    3f:74:45:17:c3:0c:ff:b1:a6:65:b4:fb:46:ee:ef:
                    e7:ba:a9:b3:f1:76:1f:1e:d5:ba:2b:30:e1:87:2b:
                    0c:cb:f7:5d:36:86:77:83:0e:58:8d:69:9d:7b:52:
                    7b:4f:46:b8:1e:53:26:e3:83:97:72:77:66:35:01:
                    7f:31:65:ad:5d:3b:57:38:5c:eb:93:1d:30:ef:77:
                    fe:47:98:e6:b9:f0:ca:4c:a5:7c:6e:f8:74:3b:95:
                    9b:a5:35:8f:0b:cc:70:63:c3:0d:b5:8e:1c:9c:72:
                    47:2d:c7:4a:fd:d6:58:eb:a0:54:e7:80:56:97:8f:
                    34:a2:39:e5:56:86:6b:48:fd:dd:32:ca:58:35:bc:
                    6c:95:7f:b5:0a:8b:da:16:85:ee:21:fe:15:95:34:
                    53:d3:c9:a2:b0:ac:5a:01:e3:0d:66:a6:ab:af:20:
                    8a:38:c7:7f:ae:fd:4f:0f:c4:70:9b:36:c8:59:a7:
                    11:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A5:3A:94:A3:F4:22:33:7B:9A:C8:65:7F:2C:E6:ED:27:38:C2:7E
            X509v3 Authority Key Identifier:
                keyid:62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/6qU6lKP0IjN7mshlfyzm7Sc4wn4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/YkHuLESs6KczhMJVrXfGwfBFJIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:48:d7:13:e3:c7:b7:bd:3d:e7:ff:08:2f:b8:46:66:50:61:
         e2:bc:a5:86:4f:e4:d3:92:ad:fa:48:59:2f:d7:d8:6f:64:ce:
         1d:ed:13:28:a5:e9:c3:ce:1e:2f:66:35:77:54:e5:22:0b:a7:
         e9:69:78:f1:61:bf:ef:45:86:6a:b8:fa:e2:ba:06:95:0a:ed:
         6a:c6:d3:d1:4a:00:55:3b:38:02:40:57:5d:aa:1c:a4:2b:7b:
         ba:f9:ea:49:33:c2:e6:14:11:49:a6:92:99:de:e8:d5:bf:6b:
         f5:e2:2c:b6:df:b6:61:a5:f0:e2:95:2d:74:32:25:56:37:64:
         62:a8:4f:71:5b:0f:b4:44:7c:f1:4c:e4:a0:2f:87:11:d5:fa:
         ff:64:ca:67:c3:2d:1e:74:ce:f8:62:04:3a:3a:9f:03:7a:83:
         ec:4f:96:83:74:b1:4e:49:96:a1:c3:40:d0:37:40:4f:81:5d:
         db:3c:fb:5b:55:7f:2b:55:1a:62:fa:83:c0:32:f6:fc:d4:33:
         6c:58:a0:1c:2d:e4:32:c4:fc:b4:f4:00:52:81:4c:6f:7f:ba:
         1a:d4:fb:81:45:f7:53:7f:04:85:ee:a0:f9:d3:47:6d:95:7a:
         7a:63:e6:5f:1e:d4:0d:eb:9d:56:a7:9a:53:63:44:9b:63:92:
         dd:d3:4f:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYenrsRSgIa2w9N3nbcG5I8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNDFlZTJjNDRhY2U4YTczMzg0YzI1NWFkNzdjNmMxZjA0
NTI0ODYwHhcNMjMwNDIyMDYzNzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWE1M2E5NGEzZjQyMjMzN2I5YWM4NjU3ZjJjZTZlZDI3MzhjMjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxX1NX5j8QrbdlJtSVZ0S8rpBodZ
dn+jbRM62/doiUaHE+0OC5uce7xx1P26POKi2pSa9PFoYrVdM4okF5nZc9edBKaC
HIlSt7g/dEUXwwz/saZltPtG7u/nuqmz8XYfHtW6KzDhhysMy/ddNoZ3gw5YjWmd
e1J7T0a4HlMm44OXcndmNQF/MWWtXTtXOFzrkx0w73f+R5jmufDKTKV8bvh0O5Wb
pTWPC8xwY8MNtY4cnHJHLcdK/dZY66BU54BWl480ojnlVoZrSP3dMspYNbxslX+1
CovaFoXuIf4VlTRT08misKxaAeMNZqarryCKOMd/rv1PD8RwmzbIWacRMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOqlOpSj9CIze5rIZX8s5u0nOMJ+MB8GA1UdIwQY
MBaAFGJB7ixErOinM4TCVa13xsHwRSSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWtIdUxFU3M2S2N6aE1KVnJYZkd3ZkJGSklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iZWRhM2UtZGRlYi00YzQyLTk5M2Mt
NTE4ZmI4NjM4NzE2LzEvNnFVNmxLUDBJak43bXNobGZ5em03U2M0d240LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9iZWRhM2UtZGRlYi00YzQyLTk5M2MtNTE4ZmI4NjM4NzE2
LzEvWWtIdUxFU3M2S2N6aE1KVnJYZkd3ZkJGSklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYvmMA0G
CSqGSIb3DQEBCwUAA4IBAQAfSNcT48e3vT3n/wgvuEZmUGHivKWGT+TTkq36SFkv
19hvZM4d7RMopenDzh4vZjV3VOUiC6fpaXjxYb/vRYZquPriugaVCu1qxtPRSgBV
OzgCQFddqhykK3u6+epJM8LmFBFJppKZ3ujVv2v14iy237ZhpfDilS10MiVWN2Ri
qE9xWw+0RHzxTOSgL4cR1fr/ZMpnwy0edM74YgQ6Op8DeoPsT5aDdLFOSZahw0DQ
N0BPgV3bPPtbVX8rVRpi+oPAMvb81DNsWKAcLeQyxPy09ABSgUxvf7oa1PuBRfdT
fwSF7qD500dtlXp6Y+ZfHtQN651Wp5pTY0SbY5Ld00+t
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:06 2024 by rpki-client on console-fra.rpki-client.org