Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ec17ff-3368-4830-a55c-63ed8ace7bbd/1/eTGaJGnuhRBQWagtiRS2uAlwrCs.roa
File:                     eTGaJGnuhRBQWagtiRS2uAlwrCs.roa (raw, json)
Hash identifier:          yfphNEamniLtC09FuPRK5YexeHc9f/2Gtg4RqRNiJCM=
Subject key identifier:   79:31:9A:24:69:EE:85:10:50:59:A8:2D:89:14:B6:B8:09:70:AC:2B
Certificate issuer:       /CN=651a242bb12c6770add6a8bd691702ca628955ab
Certificate serial:       01856C414E87F55F9371F9BB328BF3560AF2
Authority key identifier: 65:1A:24:2B:B1:2C:67:70:AD:D6:A8:BD:69:17:02:CA:62:89:55:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRokK7EsZ3Ct1qi9aRcCymKJVas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/ec17ff-3368-4830-a55c-63ed8ace7bbd/1/eTGaJGnuhRBQWagtiRS2uAlwrCs.roa
Signing time:             Sun 01 Jan 2023 07:34:57 +0000
ROA not before:           Sun 01 Jan 2023 07:34:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29119
IP address blocks:        213.217.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:41:4e:87:f5:5f:93:71:f9:bb:32:8b:f3:56:0a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=651a242bb12c6770add6a8bd691702ca628955ab
        Validity
            Not Before: Jan  1 07:34:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=79319a2469ee85105059a82d8914b6b80970ac2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:12:98:9a:5a:7f:6e:74:07:96:70:0c:78:2e:
                    28:32:db:75:4f:83:27:f4:4d:e4:5a:48:af:6d:02:
                    b3:84:ab:c9:f1:f3:64:b4:fe:e6:14:2b:fd:36:2c:
                    f8:9c:19:8a:be:02:5d:c3:64:8b:9b:9a:9a:76:23:
                    87:20:d7:69:55:61:ce:75:31:dd:19:ea:3c:bb:f0:
                    74:0d:73:32:58:22:03:b5:7d:1e:29:9b:f2:d3:a9:
                    00:fd:36:b0:9a:ba:72:b6:7e:4e:cf:05:87:17:99:
                    56:c7:fe:4b:08:00:c1:2d:17:7d:47:0f:72:2b:3f:
                    f9:7b:9b:3d:6a:fe:d8:d3:bc:37:42:fb:7d:1a:f5:
                    4b:ee:bc:85:c5:1c:34:48:11:47:4b:75:c8:50:2e:
                    13:08:c0:3a:c5:08:ee:4e:04:f4:a4:21:f1:ba:34:
                    c1:e5:b2:5c:5d:62:ff:45:ea:d6:04:5e:15:a9:67:
                    1f:63:19:ae:1e:30:b7:f7:fa:1e:4a:79:0d:05:22:
                    f6:09:a0:fc:0d:6a:53:05:8d:c3:af:ae:e0:fe:44:
                    2d:3c:ad:15:5e:20:64:df:5a:f2:e2:c0:05:1c:8b:
                    70:7c:a0:51:19:28:01:0b:5e:53:5a:54:67:15:f9:
                    5e:01:01:21:94:c9:cf:9f:70:5f:da:1d:ba:a3:e3:
                    2d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:31:9A:24:69:EE:85:10:50:59:A8:2D:89:14:B6:B8:09:70:AC:2B
            X509v3 Authority Key Identifier:
                keyid:65:1A:24:2B:B1:2C:67:70:AD:D6:A8:BD:69:17:02:CA:62:89:55:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRokK7EsZ3Ct1qi9aRcCymKJVas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ec17ff-3368-4830-a55c-63ed8ace7bbd/1/eTGaJGnuhRBQWagtiRS2uAlwrCs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ec17ff-3368-4830-a55c-63ed8ace7bbd/1/ZRokK7EsZ3Ct1qi9aRcCymKJVas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.217.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:a1:26:57:9a:b2:70:2a:ef:5c:48:18:57:c4:01:51:f9:8a:
         0e:a6:9d:17:b0:95:9f:31:3d:47:a1:d0:62:fc:0e:7f:15:d8:
         49:43:f4:d6:8b:df:95:99:05:77:d1:31:fc:ad:ae:7c:d7:99:
         04:70:41:1e:5b:40:6e:bf:27:09:98:4b:bd:28:cf:dc:de:c0:
         a7:55:d1:bb:4f:9c:5f:21:c3:7a:e8:77:a7:aa:c1:62:a6:3b:
         90:cd:19:4e:7b:af:0e:eb:48:e6:3f:52:48:90:00:d2:b1:86:
         24:c2:d7:34:17:e2:6b:98:e3:a1:9c:33:ce:f1:ac:54:53:5e:
         4f:b0:df:a3:7c:1a:19:15:5a:1e:bf:93:c8:4c:d1:14:10:6f:
         5c:3a:3c:7c:73:3c:f3:5c:32:0e:73:58:9c:34:48:2c:2e:4f:
         12:af:af:7c:85:41:24:cd:ae:85:80:03:f5:ba:e8:e9:0e:32:
         58:19:9d:b9:ba:d9:d9:fd:24:a3:ca:7f:66:fb:43:7e:9d:aa:
         9b:46:31:ea:0d:f7:b3:ee:c4:13:f6:70:4d:2a:42:71:5c:d3:
         56:10:a3:10:16:2d:ff:5e:16:fc:f3:1c:40:7c:c8:19:bb:cf:
         09:63:7c:e7:ac:f7:85:b9:c6:79:f4:87:fd:8f:e2:56:7b:29:
         c1:49:8c:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsQU6H9V+Tcfm7MovzVgryMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MWEyNDJiYjEyYzY3NzBhZGQ2YThiZDY5MTcwMmNhNjI4
OTU1YWIwHhcNMjMwMTAxMDczNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTMxOWEyNDY5ZWU4NTEwNTA1OWE4MmQ4OTE0YjZiODA5NzBhYzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxKYmlp/bnQHlnAMeC4oMtt1T4Mn
9E3kWkivbQKzhKvJ8fNktP7mFCv9Niz4nBmKvgJdw2SLm5qadiOHINdpVWHOdTHd
Geo8u/B0DXMyWCIDtX0eKZvy06kA/Tawmrpytn5OzwWHF5lWx/5LCADBLRd9Rw9y
Kz/5e5s9av7Y07w3Qvt9GvVL7ryFxRw0SBFHS3XIUC4TCMA6xQjuTgT0pCHxujTB
5bJcXWL/RerWBF4VqWcfYxmuHjC39/oeSnkNBSL2CaD8DWpTBY3Dr67g/kQtPK0V
XiBk31ry4sAFHItwfKBRGSgBC15TWlRnFfleAQEhlMnPn3Bf2h26o+MtxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHkxmiRp7oUQUFmoLYkUtrgJcKwrMB8GA1UdIwQY
MBaAFGUaJCuxLGdwrdaovWkXAspiiVWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlJva0s3RXNaM0N0MXFpOWFSY0N5bUtKVmFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lYzE3ZmYtMzM2OC00ODMwLWE1NWMt
NjNlZDhhY2U3YmJkLzEvZVRHYUpHbnVoUkJRV2FndGlSUzJ1QWx3ckNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9lYzE3ZmYtMzM2OC00ODMwLWE1NWMtNjNlZDhhY2U3YmJk
LzEvWlJva0s3RXNaM0N0MXFpOWFSY0N5bUtKVmFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1dkcMA0G
CSqGSIb3DQEBCwUAA4IBAQCWoSZXmrJwKu9cSBhXxAFR+YoOpp0XsJWfMT1HodBi
/A5/FdhJQ/TWi9+VmQV30TH8ra5815kEcEEeW0BuvycJmEu9KM/c3sCnVdG7T5xf
IcN66HenqsFipjuQzRlOe68O60jmP1JIkADSsYYkwtc0F+JrmOOhnDPO8axUU15P
sN+jfBoZFVoev5PITNEUEG9cOjx8czzzXDIOc1icNEgsLk8Sr698hUEkza6FgAP1
uujpDjJYGZ25utnZ/SSjyn9m+0N+naqbRjHqDfez7sQT9nBNKkJxXNNWEKMQFi3/
Xhb88xxAfMgZu88JY3znrPeFucZ59If9j+JWeynBSYxk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:41 2024 by rpki-client on console-fra.rpki-client.org