Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d9b714-3482-4e90-9fd9-97f725eb80c5/1/RTy7ivpbYKnzZ6eVMFCXuoEZSpU.roa
File:                     RTy7ivpbYKnzZ6eVMFCXuoEZSpU.roa (raw, json)
Hash identifier:          2GiZAWaBwyKdJ7IpREKG/Hyb5VP7aWc0dnSq61uhQtY=
Subject key identifier:   45:3C:BB:8A:FA:5B:60:A9:F3:67:A7:95:30:50:97:BA:81:19:4A:95
Certificate issuer:       /CN=51c963a5cfe956b2281a34fb7c63784cf384049f
Certificate serial:       06704334
Authority key identifier: 51:C9:63:A5:CF:E9:56:B2:28:1A:34:FB:7C:63:78:4C:F3:84:04:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ucljpc_pVrIoGjT7fGN4TPOEBJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/d9b714-3482-4e90-9fd9-97f725eb80c5/1/RTy7ivpbYKnzZ6eVMFCXuoEZSpU.roa
Signing time:             Sat 01 Jan 2022 10:56:28 +0000
ROA not before:           Sat 01 Jan 2022 10:56:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43377
IP address blocks:        185.1.176.0/24 maxlen: 24
                          2001:7f8:f9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108020532 (0x6704334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51c963a5cfe956b2281a34fb7c63784cf384049f
        Validity
            Not Before: Jan  1 10:56:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=453cbb8afa5b60a9f367a795305097ba81194a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ba:ed:92:4d:5e:06:89:39:d5:04:13:b7:cb:
                    87:00:a0:a9:de:41:9d:5c:6a:23:39:45:54:55:af:
                    6b:fd:06:9e:b7:86:57:e6:8a:78:6c:43:d0:13:f5:
                    ab:7c:b3:cc:99:0d:75:b8:e0:8f:96:3b:4b:6d:ba:
                    0f:b7:9f:47:6c:c4:b4:02:ce:a2:f5:3a:56:5e:02:
                    37:70:1d:58:e2:15:47:59:6f:c0:cd:fa:b1:4e:c0:
                    9c:7e:b9:a9:a6:da:96:db:d5:ef:db:4c:3e:d1:b4:
                    8a:cc:e3:ce:74:c4:42:29:54:8a:0a:c2:55:4d:3c:
                    89:8b:3b:eb:f0:13:e3:9b:50:e1:28:9a:01:1e:f1:
                    7e:0c:d9:54:ac:cc:f8:24:92:14:4c:00:d9:35:d7:
                    98:12:74:03:bb:f3:c1:dc:2b:51:dc:c5:2a:92:9c:
                    97:8c:33:a4:7c:d7:59:30:72:0e:ab:4e:20:91:87:
                    fe:c7:a4:d9:61:cc:fa:71:9c:3f:92:0f:8d:08:02:
                    f4:d6:29:00:a8:1b:65:86:32:be:73:d2:f3:3e:66:
                    89:5c:1a:03:57:a4:69:d8:67:14:b4:48:de:da:d6:
                    8c:6a:b0:2d:be:33:22:3b:68:8c:f0:e1:2c:bf:60:
                    7c:ba:03:dd:6f:b6:8d:00:3e:a1:69:97:1d:a1:1e:
                    cd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3C:BB:8A:FA:5B:60:A9:F3:67:A7:95:30:50:97:BA:81:19:4A:95
            X509v3 Authority Key Identifier:
                keyid:51:C9:63:A5:CF:E9:56:B2:28:1A:34:FB:7C:63:78:4C:F3:84:04:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ucljpc_pVrIoGjT7fGN4TPOEBJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d9b714-3482-4e90-9fd9-97f725eb80c5/1/RTy7ivpbYKnzZ6eVMFCXuoEZSpU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d9b714-3482-4e90-9fd9-97f725eb80c5/1/Ucljpc_pVrIoGjT7fGN4TPOEBJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.176.0/24
                IPv6:
                  2001:7f8:f9::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:52:c6:b9:2e:67:87:02:12:42:40:d3:cf:8d:80:f0:fc:d3:
         ee:64:8e:74:7d:e8:47:6d:77:21:59:0d:cd:0a:c7:0f:4c:c4:
         9b:59:9e:ef:1e:7e:1e:97:f0:65:b0:37:0e:48:54:7f:2a:e5:
         79:67:f2:14:b5:f8:4b:bb:7f:0d:cb:8e:28:1e:97:ae:45:d8:
         27:8d:fb:06:11:28:e8:1c:e3:d7:8d:9f:59:2f:a9:a1:39:36:
         df:1f:a9:fe:83:62:6c:f4:85:bd:eb:d4:71:fe:b1:04:2e:a6:
         0a:08:fb:e4:17:81:2f:8d:ce:37:c5:6f:4b:cc:6a:59:de:27:
         3a:0a:fc:d2:a3:0b:0a:f7:3d:23:d5:c7:25:f2:ef:a8:07:f6:
         cd:55:86:99:b7:ac:9d:05:ab:cd:0b:ed:39:da:d3:2c:a9:b6:
         6c:2b:8a:ae:bc:6b:0b:ae:93:15:a7:0b:29:30:1d:55:97:96:
         a3:bd:37:ab:9b:39:83:f1:7e:49:d3:94:f2:46:64:24:91:9e:
         07:b9:43:f5:85:8b:7c:a5:9c:0b:75:a7:b2:cc:f0:cf:ed:ec:
         e3:18:22:08:8c:75:c3:27:06:8e:f3:e0:a7:6f:ce:65:83:ab:
         70:e2:8a:51:09:28:98:27:97:c1:98:b6:fb:23:e1:21:0a:c6:
         c4:5a:d3:0f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBnBDNDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MWM5NjNhNWNmZTk1NmIyMjgxYTM0ZmI3YzYzNzg0Y2YzODQwNDlmMB4XDTIyMDEw
MTEwNTYyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDUzY2JiOGFmYTVi
NjBhOWYzNjdhNzk1MzA1MDk3YmE4MTE5NGE5NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL+67ZJNXgaJOdUEE7fLhwCgqd5BnVxqIzlFVFWva/0GnreG
V+aKeGxD0BP1q3yzzJkNdbjgj5Y7S226D7efR2zEtALOovU6Vl4CN3AdWOIVR1lv
wM36sU7AnH65qabaltvV79tMPtG0iszjznTEQilUigrCVU08iYs76/AT45tQ4Sia
AR7xfgzZVKzM+CSSFEwA2TXXmBJ0A7vzwdwrUdzFKpKcl4wzpHzXWTByDqtOIJGH
/sek2WHM+nGcP5IPjQgC9NYpAKgbZYYyvnPS8z5miVwaA1ekadhnFLRI3trWjGqw
Lb4zIjtojPDhLL9gfLoD3W+2jQA+oWmXHaEezScCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRFPLuK+ltgqfNnp5UwUJe6gRlKlTAfBgNVHSMEGDAWgBRRyWOlz+lWsiga
NPt8Y3hM84QEnzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VjbGpwY19wVnJJb0dqVDdmR040VFBPRUJKOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjcvZDliNzE0LTM0ODItNGU5MC05ZmQ5LTk3ZjcyNWViODBjNS8x
L1JUeTdpdnBiWUtuelo2ZVZNRkNYdW9FWlNwVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcv
ZDliNzE0LTM0ODItNGU5MC05ZmQ5LTk3ZjcyNWViODBjNS8xL1VjbGpwY19wVnJJ
b0dqVDdmR040VFBPRUJKOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEALkBsDAPBAIAAjAJAwcAIAEH+AD5
MA0GCSqGSIb3DQEBCwUAA4IBAQBaUsa5LmeHAhJCQNPPjYDw/NPuZI50fehHbXch
WQ3NCscPTMSbWZ7vHn4el/BlsDcOSFR/KuV5Z/IUtfhLu38Ny44oHpeuRdgnjfsG
ESjoHOPXjZ9ZL6mhOTbfH6n+g2Js9IW969Rx/rEELqYKCPvkF4Evjc43xW9LzGpZ
3ic6CvzSowsK9z0j1ccl8u+oB/bNVYaZt6ydBavNC+052tMsqbZsK4quvGsLrpMV
pwspMB1Vl5ajvTermzmD8X5J05TyRmQkkZ4HuUP1hYt8pZwLdaeyzPDP7ezjGCII
jHXDJwaO8+Cnb85lg6tw4opRCSiYJ5fBmLb7I+EhCsbEWtMP
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:13 2024 by rpki-client on console-ams.rpki-client.org