Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/zTmbEfYYIRrwmTyRmbU1oEiOg40.roa
File:                     zTmbEfYYIRrwmTyRmbU1oEiOg40.roa (raw, json)
Hash identifier:          WlO5+BH3/jZ8/qSY48ZCKD2opYUonesaHqMtR9cORVQ=
Subject key identifier:   CD:39:9B:11:F6:18:21:1A:F0:99:3C:91:99:B5:35:A0:48:8E:83:8D
Certificate issuer:       /CN=5b34df61134c0ab9445a6ccbb3ec63eaf0fa0255
Certificate serial:       059423D5
Authority key identifier: 5B:34:DF:61:13:4C:0A:B9:44:5A:6C:CB:B3:EC:63:EA:F0:FA:02:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WzTfYRNMCrlEWmzLs-xj6vD6AlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/zTmbEfYYIRrwmTyRmbU1oEiOg40.roa
Signing time:             Sat 01 Jan 2022 03:51:22 +0000
ROA not before:           Sat 01 Jan 2022 03:51:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49455
IP address blocks:        82.194.192.0/19 maxlen: 19
                          188.113.64.0/18 maxlen: 18
                          109.108.192.0/19 maxlen: 19
                          46.249.224.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93594581 (0x59423d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b34df61134c0ab9445a6ccbb3ec63eaf0fa0255
        Validity
            Not Before: Jan  1 03:51:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cd399b11f618211af0993c9199b535a0488e838d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f2:a2:86:49:58:e8:1d:54:57:bb:b8:db:ca:
                    f7:91:83:ae:92:88:7b:f2:7d:a7:61:b0:e7:6c:01:
                    90:0b:08:87:2e:ec:49:15:22:c5:82:57:c8:af:00:
                    22:98:7f:28:2f:73:ab:e5:d1:2f:b7:b4:d5:41:8b:
                    b6:45:9d:c6:05:d5:be:1a:1a:30:0b:ab:f9:fb:b3:
                    aa:b7:ee:e3:be:a2:da:38:5b:e0:ec:33:cd:4f:b8:
                    cd:3e:41:67:94:97:11:de:3d:a6:c3:c3:d5:af:ef:
                    ad:a7:30:74:f9:95:d1:d4:9a:08:f7:28:b7:ee:b4:
                    f6:a3:54:8a:f6:2b:89:7b:05:14:fd:6d:7a:4a:99:
                    74:b3:1c:60:89:62:3d:ab:7c:8a:7e:93:f6:a4:be:
                    e7:fa:19:03:f6:9c:ad:f2:45:6a:e9:28:d5:c5:da:
                    02:08:05:ae:66:54:9a:71:7f:17:80:70:b6:fe:60:
                    dc:22:cf:5e:8c:62:48:33:25:18:e7:eb:e9:a6:5d:
                    3a:f9:ed:d7:29:4f:49:2e:dc:e8:ea:55:7c:75:d2:
                    1c:04:6c:62:49:c5:c7:30:27:26:7a:3d:73:68:b5:
                    11:22:16:7c:fa:d9:c7:26:63:a9:ee:02:d2:6e:2d:
                    30:64:dd:88:6d:a2:16:da:b3:3c:de:28:7d:c6:3b:
                    66:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:39:9B:11:F6:18:21:1A:F0:99:3C:91:99:B5:35:A0:48:8E:83:8D
            X509v3 Authority Key Identifier:
                keyid:5B:34:DF:61:13:4C:0A:B9:44:5A:6C:CB:B3:EC:63:EA:F0:FA:02:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzTfYRNMCrlEWmzLs-xj6vD6AlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/zTmbEfYYIRrwmTyRmbU1oEiOg40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/192617-961b-4300-b142-b239f50f0029/1/WzTfYRNMCrlEWmzLs-xj6vD6AlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.249.224.0/19
                  82.194.192.0/19
                  109.108.192.0/19
                  188.113.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6f:80:6e:87:8f:93:7c:9f:43:4c:47:28:1f:0f:dd:f5:aa:76:
         72:15:73:3b:f0:72:a5:95:39:69:f6:88:1b:72:f3:d6:a6:b4:
         d8:2f:1f:1b:0c:45:22:08:e2:62:aa:97:52:81:9c:48:18:8c:
         97:f2:85:91:05:b6:0a:8b:fc:23:98:53:17:88:40:75:b3:c7:
         76:2f:c1:bb:15:43:a9:0a:d4:f6:18:32:6e:7b:27:0f:6d:48:
         1b:59:83:1d:fe:55:c6:93:c9:d5:24:12:5b:a7:bf:43:2b:a7:
         e5:29:74:30:07:82:f6:95:b2:f9:15:02:27:a1:e6:f4:35:66:
         03:a9:c7:48:cb:8d:19:b0:1e:aa:ec:c1:76:b9:f9:54:3b:34:
         30:f5:80:65:19:61:49:cb:7f:ca:e6:5b:2e:5b:af:b7:2b:05:
         d0:31:19:97:c0:08:b5:6e:0b:aa:2a:2e:e3:34:de:db:0c:1c:
         b4:a9:46:e0:08:56:c3:d6:a6:5b:3b:91:a2:27:92:a5:e7:54:
         5c:79:d1:fa:b7:d0:f1:51:10:33:27:6d:c8:69:23:7e:04:d7:
         fc:34:c2:81:be:b3:d3:24:f6:85:d7:47:42:66:05:4a:b9:b6:
         42:0a:e9:80:68:ba:95:42:34:31:12:28:bb:bb:a3:ef:5a:e8:
         ad:21:6e:1d
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEBZQj1TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YjM0ZGY2MTEzNGMwYWI5NDQ1YTZjY2JiM2VjNjNlYWYwZmEwMjU1MB4XDTIyMDEw
MTAzNTEyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2QzOTliMTFmNjE4
MjExYWYwOTkzYzkxOTliNTM1YTA0ODhlODM4ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKfyooZJWOgdVFe7uNvK95GDrpKIe/J9p2Gw52wBkAsIhy7s
SRUixYJXyK8AIph/KC9zq+XRL7e01UGLtkWdxgXVvhoaMAur+fuzqrfu476i2jhb
4OwzzU+4zT5BZ5SXEd49psPD1a/vracwdPmV0dSaCPcot+609qNUivYriXsFFP1t
ekqZdLMcYIliPat8in6T9qS+5/oZA/acrfJFauko1cXaAggFrmZUmnF/F4Bwtv5g
3CLPXoxiSDMlGOfr6aZdOvnt1ylPSS7c6OpVfHXSHARsYknFxzAnJno9c2i1ESIW
fPrZxyZjqe4C0m4tMGTdiG2iFtqzPN4ofcY7ZkMCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBTNOZsR9hghGvCZPJGZtTWgSI6DjTAfBgNVHSMEGDAWgBRbNN9hE0wKuURa
bMuz7GPq8PoCVTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1d6VGZZUk5NQ3JsRVdtekxzLXhqNnZENkFsVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmQvMTkyNjE3LTk2MWItNDMwMC1iMTQyLWIyMzlmNTBmMDAyOS8x
L3pUbWJFZllZSVJyd21UeVJtYlUxb0VpT2c0MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQv
MTkyNjE3LTk2MWItNDMwMC1iMTQyLWIyMzlmNTBmMDAyOS8xL1d6VGZZUk5NQ3Js
RVdtekxzLXhqNnZENkFsVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEBS754AMEBVLCwAMEBW1swAMEBrxx
QDANBgkqhkiG9w0BAQsFAAOCAQEAb4Buh4+TfJ9DTEcoHw/d9ap2chVzO/BypZU5
afaIG3Lz1qa02C8fGwxFIgjiYqqXUoGcSBiMl/KFkQW2Cov8I5hTF4hAdbPHdi/B
uxVDqQrU9hgybnsnD21IG1mDHf5VxpPJ1SQSW6e/Qyun5Sl0MAeC9pWy+RUCJ6Hm
9DVmA6nHSMuNGbAequzBdrn5VDs0MPWAZRlhSct/yuZbLluvtysF0DEZl8AItW4L
qiou4zTe2wwctKlG4AhWw9amWzuRoieSpedUXHnR+rfQ8VEQMydtyGkjfgTX/DTC
gb6z0yT2hddHQmYFSrm2QgrpgGi6lUI0MRIou7uj71rorSFuHQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:20 2024 by rpki-client on console-ams.rpki-client.org