Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/224547-4b0b-4e92-9f93-838f8a76fb97/1/ClVIFS0XQY977Kho0k6TaG5vGvk.roa
File:                     ClVIFS0XQY977Kho0k6TaG5vGvk.roa (raw, json)
Hash identifier:          W7PyNw2ahffy+Yv4qkGZBU4gZpM/gDXXo38QXur4Ckw=
Subject key identifier:   0A:55:48:15:2D:17:41:8F:7B:EC:A8:68:D2:4E:93:68:6E:6F:1A:F9
Certificate issuer:       /CN=dfeab3ed7a5ff6efd1dcde2e069162777ff8f135
Certificate serial:       018964753E5EA0287128660FA340F65FB3ED
Authority key identifier: DF:EA:B3:ED:7A:5F:F6:EF:D1:DC:DE:2E:06:91:62:77:7F:F8:F1:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-qz7Xpf9u_R3N4uBpFid3_48TU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/224547-4b0b-4e92-9f93-838f8a76fb97/1/ClVIFS0XQY977Kho0k6TaG5vGvk.roa
Signing time:             Mon 17 Jul 2023 15:25:52 +0000
ROA not before:           Mon 17 Jul 2023 15:25:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49505
IP address blocks:        193.107.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:75:3e:5e:a0:28:71:28:66:0f:a3:40:f6:5f:b3:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfeab3ed7a5ff6efd1dcde2e069162777ff8f135
        Validity
            Not Before: Jul 17 15:25:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0a5548152d17418f7beca868d24e93686e6f1af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:55:e1:db:e6:23:09:6e:71:c0:70:33:30:15:
                    a3:6c:27:2a:f4:19:a5:cc:4c:ab:a6:9f:bf:c8:6a:
                    c8:39:8e:3f:55:d4:b8:9e:db:41:6e:a8:1e:97:5f:
                    c9:2b:e5:1b:5c:de:91:49:d8:fe:3e:91:ad:91:7f:
                    88:b2:a6:6a:e2:98:97:e4:58:0e:7f:8a:e5:3f:ad:
                    e4:e7:eb:68:f7:bc:78:77:2e:5d:01:11:9f:3c:3e:
                    31:23:40:96:84:d2:ab:6b:f7:b6:70:dc:61:6e:4a:
                    72:cd:6e:71:a4:4a:07:ca:15:b8:ea:03:7e:ff:0d:
                    35:60:28:7c:c7:55:78:02:d7:e3:45:34:fe:d2:12:
                    3d:db:ec:b3:81:89:df:43:e1:6c:2c:60:6c:fc:09:
                    d1:df:d8:a5:87:14:c6:b2:a5:67:76:21:31:2e:4f:
                    25:8a:8c:46:bc:8a:bf:c3:bf:bd:f8:49:eb:73:5d:
                    f4:65:39:98:da:db:94:70:4a:04:ed:5b:b4:32:01:
                    de:a4:c2:f5:ec:39:92:f1:53:dc:79:57:8f:9b:1e:
                    d5:68:52:e5:57:51:e8:f7:71:18:f5:b7:d5:6e:9d:
                    00:73:5a:4e:0a:85:f6:35:e2:a7:66:1d:e5:a0:b6:
                    98:1f:40:76:2d:f8:54:cc:7c:50:9a:66:aa:97:de:
                    cf:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:55:48:15:2D:17:41:8F:7B:EC:A8:68:D2:4E:93:68:6E:6F:1A:F9
            X509v3 Authority Key Identifier:
                keyid:DF:EA:B3:ED:7A:5F:F6:EF:D1:DC:DE:2E:06:91:62:77:7F:F8:F1:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-qz7Xpf9u_R3N4uBpFid3_48TU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/224547-4b0b-4e92-9f93-838f8a76fb97/1/ClVIFS0XQY977Kho0k6TaG5vGvk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/224547-4b0b-4e92-9f93-838f8a76fb97/1/3-qz7Xpf9u_R3N4uBpFid3_48TU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.107.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:a7:e2:73:37:f2:ea:68:6c:1f:8e:18:83:d5:ab:df:a7:a7:
         b2:bd:3f:7d:2c:43:91:f9:f7:43:52:e5:c1:ff:fa:08:49:40:
         6f:cb:22:59:5b:1f:6d:50:da:06:15:d2:16:b0:ab:99:62:77:
         63:16:ca:0f:24:58:82:b1:51:28:35:28:84:9c:1e:31:9f:47:
         de:f5:1a:95:85:e0:16:0a:a6:a3:62:cd:64:03:1d:56:11:5d:
         61:7e:2b:fd:87:dc:ec:5a:31:b3:61:01:df:b5:eb:b3:26:79:
         ed:7e:8e:2e:32:50:9f:00:6b:b3:b9:63:a9:d4:95:5f:c6:10:
         4e:9b:41:0f:36:3e:de:5d:2a:5e:c2:bb:b4:3e:01:f5:27:fc:
         c4:ed:c9:cb:52:81:b1:f3:7c:66:0f:ce:68:e6:6b:b4:b5:4a:
         64:f2:67:b5:88:42:25:33:79:13:a6:ea:56:82:5a:b6:96:e5:
         8b:01:c6:41:8b:04:1f:b9:5c:04:83:af:43:2e:e5:a9:3b:81:
         5d:15:da:d0:98:a7:f6:f6:2e:be:d9:2f:b5:6c:ca:2c:b1:a0:
         6d:f3:50:cf:54:e8:2e:24:d2:27:ad:af:75:38:94:f5:b5:6a:
         1c:be:60:19:e1:0b:a4:89:86:34:b8:28:ae:45:28:4a:90:06:
         e8:b1:f3:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkdT5eoChxKGYPo0D2X7PtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZWFiM2VkN2E1ZmY2ZWZkMWRjZGUyZTA2OTE2Mjc3N2Zm
OGYxMzUwHhcNMjMwNzE3MTUyNTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTU1NDgxNTJkMTc0MThmN2JlY2E4NjhkMjRlOTM2ODZlNmYxYWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklXh2+YjCW5xwHAzMBWjbCcq9Bml
zEyrpp+/yGrIOY4/VdS4nttBbqgel1/JK+UbXN6RSdj+PpGtkX+IsqZq4piX5FgO
f4rlP63k5+to97x4dy5dARGfPD4xI0CWhNKra/e2cNxhbkpyzW5xpEoHyhW46gN+
/w01YCh8x1V4AtfjRTT+0hI92+yzgYnfQ+FsLGBs/AnR39ilhxTGsqVndiExLk8l
ioxGvIq/w7+9+Enrc130ZTmY2tuUcEoE7Vu0MgHepML17DmS8VPceVePmx7VaFLl
V1Ho93EY9bfVbp0Ac1pOCoX2NeKnZh3loLaYH0B2LfhUzHxQmmaql97PaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFApVSBUtF0GPe+yoaNJOk2hubxr5MB8GA1UdIwQY
MBaAFN/qs+16X/bv0dzeLgaRYnd/+PE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMy1xejdYcGY5dV9SM040dUJwRmlkM180OFRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMjQ1NDctNGIwYi00ZTkyLTlmOTMt
ODM4ZjhhNzZmYjk3LzEvQ2xWSUZTMFhRWTk3N0tobzBrNlRhRzV2R3ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yMjQ1NDctNGIwYi00ZTkyLTlmOTMtODM4ZjhhNzZmYjk3
LzEvMy1xejdYcGY5dV9SM040dUJwRmlkM180OFRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWsWMA0G
CSqGSIb3DQEBCwUAA4IBAQADp+JzN/LqaGwfjhiD1avfp6eyvT99LEOR+fdDUuXB
//oISUBvyyJZWx9tUNoGFdIWsKuZYndjFsoPJFiCsVEoNSiEnB4xn0fe9RqVheAW
CqajYs1kAx1WEV1hfiv9h9zsWjGzYQHfteuzJnntfo4uMlCfAGuzuWOp1JVfxhBO
m0EPNj7eXSpewru0PgH1J/zE7cnLUoGx83xmD85o5mu0tUpk8me1iEIlM3kTpupW
glq2luWLAcZBiwQfuVwEg69DLuWpO4FdFdrQmKf29i6+2S+1bMossaBt81DPVOgu
JNInra91OJT1tWocvmAZ4QukiYY0uCiuRShKkAbosfM8
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:01 2024 by rpki-client on console-ams.rpki-client.org