Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/18e9c2-bd1f-43a2-8660-384c541a59e1/1/SE5v2vbwusIFADM57puG6Mm6V9M.roa
File:                     SE5v2vbwusIFADM57puG6Mm6V9M.roa (raw, json)
Hash identifier:          QNDFFNzLz17WdY7ybl+6gBuqyPZ2Hegkau/gcnSNI1w=
Subject key identifier:   48:4E:6F:DA:F6:F0:BA:C2:05:00:33:39:EE:9B:86:E8:C9:BA:57:D3
Certificate issuer:       /CN=175e203932401abb457968db37075a17c68f09f6
Certificate serial:       02925FC6
Authority key identifier: 17:5E:20:39:32:40:1A:BB:45:79:68:DB:37:07:5A:17:C6:8F:09:F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F14gOTJAGrtFeWjbNwdaF8aPCfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/18e9c2-bd1f-43a2-8660-384c541a59e1/1/SE5v2vbwusIFADM57puG6Mm6V9M.roa
Signing time:             Sat 01 Jan 2022 10:55:10 +0000
ROA not before:           Sat 01 Jan 2022 10:55:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206592
IP address blocks:        176.105.152.0/22 maxlen: 22
                          185.82.56.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43147206 (0x2925fc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175e203932401abb457968db37075a17c68f09f6
        Validity
            Not Before: Jan  1 10:55:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=484e6fdaf6f0bac205003339ee9b86e8c9ba57d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f5:b3:14:1b:9d:92:4e:80:c3:bd:12:96:33:
                    0e:b1:6c:34:57:d3:86:2a:43:16:89:07:fe:ec:92:
                    91:c2:8c:9c:f6:e3:29:ea:6b:61:a3:94:39:97:52:
                    79:38:cf:ad:9b:b5:31:79:bf:8d:e9:38:de:d3:b7:
                    d5:25:5e:95:1f:47:31:bf:fb:86:1a:45:fc:08:9d:
                    fc:60:c5:dc:e1:b4:98:15:9e:f2:7e:60:85:d6:ad:
                    73:15:5f:31:9e:ad:5e:57:02:ab:01:04:71:ce:db:
                    0c:e0:d2:b4:7e:0f:77:52:e0:41:48:07:de:a3:b8:
                    4b:27:04:d5:2c:e3:8d:b3:58:3c:d8:11:bf:15:8c:
                    2d:4b:c3:ca:27:c7:fc:18:7c:cb:44:8c:5d:ce:f7:
                    3a:f3:c0:4a:fd:50:ab:33:25:40:4d:d3:fc:01:9d:
                    cd:14:b3:63:3f:55:ec:6d:b1:9d:ce:11:84:0a:8b:
                    c0:ef:4c:a3:a2:72:b7:fa:44:56:a6:f2:3b:d5:67:
                    f5:19:ed:26:e8:4e:65:f1:ba:a2:02:1c:f2:d9:b1:
                    2c:fe:e7:ff:85:eb:28:9b:d7:b2:af:91:3e:76:f9:
                    87:31:fb:30:68:7b:02:d7:c7:fb:49:89:67:b9:99:
                    b2:e4:a8:fa:c8:1b:1e:48:e1:56:0d:bf:7b:f1:29:
                    0a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4E:6F:DA:F6:F0:BA:C2:05:00:33:39:EE:9B:86:E8:C9:BA:57:D3
            X509v3 Authority Key Identifier:
                keyid:17:5E:20:39:32:40:1A:BB:45:79:68:DB:37:07:5A:17:C6:8F:09:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F14gOTJAGrtFeWjbNwdaF8aPCfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/18e9c2-bd1f-43a2-8660-384c541a59e1/1/SE5v2vbwusIFADM57puG6Mm6V9M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/18e9c2-bd1f-43a2-8660-384c541a59e1/1/F14gOTJAGrtFeWjbNwdaF8aPCfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.152.0/22
                  185.82.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:b4:f3:02:7c:72:02:ac:32:f9:20:01:93:cb:b3:90:12:28:
         3f:2a:d2:af:e0:4c:a7:59:39:37:23:a4:ae:f7:77:d6:a6:a2:
         32:e9:bd:8c:6d:c9:6e:9a:0f:b7:56:6a:8d:e3:88:4b:87:a9:
         07:e8:88:b4:ea:d7:17:e7:f0:34:ab:67:8a:50:78:dc:bb:68:
         bf:99:85:19:bb:87:99:6d:87:ae:3f:ff:7a:e3:e2:45:49:e6:
         d5:b9:a3:3c:e3:0f:f0:2f:5d:c7:40:0b:13:27:55:cc:73:6f:
         1c:09:4b:1b:e5:b2:83:08:d5:f2:6a:50:21:2e:2b:39:ad:16:
         13:50:92:e4:a2:dd:68:6f:ed:a5:31:6b:9c:19:92:64:43:ea:
         93:81:4e:34:d1:15:02:5a:6a:24:d1:96:05:0b:86:ab:1f:11:
         2d:2d:e4:ec:39:85:48:29:31:1c:42:4b:de:09:fc:9b:9a:63:
         f0:f6:c9:63:9c:f4:26:1f:f5:9f:70:9b:51:6f:71:04:59:0c:
         6c:fd:ee:04:b2:6f:fb:26:78:ab:d5:50:65:77:29:d6:16:24:
         7c:07:ff:0b:ee:54:82:d9:e8:78:58:03:87:e3:4e:9b:66:4a:
         c4:80:63:d3:cd:8f:ba:b3:a9:22:70:48:90:b9:7f:e8:24:d8:
         3d:fc:ef:7a
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEApJfxjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
NzVlMjAzOTMyNDAxYWJiNDU3OTY4ZGIzNzA3NWExN2M2OGYwOWY2MB4XDTIyMDEw
MTEwNTUxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDg0ZTZmZGFmNmYw
YmFjMjA1MDAzMzM5ZWU5Yjg2ZThjOWJhNTdkMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMP1sxQbnZJOgMO9EpYzDrFsNFfThipDFokH/uySkcKMnPbj
KeprYaOUOZdSeTjPrZu1MXm/jek43tO31SVelR9HMb/7hhpF/Aid/GDF3OG0mBWe
8n5ghdatcxVfMZ6tXlcCqwEEcc7bDODStH4Pd1LgQUgH3qO4SycE1SzjjbNYPNgR
vxWMLUvDyifH/Bh8y0SMXc73OvPASv1QqzMlQE3T/AGdzRSzYz9V7G2xnc4RhAqL
wO9Mo6Jyt/pEVqbyO9Vn9RntJuhOZfG6ogIc8tmxLP7n/4XrKJvXsq+RPnb5hzH7
MGh7AtfH+0mJZ7mZsuSo+sgbHkjhVg2/e/EpChkCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRITm/a9vC6wgUAMznum4boybpX0zAfBgNVHSMEGDAWgBQXXiA5MkAau0V5
aNs3B1oXxo8J9jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0YxNGdPVEpBR3J0RmVXamJOd2RhRjhhUENmWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzQvMThlOWMyLWJkMWYtNDNhMi04NjYwLTM4NGM1NDFhNTllMS8x
L1NFNXYydmJ3dXNJRkFETTU3cHVHNk1tNlY5TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQv
MThlOWMyLWJkMWYtNDNhMi04NjYwLTM4NGM1NDFhNTllMS8xL0YxNGdPVEpBR3J0
RmVXamJOd2RhRjhhUENmWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEArBpmAMEArlSODANBgkqhkiG9w0B
AQsFAAOCAQEAE7TzAnxyAqwy+SABk8uzkBIoPyrSr+BMp1k5NyOkrvd31qaiMum9
jG3JbpoPt1ZqjeOIS4epB+iItOrXF+fwNKtnilB43Ltov5mFGbuHmW2Hrj//euPi
RUnm1bmjPOMP8C9dx0ALEydVzHNvHAlLG+WygwjV8mpQIS4rOa0WE1CS5KLdaG/t
pTFrnBmSZEPqk4FONNEVAlpqJNGWBQuGqx8RLS3k7DmFSCkxHEJL3gn8m5pj8PbJ
Y5z0Jh/1n3CbUW9xBFkMbP3uBLJv+yZ4q9VQZXcp1hYkfAf/C+5UgtnoeFgDh+NO
m2ZKxIBj082PurOpInBIkLl/6CTYPfzveg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:52 2024 by rpki-client on console-ams.rpki-client.org