Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/yboXKYQsBCah8thxJXHvU47PGuI.roa
File:                     yboXKYQsBCah8thxJXHvU47PGuI.roa (raw, json)
Hash identifier:          0LMrzdjlOR1Dmf02PoMT0WBdeMpcbtSbtZYjk/U/DgI=
Subject key identifier:   C9:BA:17:29:84:2C:04:26:A1:F2:D8:71:25:71:EF:53:8E:CF:1A:E2
Certificate issuer:       /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial:       094C283A
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/yboXKYQsBCah8thxJXHvU47PGuI.roa
Signing time:             Fri 15 Apr 2022 15:23:00 +0000
ROA not before:           Fri 15 Apr 2022 15:23:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     174
IP address blocks:        83.97.119.0/24 maxlen: 24
                          89.19.34.0/24 maxlen: 24
                          83.97.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155985978 (0x94c283a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
        Validity
            Not Before: Apr 15 15:23:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c9ba1729842c0426a1f2d8712571ef538ecf1ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3f:47:20:e3:15:a3:f5:7b:74:78:42:64:94:
                    d8:11:77:a3:de:31:9e:24:3a:37:e2:63:fd:0c:4b:
                    51:c5:f2:ea:ab:88:6a:69:cf:44:51:e6:b0:37:4d:
                    e0:a5:23:46:42:7b:c2:17:9c:ff:27:85:cc:7d:72:
                    84:4b:e5:b4:59:fb:8f:12:72:6c:30:7a:91:f1:69:
                    9b:3a:e4:3d:ec:21:b9:c9:0c:3a:2e:15:4c:77:3f:
                    bf:14:d4:6d:43:a9:09:a2:ad:1d:6a:5f:4a:7b:ab:
                    04:ff:1c:2c:39:c2:a4:5d:d5:96:85:25:0d:a1:94:
                    a3:2b:22:13:74:b9:96:12:b5:a6:5d:e6:85:ab:49:
                    c1:fd:b5:43:6d:77:8f:85:5a:b5:fe:fb:21:c6:19:
                    83:ca:6a:32:bf:5f:47:40:36:a1:61:12:16:47:34:
                    40:55:26:e3:db:6c:ef:ea:90:42:be:8e:76:21:c1:
                    60:f9:67:dd:c3:ea:37:14:3d:67:61:4d:b9:df:18:
                    12:e2:11:d8:ab:d1:87:91:3c:86:e5:3f:1e:f4:b9:
                    30:65:7d:87:7f:32:ae:31:89:04:dd:c8:4c:5d:b3:
                    0e:0f:01:fe:87:82:be:c9:47:ee:44:b8:6c:79:94:
                    22:b1:c8:83:75:0f:1e:6f:12:05:f5:11:bc:e1:b1:
                    22:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BA:17:29:84:2C:04:26:A1:F2:D8:71:25:71:EF:53:8E:CF:1A:E2
            X509v3 Authority Key Identifier:
                keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/yboXKYQsBCah8thxJXHvU47PGuI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.97.117.0/24
                  83.97.119.0/24
                  89.19.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:7e:0c:d8:f7:0e:1a:15:1c:db:b5:5b:46:f2:b3:51:44:b1:
         65:44:98:a3:47:f3:af:a1:04:6f:b3:2c:db:c1:4f:58:12:52:
         d8:00:de:90:4a:3d:bc:2a:da:ad:61:e4:6e:fb:54:83:b6:5e:
         2b:7b:df:57:6b:50:0a:da:0a:6c:37:0e:19:19:7d:01:62:a1:
         f3:6b:05:8a:c1:91:92:61:8e:f9:06:57:66:d9:f6:8a:bd:2e:
         09:4a:d8:7f:49:f6:71:76:f7:48:86:0d:1d:5b:e4:22:b6:a2:
         cd:70:15:ae:21:0a:0e:61:d1:68:0d:42:96:e4:f0:73:1f:48:
         d0:b2:3b:e9:16:0a:c7:f9:23:62:15:69:82:8c:6a:ac:d8:73:
         6c:ba:64:8c:b6:25:38:cb:69:97:7a:81:bc:b2:f4:d2:aa:d8:
         63:a9:a3:42:cc:3d:f4:e2:31:b4:db:e3:22:28:34:78:05:60:
         37:a5:c8:a0:b4:85:cf:03:95:8c:5c:08:12:74:d4:a5:a5:07:
         43:67:a4:01:4b:ee:d3:eb:f2:4e:42:68:b3:ea:e3:f3:cd:27:
         2e:91:56:02:1e:1f:03:1e:38:fb:e2:72:db:3e:c3:3a:cf:52:
         0b:13:5e:34:b1:db:8d:a8:d3:6e:1b:21:ab:29:66:69:04:90:
         4d:c9:96:ac
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIECUwoOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjdkMmM5YWQzNmQ5Zjg4MWZhODFmZDQ3NTM4N2ZiODcwYjViNGZiMB4XDTIyMDQx
NTE1MjMwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzliYTE3Mjk4NDJj
MDQyNmExZjJkODcxMjU3MWVmNTM4ZWNmMWFlMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOM/RyDjFaP1e3R4QmSU2BF3o94xniQ6N+Jj/QxLUcXy6quI
amnPRFHmsDdN4KUjRkJ7whec/yeFzH1yhEvltFn7jxJybDB6kfFpmzrkPewhuckM
Oi4VTHc/vxTUbUOpCaKtHWpfSnurBP8cLDnCpF3VloUlDaGUoysiE3S5lhK1pl3m
hatJwf21Q213j4Vatf77IcYZg8pqMr9fR0A2oWESFkc0QFUm49ts7+qQQr6OdiHB
YPln3cPqNxQ9Z2FNud8YEuIR2KvRh5E8huU/HvS5MGV9h38yrjGJBN3ITF2zDg8B
/oeCvslH7kS4bHmUIrHIg3UPHm8SBfURvOGxIrcCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTJuhcphCwEJqHy2HElce9Tjs8a4jAfBgNVHSMEGDAWgBRLfSya022fiB+o
H9R1OH+4cLW0+zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1MzMHNtdE50bjRnZnFCX1VkVGhfdUhDMXRQcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2QvOTMwODgyLTQ0YjQtNDJlMy05MjRmLWY3MWM0M2RhYTU5Yi8x
L3lib1hLWVFzQkNhaDh0aHhKWEh2VTQ3UEd1SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Qv
OTMwODgyLTQ0YjQtNDJlMy05MjRmLWY3MWM0M2RhYTU5Yi8xL1MzMHNtdE50bjRn
ZnFCX1VkVGhfdUhDMXRQcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFNhdQMEAFNhdwMEAFkTIjANBgkq
hkiG9w0BAQsFAAOCAQEAe34M2PcOGhUc27VbRvKzUUSxZUSYo0fzr6EEb7Ms28FP
WBJS2ADekEo9vCrarWHkbvtUg7ZeK3vfV2tQCtoKbDcOGRl9AWKh82sFisGRkmGO
+QZXZtn2ir0uCUrYf0n2cXb3SIYNHVvkIraizXAVriEKDmHRaA1CluTwcx9I0LI7
6RYKx/kjYhVpgoxqrNhzbLpkjLYlOMtpl3qBvLL00qrYY6mjQsw99OIxtNvjIig0
eAVgN6XIoLSFzwOVjFwIEnTUpaUHQ2ekAUvu0+vyTkJos+rj880nLpFWAh4fAx44
++Jy2z7DOs9SCxNeNLHbjajTbhshqylmaQSQTcmWrA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org