Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5c92ef-141f-4c7f-9556-757c182291fb/1/G58quHYtrB4OOzYXek-kfa-TvMg.roa
File:                     G58quHYtrB4OOzYXek-kfa-TvMg.roa (raw, json)
Hash identifier:          GJeQMFsgJKqtj3/RZSTXfQe194qpYgs0rTOmYM6f7Jo=
Subject key identifier:   1B:9F:2A:B8:76:2D:AC:1E:0E:3B:36:17:7A:4F:A4:7D:AF:93:BC:C8
Certificate issuer:       /CN=72f333aca0649751ffc5c1346428ac21cbcdf501
Certificate serial:       0177A945
Authority key identifier: 72:F3:33:AC:A0:64:97:51:FF:C5:C1:34:64:28:AC:21:CB:CD:F5:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cvMzrKBkl1H_xcE0ZCisIcvN9QE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/5c92ef-141f-4c7f-9556-757c182291fb/1/G58quHYtrB4OOzYXek-kfa-TvMg.roa
Signing time:             Thu 12 May 2022 09:04:04 +0000
ROA not before:           Thu 12 May 2022 09:04:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39855
IP address blocks:        193.108.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24619333 (0x177a945)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72f333aca0649751ffc5c1346428ac21cbcdf501
        Validity
            Not Before: May 12 09:04:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1b9f2ab8762dac1e0e3b36177a4fa47daf93bcc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6f:7b:dc:8d:bc:c1:60:25:5d:32:e1:ef:19:
                    72:cd:5b:83:c6:a0:4e:03:b8:65:c5:c7:ff:30:2b:
                    7a:21:b4:86:b3:10:3f:06:11:49:4c:40:a5:a3:85:
                    4b:c8:01:c6:ea:01:eb:80:62:47:b8:d1:1a:48:b9:
                    1c:23:c1:93:d3:1e:a3:3f:b7:27:59:7e:c6:8d:1a:
                    a3:b1:aa:d8:45:27:a7:2f:e3:fc:08:d5:84:3b:04:
                    82:7a:90:51:1e:6c:0d:59:c6:00:b0:ce:65:e3:eb:
                    c6:05:66:e4:03:1b:bd:39:10:58:c5:ca:5b:79:bd:
                    d9:1a:1f:15:86:6f:cb:5a:f3:f2:eb:7d:b2:16:90:
                    a9:a0:94:97:74:95:c7:c5:3b:04:b7:d9:9c:4e:67:
                    1b:97:fe:31:6d:08:e3:ea:ce:38:c1:7c:9d:4c:a2:
                    5c:7e:e4:ee:4d:37:6b:9a:ea:49:1d:34:1d:b2:4c:
                    ee:72:66:90:d5:46:e8:d5:f0:61:d4:72:0d:04:27:
                    c8:ae:a8:9b:a9:93:06:7e:a1:91:34:bf:a1:50:71:
                    76:34:09:10:dc:7c:13:f6:10:de:e5:90:1f:a5:59:
                    a2:ec:ac:46:f4:6a:11:c7:42:16:41:75:02:4c:3a:
                    34:09:de:9b:dc:91:85:86:fd:33:2e:8b:f6:42:8f:
                    58:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9F:2A:B8:76:2D:AC:1E:0E:3B:36:17:7A:4F:A4:7D:AF:93:BC:C8
            X509v3 Authority Key Identifier:
                keyid:72:F3:33:AC:A0:64:97:51:FF:C5:C1:34:64:28:AC:21:CB:CD:F5:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvMzrKBkl1H_xcE0ZCisIcvN9QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5c92ef-141f-4c7f-9556-757c182291fb/1/G58quHYtrB4OOzYXek-kfa-TvMg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5c92ef-141f-4c7f-9556-757c182291fb/1/cvMzrKBkl1H_xcE0ZCisIcvN9QE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.108.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:6d:d4:8a:ba:d0:c4:2e:77:43:97:cb:e0:c6:e6:cd:6f:79:
         d8:ad:94:1f:5c:83:a9:75:0e:0d:06:81:72:fe:e5:85:83:68:
         49:ef:4d:8f:23:e5:2c:d0:56:c3:86:e7:cf:e0:d9:64:32:24:
         e5:32:55:fd:8e:49:25:c4:8a:64:d1:d2:99:1c:a0:90:e4:be:
         10:01:a8:a7:bc:4a:5b:99:33:e1:97:2b:ea:bf:29:63:78:5f:
         5a:d4:5c:ca:91:24:9e:2a:c5:f5:fb:c4:93:aa:b7:98:65:88:
         73:8f:a6:c3:f3:48:c6:b2:9d:aa:aa:f5:67:98:4b:73:12:1b:
         6e:a7:30:16:b8:e7:3b:58:49:10:5e:e6:71:1b:5f:c7:c0:9a:
         4e:8f:da:bb:c0:a5:8f:7b:e8:35:0c:0d:d4:ef:e1:4e:da:bb:
         34:12:40:73:c2:e0:6b:10:47:c1:05:6c:c1:93:60:b0:58:7a:
         33:4c:f3:a4:24:b5:3b:62:d6:74:55:fc:33:f9:36:03:bf:c8:
         f9:da:3d:64:0b:f5:fb:c2:c7:42:77:16:5d:a5:ff:32:d3:a7:
         02:73:17:62:69:d8:64:54:ac:4c:27:b1:e1:ac:4c:12:db:be:
         36:d1:f8:a6:5b:9a:47:b5:94:c6:97:93:cb:17:c3:93:2f:3c:
         1d:05:b8:6f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAXepRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MmYzMzNhY2EwNjQ5NzUxZmZjNWMxMzQ2NDI4YWMyMWNiY2RmNTAxMB4XDTIyMDUx
MjA5MDQwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWI5ZjJhYjg3NjJk
YWMxZTBlM2IzNjE3N2E0ZmE0N2RhZjkzYmNjODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOFve9yNvMFgJV0y4e8Zcs1bg8agTgO4ZcXH/zAreiG0hrMQ
PwYRSUxApaOFS8gBxuoB64BiR7jRGki5HCPBk9Meoz+3J1l+xo0ao7Gq2EUnpy/j
/AjVhDsEgnqQUR5sDVnGALDOZePrxgVm5AMbvTkQWMXKW3m92RofFYZvy1rz8ut9
shaQqaCUl3SVx8U7BLfZnE5nG5f+MW0I4+rOOMF8nUyiXH7k7k03a5rqSR00HbJM
7nJmkNVG6NXwYdRyDQQnyK6om6mTBn6hkTS/oVBxdjQJENx8E/YQ3uWQH6VZouys
RvRqEcdCFkF1Akw6NAnem9yRhYb9My6L9kKPWKsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQbnyq4di2sHg47Nhd6T6R9r5O8yDAfBgNVHSMEGDAWgBRy8zOsoGSXUf/F
wTRkKKwhy831ATAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2N2TXpyS0JrbDFIX3hjRTBaQ2lzSWN2TjlRRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDEvNWM5MmVmLTE0MWYtNGM3Zi05NTU2LTc1N2MxODIyOTFmYi8x
L0c1OHF1SFl0ckI0T096WVhlay1rZmEtVHZNZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEv
NWM5MmVmLTE0MWYtNGM3Zi05NTU2LTc1N2MxODIyOTFmYi8xL2N2TXpyS0JrbDFI
X3hjRTBaQ2lzSWN2TjlRRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMFsgzANBgkqhkiG9w0BAQsFAAOC
AQEAnG3UirrQxC53Q5fL4MbmzW952K2UH1yDqXUODQaBcv7lhYNoSe9NjyPlLNBW
w4bnz+DZZDIk5TJV/Y5JJcSKZNHSmRygkOS+EAGop7xKW5kz4Zcr6r8pY3hfWtRc
ypEknirF9fvEk6q3mGWIc4+mw/NIxrKdqqr1Z5hLcxIbbqcwFrjnO1hJEF7mcRtf
x8CaTo/au8Clj3voNQwN1O/hTtq7NBJAc8LgaxBHwQVswZNgsFh6M0zzpCS1O2LW
dFX8M/k2A7/I+do9ZAv1+8LHQncWXaX/MtOnAnMXYmnYZFSsTCex4axMEtu+NtH4
pluaR7WUxpeTyxfDky88HQW4bw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:53 2024 by rpki-client on console-fra.rpki-client.org