Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/1-OTjV6_onWGGx4n-YOqvZbWOREg.roa
File:                     1-OTjV6_onWGGx4n-YOqvZbWOREg.roa (raw, json)
Hash identifier:          k4BybeQbRxfFDyndBNcfkNTlvAD6Tc83bi4IhBeAZdM=
Subject key identifier:   F8:E4:E3:57:AF:E8:9D:61:86:C7:89:FE:60:EA:AF:65:B5:8E:44:48
Certificate issuer:       /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial:       03BA6589
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/1-OTjV6_onWGGx4n-YOqvZbWOREg.roa
Signing time:             Sat 01 Jan 2022 03:01:25 +0000
ROA not before:           Sat 01 Jan 2022 03:01:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42088
IP address blocks:        185.212.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62547337 (0x3ba6589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
        Validity
            Not Before: Jan  1 03:01:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f8e4e357afe89d6186c789fe60eaaf65b58e4448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3a:64:0e:b0:ec:bf:53:05:61:c5:97:7d:d0:
                    ab:66:ae:06:e6:e6:a9:67:82:16:26:eb:cb:4d:0b:
                    f0:06:c3:66:d4:0a:5c:ca:cc:89:99:1b:44:36:2b:
                    10:d3:87:b8:0c:78:b0:87:f7:73:b3:ca:64:f2:4c:
                    51:e6:3b:0d:f5:51:49:eb:3e:e9:52:0c:79:1a:a0:
                    5b:a4:80:87:5d:0e:9b:34:ca:56:ca:5b:ab:ae:61:
                    0b:4a:ba:7b:ee:0f:a0:58:c0:8e:bf:f9:4f:82:5a:
                    cd:ba:0d:d6:8c:e0:18:d8:3a:97:f0:12:9a:a4:1b:
                    ff:7d:41:ed:d7:53:d7:f2:6a:f7:bd:51:8d:b2:a9:
                    07:a5:ec:ec:9b:3b:25:b5:9b:c6:3e:45:b9:48:ae:
                    b7:c0:86:58:b6:72:43:dd:96:d2:29:23:4a:6d:a9:
                    aa:27:f1:fa:49:66:c5:9f:64:ed:2b:6b:51:5c:b8:
                    c0:a9:2c:4c:49:ca:39:b3:37:c4:e1:f6:cc:df:9b:
                    a8:c6:8d:8f:a7:34:db:d4:ca:c7:aa:66:1f:fa:e5:
                    94:d2:92:a4:78:fc:b8:b3:04:1e:01:09:86:ab:c1:
                    55:30:32:2a:3d:29:ef:80:2e:25:8d:8d:f4:11:28:
                    af:d9:61:8c:fa:d4:01:8c:c3:0d:22:78:4f:2a:ec:
                    ec:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E4:E3:57:AF:E8:9D:61:86:C7:89:FE:60:EA:AF:65:B5:8E:44:48
            X509v3 Authority Key Identifier:
                keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/1-OTjV6_onWGGx4n-YOqvZbWOREg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:56:19:33:97:b9:22:65:10:55:72:eb:91:86:2d:42:be:cd:
         ae:bd:ba:89:84:11:7a:1b:7c:06:ba:1b:79:a1:99:58:42:e3:
         fb:ac:8f:61:74:6f:c7:e0:3d:18:a1:e9:be:96:b7:c2:46:8b:
         79:4d:5c:a4:04:0f:d9:e6:34:b1:df:69:c1:c0:1c:25:71:d7:
         ad:af:60:56:a4:9a:d6:78:af:0d:5b:c4:4e:6f:83:b4:c6:5c:
         9b:61:09:a3:d9:97:06:ab:40:89:18:b6:23:24:f7:4f:d3:ee:
         c0:6a:69:6b:ce:ae:89:76:39:b0:b6:f2:d5:d8:9b:6d:ef:f3:
         0e:54:3e:a2:64:e9:b1:64:0c:d2:33:f4:ec:65:48:d6:c9:2e:
         3d:1a:f0:a1:12:68:70:21:ca:5b:8a:cc:f8:31:4c:f6:82:22:
         48:f5:f8:3c:d9:f6:e3:6b:84:78:2e:2c:3d:59:3f:40:eb:39:
         5f:3d:d6:4d:8c:85:d2:1b:3c:f4:41:73:5a:c7:8f:d0:c4:1f:
         6a:8b:26:d3:1d:df:71:88:f2:1d:fb:0e:b0:35:92:e8:df:3d:
         d3:42:71:f2:b6:45:a5:06:85:76:1c:aa:b2:65:bc:c8:74:81:
         05:c6:4c:6c:6e:80:93:ce:f1:67:5a:f3:ff:de:ca:a1:82:0b:
         2f:e1:5a:22
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEA7pliTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
M2RmZWVhOWM3ZGUyNDZlNmQ3ZDFhNTA3NDA2Mjg1YjIyNmY5Mjg2MB4XDTIyMDEw
MTAzMDEyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjhlNGUzNTdhZmU4
OWQ2MTg2Yzc4OWZlNjBlYWFmNjViNThlNDQ0ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM46ZA6w7L9TBWHFl33Qq2auBubmqWeCFibry00L8AbDZtQK
XMrMiZkbRDYrENOHuAx4sIf3c7PKZPJMUeY7DfVRSes+6VIMeRqgW6SAh10OmzTK
Vspbq65hC0q6e+4PoFjAjr/5T4JazboN1ozgGNg6l/ASmqQb/31B7ddT1/Jq971R
jbKpB6Xs7Js7JbWbxj5FuUiut8CGWLZyQ92W0ikjSm2pqifx+klmxZ9k7StrUVy4
wKksTEnKObM3xOH2zN+bqMaNj6c029TKx6pmH/rllNKSpHj8uLMEHgEJhqvBVTAy
Kj0p74AuJY2N9BEor9lhjPrUAYzDDSJ4Tyrs7DkCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT45ONXr+idYYbHif5g6q9ltY5ESDAfBgNVHSMEGDAWgBRz3+6px94kbm19
GlB0BihbIm+ShjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2M5X3VxY2ZlSkc1dGZScFFkQVlvV3lKdmtvWS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDEvOWMwYTdlLTk5NjMtNGMwZC05NGFjLTQ0NmQwYTdlOTQwNC8x
LzEtT1RqVjZfb25XR0d4NG4tWU9xdlpiV09SRWcucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Qx
LzljMGE3ZS05OTYzLTRjMGQtOTRhYy00NDZkMGE3ZTk0MDQvMS9jOV91cWNmZUpH
NXRmUnBRZEFZb1d5SnZrb1kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC51PkwDQYJKoZIhvcNAQELBQAD
ggEBAC1WGTOXuSJlEFVy65GGLUK+za69uomEEXobfAa6G3mhmVhC4/usj2F0b8fg
PRih6b6Wt8JGi3lNXKQED9nmNLHfacHAHCVx162vYFakmtZ4rw1bxE5vg7TGXJth
CaPZlwarQIkYtiMk90/T7sBqaWvOrol2ObC28tXYm23v8w5UPqJk6bFkDNIz9Oxl
SNbJLj0a8KESaHAhyluKzPgxTPaCIkj1+DzZ9uNrhHguLD1ZP0DrOV891k2MhdIb
PPRBc1rHj9DEH2qLJtMd33GI8h37DrA1kujfPdNCcfK2RaUGhXYcqrJlvMh0gQXG
TGxugJPO8Wda8//eyqGCCy/hWiI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:55 2024 by rpki-client on console-fra.rpki-client.org