Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/tSsIK9ai1Dlk_zi9KKetUHnjCdo.roa
File:                     tSsIK9ai1Dlk_zi9KKetUHnjCdo.roa (raw, json)
Hash identifier:          SZXfxNnc5u8c5FcxB95ql2HJtbWOISdUIXTwwesAXls=
Subject key identifier:   B5:2B:08:2B:D6:A2:D4:39:64:FF:38:BD:28:A7:AD:50:79:E3:09:DA
Certificate issuer:       /CN=b6c2ff3b50735803865d56d52adb45cea4d69f96
Certificate serial:       01827E4B56CE238F7EC2747C3DEAD4547674
Authority key identifier: B6:C2:FF:3B:50:73:58:03:86:5D:56:D5:2A:DB:45:CE:A4:D6:9F:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tsL_O1BzWAOGXVbVKttFzqTWn5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/tSsIK9ai1Dlk_zi9KKetUHnjCdo.roa
Signing time:             Mon 08 Aug 2022 16:30:42 +0000
ROA not before:           Mon 08 Aug 2022 16:30:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     996
IP address blocks:        146.19.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:7e:4b:56:ce:23:8f:7e:c2:74:7c:3d:ea:d4:54:76:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6c2ff3b50735803865d56d52adb45cea4d69f96
        Validity
            Not Before: Aug  8 16:30:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b52b082bd6a2d43964ff38bd28a7ad5079e309da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:47:dd:9c:ff:77:fe:2c:ed:92:8f:70:c1:c1:
                    4f:c0:5c:27:c5:4c:de:79:eb:c6:cf:bd:d6:19:78:
                    f3:51:d3:b2:e6:a2:a1:0a:8b:7e:2d:09:6e:4e:7d:
                    d3:e3:ae:b6:2b:56:aa:16:ed:03:b8:87:86:99:6b:
                    77:76:34:7e:82:32:c4:89:18:ce:34:74:2d:d6:69:
                    d5:cd:93:77:97:41:94:4b:fe:aa:94:20:53:e3:a3:
                    f0:4a:ef:5f:9b:7c:16:c3:dd:ac:6b:1b:aa:82:ad:
                    e9:2c:03:b8:80:34:ca:32:96:51:3f:38:0c:40:40:
                    60:f6:eb:02:c8:34:60:8f:a7:18:5c:5f:45:ef:8b:
                    34:e8:67:4f:01:92:b7:d6:1d:f1:b3:4f:ae:1f:dd:
                    cc:d4:21:1d:a0:e9:4d:d0:5c:f1:20:0f:e9:d3:54:
                    cd:33:85:4e:e1:02:92:28:31:aa:d9:58:96:af:a1:
                    4f:13:05:fe:65:3d:dd:0b:b9:30:d5:d4:e2:0a:d5:
                    4b:1c:83:c4:cf:b0:cc:2f:da:23:c3:f6:78:8f:67:
                    dc:99:f6:a9:84:84:7c:14:3f:3a:07:f0:43:fe:a5:
                    2e:d2:5e:42:42:cd:d1:1a:5e:a3:4b:dc:86:a8:49:
                    af:6a:45:ef:cc:a9:d8:a6:4f:79:03:23:1f:ca:3a:
                    a7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2B:08:2B:D6:A2:D4:39:64:FF:38:BD:28:A7:AD:50:79:E3:09:DA
            X509v3 Authority Key Identifier:
                keyid:B6:C2:FF:3B:50:73:58:03:86:5D:56:D5:2A:DB:45:CE:A4:D6:9F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsL_O1BzWAOGXVbVKttFzqTWn5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/tSsIK9ai1Dlk_zi9KKetUHnjCdo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/tsL_O1BzWAOGXVbVKttFzqTWn5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:87:04:bc:10:76:46:d6:08:b4:e4:27:03:a5:49:e2:4a:71:
         07:be:ae:09:e2:c6:11:ea:bf:b0:bd:ab:64:a2:ba:5d:e7:59:
         e0:1e:2d:85:69:5f:55:41:a9:0c:83:94:53:22:76:22:cd:e6:
         48:6e:cc:a0:04:31:ae:0b:32:84:53:7d:18:5c:8a:d8:66:83:
         82:b4:9c:e3:e0:f5:15:3f:54:1c:22:6c:0c:2a:94:a9:cb:ac:
         14:7b:0d:d6:10:69:9d:26:09:21:4a:28:ee:43:eb:2b:80:a1:
         84:ba:fe:b2:7f:19:8d:49:18:9c:38:b6:69:59:5c:ff:8d:fb:
         33:54:09:c6:df:75:84:84:e6:58:1e:da:6f:96:0f:1c:ca:46:
         ae:27:76:88:37:1b:48:f1:63:61:c4:9e:1a:cb:d3:80:6c:97:
         bb:74:5f:8b:82:f2:71:a8:ef:70:bb:07:8d:d8:45:62:b0:c9:
         41:d2:88:84:d8:e4:88:90:a0:bb:1d:2a:f1:1e:ee:00:e1:43:
         25:14:03:43:fc:df:51:8b:bd:2f:71:64:bb:a3:5e:af:28:5a:
         13:79:b0:24:68:45:45:c5:07:4d:cd:3c:04:2b:38:28:ce:ad:
         cc:37:9a:3a:bd:ba:0e:04:6c:60:bc:2d:99:fa:4c:fa:d3:d6:
         27:35:c1:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJ+S1bOI49+wnR8PerUVHZ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YzJmZjNiNTA3MzU4MDM4NjVkNTZkNTJhZGI0NWNlYTRk
NjlmOTYwHhcNMjIwODA4MTYzMDQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTJiMDgyYmQ2YTJkNDM5NjRmZjM4YmQyOGE3YWQ1MDc5ZTMwOWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUfdnP93/iztko9wwcFPwFwnxUze
eevGz73WGXjzUdOy5qKhCot+LQluTn3T4662K1aqFu0DuIeGmWt3djR+gjLEiRjO
NHQt1mnVzZN3l0GUS/6qlCBT46PwSu9fm3wWw92saxuqgq3pLAO4gDTKMpZRPzgM
QEBg9usCyDRgj6cYXF9F74s06GdPAZK31h3xs0+uH93M1CEdoOlN0FzxIA/p01TN
M4VO4QKSKDGq2ViWr6FPEwX+ZT3dC7kw1dTiCtVLHIPEz7DML9ojw/Z4j2fcmfap
hIR8FD86B/BD/qUu0l5CQs3RGl6jS9yGqEmvakXvzKnYpk95AyMfyjqnnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLUrCCvWotQ5ZP84vSinrVB54wnaMB8GA1UdIwQY
MBaAFLbC/ztQc1gDhl1W1SrbRc6k1p+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHNMX08xQnpXQU9HWFZiVkt0dEZ6cVRXbjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9kNDQ3MDItNDkzMy00MzA5LTliMDMt
NmM1MmQxMDhiY2ZhLzEvdFNzSUs5YWkxRGxrX3ppOUtLZXRVSG5qQ2RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9kNDQ3MDItNDkzMy00MzA5LTliMDMtNmM1MmQxMDhiY2Zh
LzEvdHNMX08xQnpXQU9HWFZiVkt0dEZ6cVRXbjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPkMA0G
CSqGSIb3DQEBCwUAA4IBAQCDhwS8EHZG1gi05CcDpUniSnEHvq4J4sYR6r+wvatk
orpd51ngHi2FaV9VQakMg5RTInYizeZIbsygBDGuCzKEU30YXIrYZoOCtJzj4PUV
P1QcImwMKpSpy6wUew3WEGmdJgkhSijuQ+srgKGEuv6yfxmNSRicOLZpWVz/jfsz
VAnG33WEhOZYHtpvlg8cykauJ3aINxtI8WNhxJ4ay9OAbJe7dF+LgvJxqO9wuweN
2EVisMlB0oiE2OSIkKC7HSrxHu4A4UMlFAND/N9Ri70vcWS7o16vKFoTebAkaEVF
xQdNzTwEKzgozq3MN5o6vboOBGxgvC2Z+kz609YnNcGD
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:49 2024 by rpki-client on console-ams.rpki-client.org