Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/00a69d-d768-41ac-bd1a-74ce37ebc193/1/T1nOW2MA0b2EK6vus8OQto3NwZY.roa
File:                     T1nOW2MA0b2EK6vus8OQto3NwZY.roa (raw, json)
Hash identifier:          urzvVpi+OJbXEaPwXeZ9ng98p83iACZXrhvR/7FEGLo=
Subject key identifier:   4F:59:CE:5B:63:00:D1:BD:84:2B:AB:EE:B3:C3:90:B6:8D:CD:C1:96
Certificate issuer:       /CN=be3d2d631d8c337fb89aceb2ff04a1ada8085265
Certificate serial:       024F57D2
Authority key identifier: BE:3D:2D:63:1D:8C:33:7F:B8:9A:CE:B2:FF:04:A1:AD:A8:08:52:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vj0tYx2MM3-4ms6y_wShragIUmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/00a69d-d768-41ac-bd1a-74ce37ebc193/1/T1nOW2MA0b2EK6vus8OQto3NwZY.roa
Signing time:             Wed 18 May 2022 14:08:17 +0000
ROA not before:           Wed 18 May 2022 14:08:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209828
IP address blocks:        178.255.218.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38754258 (0x24f57d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be3d2d631d8c337fb89aceb2ff04a1ada8085265
        Validity
            Not Before: May 18 14:08:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4f59ce5b6300d1bd842babeeb3c390b68dcdc196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:22:b5:53:e5:93:03:c4:b5:71:f1:b0:83:dc:
                    c2:4e:20:c8:b3:16:82:fe:79:28:59:1a:a1:37:67:
                    9b:3d:4d:27:b8:47:d2:ad:8e:6f:48:7b:6b:12:91:
                    c1:98:ef:8f:ce:8a:8a:39:ac:bc:1f:d0:47:23:9d:
                    23:28:1a:85:3f:80:75:64:08:23:51:a7:b2:69:ed:
                    21:41:c2:dc:c7:3f:13:37:d4:0f:f9:7c:26:fe:e9:
                    79:fc:69:70:4f:f5:9c:67:d1:d4:27:4d:ae:66:ea:
                    90:fc:9e:13:fc:dd:97:51:59:cb:cb:ba:6a:5a:79:
                    96:27:62:6f:b1:07:45:d3:78:66:36:c6:41:9e:53:
                    59:3e:5f:b9:1c:67:ed:f6:c0:33:33:33:ed:a6:a6:
                    67:fa:84:b9:ee:3b:41:42:be:bc:8e:18:1c:8a:f5:
                    25:35:83:8c:bf:90:c2:82:50:58:45:20:97:92:11:
                    47:77:cb:cb:9b:e2:bb:aa:57:16:c1:27:2c:48:28:
                    07:e7:eb:a2:49:49:f7:e2:29:ee:96:e9:3a:fb:45:
                    73:41:a5:34:a7:12:5a:dd:75:44:ef:a8:18:e2:6d:
                    f1:29:be:8a:2c:18:dc:80:85:a3:5d:46:80:aa:52:
                    f5:07:5a:99:5c:90:b2:f2:c3:91:8d:ec:e7:f7:92:
                    35:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:59:CE:5B:63:00:D1:BD:84:2B:AB:EE:B3:C3:90:B6:8D:CD:C1:96
            X509v3 Authority Key Identifier:
                keyid:BE:3D:2D:63:1D:8C:33:7F:B8:9A:CE:B2:FF:04:A1:AD:A8:08:52:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj0tYx2MM3-4ms6y_wShragIUmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/00a69d-d768-41ac-bd1a-74ce37ebc193/1/T1nOW2MA0b2EK6vus8OQto3NwZY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/00a69d-d768-41ac-bd1a-74ce37ebc193/1/vj0tYx2MM3-4ms6y_wShragIUmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.255.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:86:01:f6:2e:5d:e7:75:44:0c:19:96:80:d3:b4:b9:e9:3c:
         34:95:07:6a:bf:94:27:85:94:31:34:9f:45:7c:6f:39:1f:0d:
         8c:c3:9d:20:29:7c:ac:36:92:a3:32:bf:48:e3:09:10:93:9f:
         c6:97:f3:6a:ed:ef:3b:d7:43:6d:01:58:54:a2:f0:15:f4:b3:
         8f:6a:20:3b:57:4b:1d:98:94:e1:73:f7:7e:bd:4d:d1:fa:bc:
         5e:6f:f5:49:cb:5f:96:cc:b9:e1:0e:b9:14:e0:46:b9:83:65:
         23:45:b4:3f:6b:62:e7:67:fd:c7:07:56:a8:bf:7f:ab:20:f7:
         1b:c0:68:a7:67:ae:cf:06:77:cb:b6:18:a2:7a:9b:9d:42:ad:
         57:68:be:a7:e3:95:5e:9b:47:20:a1:c9:3b:64:e6:e3:5b:0a:
         17:77:7d:15:48:23:ec:aa:3d:10:ae:57:2c:85:f4:63:c7:82:
         d5:ad:34:5f:00:2d:d5:6b:c4:4e:fa:1a:fc:14:e7:f4:82:9b:
         49:df:72:13:9b:e5:34:df:15:0f:52:ac:2b:ab:77:33:98:a6:
         63:f0:0a:0b:81:3a:42:ef:25:9a:e0:58:af:d8:0d:e6:ec:80:
         6e:66:f7:1f:ac:cb:b0:ac:bc:01:f4:4e:22:5b:fe:4f:2c:a2:
         5a:2b:07:2c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAk9X0jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZTNkMmQ2MzFkOGMzMzdmYjg5YWNlYjJmZjA0YTFhZGE4MDg1MjY1MB4XDTIyMDUx
ODE0MDgxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGY1OWNlNWI2MzAw
ZDFiZDg0MmJhYmVlYjNjMzkwYjY4ZGNkYzE5NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJMitVPlkwPEtXHxsIPcwk4gyLMWgv55KFkaoTdnmz1NJ7hH
0q2Ob0h7axKRwZjvj86KijmsvB/QRyOdIygahT+AdWQII1GnsmntIUHC3Mc/EzfU
D/l8Jv7pefxpcE/1nGfR1CdNrmbqkPyeE/zdl1FZy8u6alp5lidib7EHRdN4ZjbG
QZ5TWT5fuRxn7fbAMzMz7aamZ/qEue47QUK+vI4YHIr1JTWDjL+QwoJQWEUgl5IR
R3fLy5viu6pXFsEnLEgoB+froklJ9+Ip7pbpOvtFc0GlNKcSWt11RO+oGOJt8Sm+
iiwY3ICFo11GgKpS9QdamVyQsvLDkY3s5/eSNXUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRPWc5bYwDRvYQrq+6zw5C2jc3BljAfBgNVHSMEGDAWgBS+PS1jHYwzf7ia
zrL/BKGtqAhSZTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ZqMHRZeDJNTTMtNG1zNnlfd1NocmFnSVVtVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDUvMDBhNjlkLWQ3NjgtNDFhYy1iZDFhLTc0Y2UzN2ViYzE5My8x
L1Qxbk9XMk1BMGIyRUs2dnVzOE9RdG8zTndaWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUv
MDBhNjlkLWQ3NjgtNDFhYy1iZDFhLTc0Y2UzN2ViYzE5My8xL3ZqMHRZeDJNTTMt
NG1zNnlfd1NocmFnSVVtVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALL/2jANBgkqhkiG9w0BAQsFAAOC
AQEAcYYB9i5d53VEDBmWgNO0uek8NJUHar+UJ4WUMTSfRXxvOR8NjMOdICl8rDaS
ozK/SOMJEJOfxpfzau3vO9dDbQFYVKLwFfSzj2ogO1dLHZiU4XP3fr1N0fq8Xm/1
Sctflsy54Q65FOBGuYNlI0W0P2ti52f9xwdWqL9/qyD3G8Bop2euzwZ3y7YYonqb
nUKtV2i+p+OVXptHIKHJO2Tm41sKF3d9FUgj7Ko9EK5XLIX0Y8eC1a00XwAt1WvE
Tvoa/BTn9IKbSd9yE5vlNN8VD1KsK6t3M5imY/AKC4E6Qu8lmuBYr9gN5uyAbmb3
H6zLsKy8AfROIlv+TyyiWisHLA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:29 2025 by rpki-client