Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/007d5f-5b07-4eaf-a732-3ba436a3cc68/1/45OOxn3Y7jgG88wLir4Dd9UZ5-I.roa
File:                     45OOxn3Y7jgG88wLir4Dd9UZ5-I.roa (raw, json)
Hash identifier:          BI8u9jmqqQ4xi3SUUzIa5aWXpTuYrdL7S7gO79Bn8QI=
Subject key identifier:   E3:93:8E:C6:7D:D8:EE:38:06:F3:CC:0B:8A:BE:03:77:D5:19:E7:E2
Certificate issuer:       /CN=6d3318ffd53e419ca5b5927d37ecf8d63f8d009c
Certificate serial:       036A10E2
Authority key identifier: 6D:33:18:FF:D5:3E:41:9C:A5:B5:92:7D:37:EC:F8:D6:3F:8D:00:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bTMY_9U-QZyltZJ9N-z41j-NAJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/007d5f-5b07-4eaf-a732-3ba436a3cc68/1/45OOxn3Y7jgG88wLir4Dd9UZ5-I.roa
Signing time:             Sun 13 Feb 2022 20:38:42 +0000
ROA not before:           Sun 13 Feb 2022 20:38:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211949
IP address blocks:        178.217.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57282786 (0x36a10e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d3318ffd53e419ca5b5927d37ecf8d63f8d009c
        Validity
            Not Before: Feb 13 20:38:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e3938ec67dd8ee3806f3cc0b8abe0377d519e7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a8:84:64:4a:c1:67:16:9f:63:a6:54:da:89:
                    a4:d3:80:28:64:89:df:e9:85:1a:91:b9:1f:ab:6c:
                    4b:02:b6:0e:0e:7d:71:17:6c:81:e6:5a:e8:e2:93:
                    77:1f:e0:02:53:e5:31:3b:c9:5e:fc:85:29:c4:60:
                    17:1e:33:99:d4:4f:8f:05:5d:97:ae:ec:09:9f:fc:
                    b2:66:21:83:a2:a7:ae:b4:cf:3b:88:0b:78:7e:0d:
                    29:27:b1:a4:94:93:4b:52:d6:ec:c1:40:68:d8:62:
                    3b:f1:f2:e9:ec:fb:ae:78:aa:0e:aa:bd:97:df:06:
                    45:64:9d:fa:b3:a3:20:3d:d3:d8:e9:a3:66:e2:02:
                    56:24:c5:b3:6d:a4:c5:3e:3d:20:4e:e6:32:52:c9:
                    59:ba:cf:bd:b6:1c:93:df:dc:d9:56:22:f6:86:c5:
                    aa:84:26:40:e2:3e:1e:d8:4a:1d:5b:d8:75:32:1f:
                    7e:4d:3c:7e:ae:5a:9a:88:7d:24:1d:99:ff:02:7a:
                    12:de:e0:2e:22:08:57:89:42:c5:a7:4c:55:d6:e9:
                    7d:ad:88:06:1f:00:06:df:98:e6:cb:5e:73:07:6e:
                    63:59:c7:90:67:d7:44:50:cf:e3:17:5b:c0:48:73:
                    a3:03:7a:a9:b2:cd:cd:62:31:eb:ad:df:66:24:f7:
                    37:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:93:8E:C6:7D:D8:EE:38:06:F3:CC:0B:8A:BE:03:77:D5:19:E7:E2
            X509v3 Authority Key Identifier:
                keyid:6D:33:18:FF:D5:3E:41:9C:A5:B5:92:7D:37:EC:F8:D6:3F:8D:00:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTMY_9U-QZyltZJ9N-z41j-NAJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/007d5f-5b07-4eaf-a732-3ba436a3cc68/1/45OOxn3Y7jgG88wLir4Dd9UZ5-I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/007d5f-5b07-4eaf-a732-3ba436a3cc68/1/bTMY_9U-QZyltZJ9N-z41j-NAJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.217.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:7a:82:1a:3e:87:87:83:47:77:a0:47:b8:38:ab:de:ea:81:
         23:1e:f3:40:e5:af:71:b5:a2:9c:e1:33:ee:0c:bb:f8:a7:88:
         2e:68:a9:a9:12:12:fb:e3:bc:7e:c0:31:49:e3:af:71:69:e2:
         af:4d:2e:2f:17:59:f0:b1:e3:00:70:47:b6:63:7b:3e:d8:43:
         60:d3:3a:ff:2c:fc:4f:6f:df:31:f4:8c:2b:59:53:6f:71:1d:
         5d:c6:f7:51:ae:4c:e0:21:3c:e4:5f:88:84:81:0d:b0:a8:d3:
         4b:7d:ce:bf:0e:6e:db:d6:f0:3a:ef:d4:ac:cf:ee:b1:7a:a9:
         fc:0d:e6:12:a4:94:c1:2d:23:e6:4b:2d:11:53:04:bc:02:c3:
         4e:77:09:57:cd:cf:08:ab:54:94:6f:bb:c4:04:aa:ec:c8:76:
         8d:7f:85:19:99:5b:c3:21:89:4d:15:77:99:3d:ef:06:38:a7:
         5d:cc:d2:55:d6:7e:c2:1a:12:a2:c4:ad:e4:ff:61:71:22:26:
         71:37:60:93:ad:fd:ee:c7:83:05:eb:9f:e4:e0:82:52:be:28:
         70:b0:7e:82:88:43:a4:3a:e2:c9:3a:fd:80:68:50:7b:c0:2c:
         aa:c7:0f:ac:ae:19:df:54:94:9d:b0:6c:ac:d9:eb:db:09:35:
         c1:f8:64:7b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA2oQ4jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZDMzMThmZmQ1M2U0MTljYTViNTkyN2QzN2VjZjhkNjNmOGQwMDljMB4XDTIyMDIx
MzIwMzg0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTM5MzhlYzY3ZGQ4
ZWUzODA2ZjNjYzBiOGFiZTAzNzdkNTE5ZTdlMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMyohGRKwWcWn2OmVNqJpNOAKGSJ3+mFGpG5H6tsSwK2Dg59
cRdsgeZa6OKTdx/gAlPlMTvJXvyFKcRgFx4zmdRPjwVdl67sCZ/8smYhg6KnrrTP
O4gLeH4NKSexpJSTS1LW7MFAaNhiO/Hy6ez7rniqDqq9l98GRWSd+rOjID3T2Omj
ZuICViTFs22kxT49IE7mMlLJWbrPvbYck9/c2VYi9obFqoQmQOI+HthKHVvYdTIf
fk08fq5amoh9JB2Z/wJ6Et7gLiIIV4lCxadMVdbpfa2IBh8ABt+Y5stecwduY1nH
kGfXRFDP4xdbwEhzowN6qbLNzWIx663fZiT3N3kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTjk47GfdjuOAbzzAuKvgN31Rnn4jAfBgNVHSMEGDAWgBRtMxj/1T5BnKW1
kn037PjWP40AnDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JUTVlfOVUtUVp5bHRaSjlOLXo0MWotTkFKdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTIvMDA3ZDVmLTViMDctNGVhZi1hNzMyLTNiYTQzNmEzY2M2OC8x
LzQ1T094bjNZN2pnRzg4d0xpcjREZDlVWjUtSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIv
MDA3ZDVmLTViMDctNGVhZi1hNzMyLTNiYTQzNmEzY2M2OC8xL2JUTVlfOVUtUVp5
bHRaSjlOLXo0MWotTkFKdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALLZ6jANBgkqhkiG9w0BAQsFAAOC
AQEAmXqCGj6Hh4NHd6BHuDir3uqBIx7zQOWvcbWinOEz7gy7+KeILmipqRIS++O8
fsAxSeOvcWnir00uLxdZ8LHjAHBHtmN7PthDYNM6/yz8T2/fMfSMK1lTb3EdXcb3
Ua5M4CE85F+IhIENsKjTS33Ovw5u29bwOu/UrM/usXqp/A3mEqSUwS0j5kstEVME
vALDTncJV83PCKtUlG+7xASq7Mh2jX+FGZlbwyGJTRV3mT3vBjinXczSVdZ+whoS
osSt5P9hcSImcTdgk6397seDBeuf5OCCUr4ocLB+gohDpDriyTr9gGhQe8AsqscP
rK4Z31SUnbBsrNnr2wk1wfhkew==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:03 2024 by rpki-client on console-fra.rpki-client.org