Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1de28c-1fac-4730-ac09-7d4b77f983b6/1/V3oXxh3x3J7NID7iN4QRZeqxqYA.roa
File:                     V3oXxh3x3J7NID7iN4QRZeqxqYA.roa (raw, json)
Hash identifier:          ZbkfNMQ/AhMuYxU5IaG04cdVfVzVYtwcrPxOCUoTst4=
Subject key identifier:   57:7A:17:C6:1D:F1:DC:9E:CD:20:3E:E2:37:84:11:65:EA:B1:A9:80
Certificate issuer:       /CN=37dee1ca0a165513b57c8050621b8c79b8e3a56f
Certificate serial:       022B6970
Authority key identifier: 37:DE:E1:CA:0A:16:55:13:B5:7C:80:50:62:1B:8C:79:B8:E3:A5:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N97hygoWVRO1fIBQYhuMebjjpW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1de28c-1fac-4730-ac09-7d4b77f983b6/1/V3oXxh3x3J7NID7iN4QRZeqxqYA.roa
Signing time:             Thu 02 Jun 2022 15:18:22 +0000
ROA not before:           Thu 02 Jun 2022 15:18:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     40676
IP address blocks:        213.109.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36399472 (0x22b6970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37dee1ca0a165513b57c8050621b8c79b8e3a56f
        Validity
            Not Before: Jun  2 15:18:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=577a17c61df1dc9ecd203ee237841165eab1a980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1a:a7:a0:99:54:7f:cc:35:34:b8:62:70:5b:
                    b3:d9:ae:8e:ff:b7:23:ba:63:34:f2:2f:f8:f4:03:
                    9d:6b:92:87:e1:61:d0:51:8f:76:ea:4a:88:f8:df:
                    be:f4:98:04:03:97:d5:98:42:34:da:7a:da:73:1c:
                    3c:97:5e:95:27:19:c2:7c:ed:15:8b:ff:cc:86:67:
                    26:1d:16:ac:f3:2b:c2:10:a3:bc:76:42:f4:4c:14:
                    dd:81:6c:bd:53:68:16:f1:f3:3e:3b:5b:b0:42:64:
                    e2:7d:e8:94:b8:ee:a1:6d:33:44:80:0c:94:02:11:
                    17:46:e4:78:78:98:52:ab:71:25:6f:d8:c7:f3:7d:
                    99:e4:e3:37:b7:cc:bd:26:64:06:b4:e3:50:53:69:
                    1e:43:00:21:76:54:55:54:26:84:ff:08:32:fb:5d:
                    0f:f9:fd:6f:98:35:a9:04:8c:83:40:a9:b1:d6:54:
                    ff:04:1e:68:6a:e8:c4:e8:87:96:03:78:18:b5:36:
                    6a:7b:0d:1f:2f:62:01:9a:aa:90:2f:bf:e0:09:1a:
                    6b:c6:9a:44:c0:89:ea:25:08:60:4b:d1:9b:15:34:
                    aa:65:30:13:d7:c7:c9:6e:7a:69:ba:5b:58:b1:40:
                    4c:2e:c1:dc:fa:3f:8b:ef:20:7d:42:b6:90:cb:fd:
                    f3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7A:17:C6:1D:F1:DC:9E:CD:20:3E:E2:37:84:11:65:EA:B1:A9:80
            X509v3 Authority Key Identifier:
                keyid:37:DE:E1:CA:0A:16:55:13:B5:7C:80:50:62:1B:8C:79:B8:E3:A5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N97hygoWVRO1fIBQYhuMebjjpW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1de28c-1fac-4730-ac09-7d4b77f983b6/1/V3oXxh3x3J7NID7iN4QRZeqxqYA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1de28c-1fac-4730-ac09-7d4b77f983b6/1/N97hygoWVRO1fIBQYhuMebjjpW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.109.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:34:6e:81:ad:85:1a:b1:d5:d4:bc:d8:df:83:b2:47:5e:3b:
         bb:0a:df:5b:c2:57:61:7c:a1:94:24:5e:10:68:7c:b2:74:25:
         74:8e:a3:1a:f8:0d:3f:2f:d1:a2:c0:84:34:dc:18:a5:6c:0c:
         be:5f:c7:8b:1f:53:67:02:c4:84:15:d5:63:0c:37:55:f0:57:
         bb:c5:b2:f7:36:5c:27:22:38:91:eb:35:03:26:99:df:fd:f9:
         59:4b:b5:86:8a:7d:53:99:80:cd:27:70:b5:26:46:92:d3:0e:
         c4:a4:98:4d:e5:d7:d8:c2:be:29:8f:03:b8:02:b5:6e:83:ad:
         a4:8c:99:ff:cc:42:8e:9a:61:8d:70:0e:d4:6b:f3:9f:a1:a5:
         7f:9c:68:8f:c1:04:3f:42:c3:bc:b3:60:f8:e3:b2:82:2b:96:
         8c:5c:21:23:8c:ed:44:54:7b:c7:1d:60:e1:6d:0a:55:7d:34:
         c2:41:b6:dc:ae:c0:d7:dc:3c:13:33:65:48:46:18:db:28:1a:
         85:87:a1:e8:6d:18:05:fd:11:ca:74:da:83:ff:57:74:c3:58:
         79:f2:51:3d:56:4e:f8:ad:0b:6c:2c:f2:3c:5c:35:31:d3:ed:
         a8:31:ed:3b:b0:85:55:2f:aa:38:63:42:75:10:0e:cc:08:e7:
         48:59:72:66
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAitpcDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
N2RlZTFjYTBhMTY1NTEzYjU3YzgwNTA2MjFiOGM3OWI4ZTNhNTZmMB4XDTIyMDYw
MjE1MTgyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTc3YTE3YzYxZGYx
ZGM5ZWNkMjAzZWUyMzc4NDExNjVlYWIxYTk4MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMEap6CZVH/MNTS4YnBbs9mujv+3I7pjNPIv+PQDnWuSh+Fh
0FGPdupKiPjfvvSYBAOX1ZhCNNp62nMcPJdelScZwnztFYv/zIZnJh0WrPMrwhCj
vHZC9EwU3YFsvVNoFvHzPjtbsEJk4n3olLjuoW0zRIAMlAIRF0bkeHiYUqtxJW/Y
x/N9meTjN7fMvSZkBrTjUFNpHkMAIXZUVVQmhP8IMvtdD/n9b5g1qQSMg0CpsdZU
/wQeaGroxOiHlgN4GLU2ansNHy9iAZqqkC+/4Akaa8aaRMCJ6iUIYEvRmxU0qmUw
E9fHyW56abpbWLFATC7B3Po/i+8gfUK2kMv98zcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRXehfGHfHcns0gPuI3hBFl6rGpgDAfBgNVHSMEGDAWgBQ33uHKChZVE7V8
gFBiG4x5uOOlbzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L045N2h5Z29XVlJPMWZJQlFZaHVNZWJqanBXOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTIvMWRlMjhjLTFmYWMtNDczMC1hYzA5LTdkNGI3N2Y5ODNiNi8x
L1Yzb1h4aDN4M0o3TklEN2lONFFSWmVxeHFZQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIv
MWRlMjhjLTFmYWMtNDczMC1hYzA5LTdkNGI3N2Y5ODNiNi8xL045N2h5Z29XVlJP
MWZJQlFZaHVNZWJqanBXOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANVtmzANBgkqhkiG9w0BAQsFAAOC
AQEAcjRuga2FGrHV1LzY34OyR147uwrfW8JXYXyhlCReEGh8snQldI6jGvgNPy/R
osCENNwYpWwMvl/Hix9TZwLEhBXVYww3VfBXu8Wy9zZcJyI4kes1AyaZ3/35WUu1
hop9U5mAzSdwtSZGktMOxKSYTeXX2MK+KY8DuAK1boOtpIyZ/8xCjpphjXAO1Gvz
n6Glf5xoj8EEP0LDvLNg+OOygiuWjFwhI4ztRFR7xx1g4W0KVX00wkG23K7A19w8
EzNlSEYY2ygahYeh6G0YBf0RynTag/9XdMNYefJRPVZO+K0LbCzyPFw1MdPtqDHt
O7CFVS+qOGNCdRAOzAjnSFlyZg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:56 2024 by rpki-client on console-ams.rpki-client.org