Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ea6619-21ca-48f1-8b0a-086d3351211a/1/b7b5KWNZOcOmk0DRS8N7YB56KV8.roa
File:                     b7b5KWNZOcOmk0DRS8N7YB56KV8.roa (raw, json)
Hash identifier:          J5Zw+jAJjV94w2FIp3DH4Z5K0WJqfsqdFdm7LJbZ2co=
Subject key identifier:   6F:B6:F9:29:63:59:39:C3:A6:93:40:D1:4B:C3:7B:60:1E:7A:29:5F
Certificate issuer:       /CN=5ac522899a44ae2c6a96263f72bbf89d2d87354d
Certificate serial:       05B93B31
Authority key identifier: 5A:C5:22:89:9A:44:AE:2C:6A:96:26:3F:72:BB:F8:9D:2D:87:35:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsUiiZpErixqliY_crv4nS2HNU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/ea6619-21ca-48f1-8b0a-086d3351211a/1/b7b5KWNZOcOmk0DRS8N7YB56KV8.roa
Signing time:             Sat 01 Jan 2022 03:59:09 +0000
ROA not before:           Sat 01 Jan 2022 03:59:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50272
IP address blocks:        185.155.140.0/22 maxlen: 22
                          2a07:33c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96025393 (0x5b93b31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac522899a44ae2c6a96263f72bbf89d2d87354d
        Validity
            Not Before: Jan  1 03:59:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6fb6f929635939c3a69340d14bc37b601e7a295f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4a:2a:84:d1:3c:f0:10:5e:74:d2:0f:75:e5:
                    de:5d:47:23:75:67:6e:17:08:37:20:5a:3b:94:20:
                    b2:ba:3f:e4:a4:14:00:0a:6b:6b:a7:e8:ba:70:20:
                    12:fa:c5:ee:36:f8:5e:71:74:ba:b6:ac:84:f3:1a:
                    86:57:8c:14:06:54:02:5f:17:7c:c1:95:74:2d:52:
                    fd:02:fd:f1:3c:90:be:4a:68:b8:bb:9f:41:54:6f:
                    4d:52:4a:98:46:6b:78:ee:22:b1:ed:c8:c9:a8:7b:
                    6b:1c:1c:1d:36:9e:b7:49:22:41:88:e7:41:46:40:
                    9b:93:9c:3d:85:2d:2b:59:06:74:b4:b6:c4:67:2f:
                    53:f3:02:57:4c:08:2b:04:3d:63:34:8a:ad:49:d5:
                    bb:20:b6:e4:00:ca:81:66:a2:ab:23:7e:b8:2a:b1:
                    b9:88:6d:5f:9f:29:86:aa:ea:6b:9f:e5:8b:07:d3:
                    8f:d3:3d:b8:de:d0:2d:64:b1:49:b7:41:a5:5b:5b:
                    a8:fe:41:f1:ed:87:45:e1:4a:5c:da:5e:a5:d7:a3:
                    c5:bb:bd:ee:c4:64:1e:f0:1b:c7:a1:d6:89:cc:84:
                    b8:86:ec:01:ed:4a:f5:63:fe:2f:4b:31:6a:0a:ab:
                    ed:10:ea:a6:ae:ef:03:fe:a4:4b:d1:d0:29:02:3a:
                    7c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B6:F9:29:63:59:39:C3:A6:93:40:D1:4B:C3:7B:60:1E:7A:29:5F
            X509v3 Authority Key Identifier:
                keyid:5A:C5:22:89:9A:44:AE:2C:6A:96:26:3F:72:BB:F8:9D:2D:87:35:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsUiiZpErixqliY_crv4nS2HNU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ea6619-21ca-48f1-8b0a-086d3351211a/1/b7b5KWNZOcOmk0DRS8N7YB56KV8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ea6619-21ca-48f1-8b0a-086d3351211a/1/WsUiiZpErixqliY_crv4nS2HNU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.140.0/22
                IPv6:
                  2a07:33c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         a8:35:c6:3e:d0:da:aa:77:64:81:3f:4e:9a:ed:69:64:c0:bc:
         82:da:a9:90:50:49:6b:19:d7:7f:34:af:47:d0:14:c0:5c:a4:
         53:9f:0c:fe:2c:39:c8:0d:a2:04:00:b1:f3:e3:8b:b2:6d:21:
         a3:55:58:e4:ed:b8:4c:62:44:a4:4d:96:1a:bc:dc:39:90:18:
         cc:bd:08:06:74:e2:67:01:60:3c:92:ac:60:12:05:6b:96:e4:
         15:b1:4a:df:d4:03:7e:79:3b:07:45:6d:01:67:05:ce:62:c1:
         f0:e3:70:5c:38:d6:83:bc:0c:69:79:cd:a1:bd:cb:12:ad:62:
         1d:60:c7:c1:0e:21:cc:27:09:4f:58:15:1e:1b:d6:56:76:86:
         3d:5d:8b:e5:65:11:ab:62:bc:47:e8:cb:7a:b5:d8:84:2d:8b:
         f6:85:22:ce:69:df:93:f3:5d:92:7e:50:33:65:d7:95:a9:42:
         ce:a5:5d:dd:47:66:7d:42:e0:34:89:60:30:e6:60:d9:10:e9:
         54:96:6f:03:7a:78:02:b0:10:f7:8b:65:37:2b:79:fa:98:7e:
         5b:41:1c:09:cc:f9:aa:88:a8:ca:06:3a:26:c5:93:f5:0a:8d:
         a5:63:b3:d2:b4:ec:36:43:5b:e6:e6:0a:9d:41:72:fd:e3:cb:
         75:ce:5a:ce
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBbk7MTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YWM1MjI4OTlhNDRhZTJjNmE5NjI2M2Y3MmJiZjg5ZDJkODczNTRkMB4XDTIyMDEw
MTAzNTkwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmZiNmY5Mjk2MzU5
MzljM2E2OTM0MGQxNGJjMzdiNjAxZTdhMjk1ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMZKKoTRPPAQXnTSD3Xl3l1HI3VnbhcINyBaO5Qgsro/5KQU
AApra6founAgEvrF7jb4XnF0urashPMahleMFAZUAl8XfMGVdC1S/QL98TyQvkpo
uLufQVRvTVJKmEZreO4ise3Iyah7axwcHTaet0kiQYjnQUZAm5OcPYUtK1kGdLS2
xGcvU/MCV0wIKwQ9YzSKrUnVuyC25ADKgWaiqyN+uCqxuYhtX58phqrqa5/liwfT
j9M9uN7QLWSxSbdBpVtbqP5B8e2HReFKXNpepdejxbu97sRkHvAbx6HWicyEuIbs
Ae1K9WP+L0sxagqr7RDqpq7vA/6kS9HQKQI6fNUCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRvtvkpY1k5w6aTQNFLw3tgHnopXzAfBgNVHSMEGDAWgBRaxSKJmkSuLGqW
Jj9yu/idLYc1TTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dzVWlpWnBFcml4cWxpWV9jcnY0blMySE5VMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTMvZWE2NjE5LTIxY2EtNDhmMS04YjBhLTA4NmQzMzUxMjExYS8x
L2I3YjVLV05aT2NPbWswRFJTOE43WUI1NktWOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMv
ZWE2NjE5LTIxY2EtNDhmMS04YjBhLTA4NmQzMzUxMjExYS8xL1dzVWlpWnBFcml4
cWxpWV9jcnY0blMySE5VMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArmbjDANBAIAAjAHAwUDKgczwDAN
BgkqhkiG9w0BAQsFAAOCAQEAqDXGPtDaqndkgT9Omu1pZMC8gtqpkFBJaxnXfzSv
R9AUwFykU58M/iw5yA2iBACx8+OLsm0ho1VY5O24TGJEpE2WGrzcOZAYzL0IBnTi
ZwFgPJKsYBIFa5bkFbFK39QDfnk7B0VtAWcFzmLB8ONwXDjWg7wMaXnNob3LEq1i
HWDHwQ4hzCcJT1gVHhvWVnaGPV2L5WURq2K8R+jLerXYhC2L9oUizmnfk/Ndkn5Q
M2XXlalCzqVd3UdmfULgNIlgMOZg2RDpVJZvA3p4ArAQ94tlNyt5+ph+W0EcCcz5
qoioygY6JsWT9QqNpWOz0rTsNkNb5uYKnUFy/ePLdc5azg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:21 2024 by rpki-client on console-fra.rpki-client.org