Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/YvFY0gJZkfPF7XQtdi04Koo0QUI.roa
File:                     YvFY0gJZkfPF7XQtdi04Koo0QUI.roa (raw, json)
Hash identifier:          dPTiIS/B2JP0qWe2cgXdkDUYg4sXMJDVaojy9xyVwRM=
Subject key identifier:   62:F1:58:D2:02:59:91:F3:C5:ED:74:2D:76:2D:38:2A:8A:34:41:42
Certificate issuer:       /CN=262738c0d2dae04b3c9ec5504852f7ad74ce2152
Certificate serial:       0183E9748879A7D455AA296E7E57129DF41E
Authority key identifier: 26:27:38:C0:D2:DA:E0:4B:3C:9E:C5:50:48:52:F7:AD:74:CE:21:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jic4wNLa4Es8nsVQSFL3rXTOIVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/YvFY0gJZkfPF7XQtdi04Koo0QUI.roa
Signing time:             Tue 18 Oct 2022 04:57:51 +0000
ROA not before:           Tue 18 Oct 2022 04:57:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8100
IP address blocks:        85.209.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:e9:74:88:79:a7:d4:55:aa:29:6e:7e:57:12:9d:f4:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262738c0d2dae04b3c9ec5504852f7ad74ce2152
        Validity
            Not Before: Oct 18 04:57:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=62f158d2025991f3c5ed742d762d382a8a344142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:66:0b:30:43:74:ba:7b:dc:98:4b:ea:36:78:
                    2a:32:f7:b2:d0:ab:66:10:17:c0:bd:00:84:8d:d7:
                    95:1f:9b:de:a2:08:ac:f9:73:5f:30:39:51:2b:da:
                    a8:d1:68:e9:5f:7b:99:ac:e5:3c:99:c8:35:e7:d1:
                    e2:75:6f:c4:fc:1c:4e:a7:3f:54:ca:41:d8:1e:03:
                    ab:8c:4c:13:90:51:b3:47:74:08:c1:47:0f:ae:65:
                    26:be:46:7a:f0:f8:2f:94:69:95:87:64:50:dc:dc:
                    a7:e0:ea:49:0a:67:f7:92:60:f7:4a:dd:2a:fa:5b:
                    2d:20:15:6e:ed:fb:fa:ca:cc:3f:a4:f9:5a:4a:03:
                    69:79:8b:60:af:81:ca:bb:7f:e5:d7:68:0b:36:55:
                    4d:e9:f0:ec:97:6f:13:59:04:b5:99:88:64:f4:96:
                    e0:fd:b3:1c:f5:1d:fd:19:45:2f:76:d7:c9:c1:37:
                    d6:2c:45:d7:04:3d:ab:1e:be:05:57:6e:df:76:86:
                    20:8f:9e:65:21:b3:a1:5f:ab:25:ee:e1:9f:c2:5d:
                    b1:0f:9a:f6:47:34:17:cb:f6:1a:16:2b:cb:85:3a:
                    c4:7c:a0:e9:6c:b6:33:42:86:0c:8c:b7:16:1a:e0:
                    5f:ae:86:97:23:30:0f:4b:b4:9a:3c:f2:d1:6a:87:
                    2f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F1:58:D2:02:59:91:F3:C5:ED:74:2D:76:2D:38:2A:8A:34:41:42
            X509v3 Authority Key Identifier:
                keyid:26:27:38:C0:D2:DA:E0:4B:3C:9E:C5:50:48:52:F7:AD:74:CE:21:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jic4wNLa4Es8nsVQSFL3rXTOIVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/YvFY0gJZkfPF7XQtdi04Koo0QUI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/c6a960-52e2-43e6-acc3-bdde5ac26831/1/Jic4wNLa4Es8nsVQSFL3rXTOIVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:c4:c7:a6:26:dc:aa:c7:c2:82:56:05:d0:a2:1b:2b:43:5c:
         ec:e8:12:dc:0b:d6:7e:15:b8:a8:f9:ec:f7:50:88:45:2e:11:
         9d:dd:91:35:7f:22:b2:19:c6:e9:4c:03:e7:57:5a:fa:24:2f:
         a0:09:ae:a7:a6:db:13:f8:4f:0a:73:f7:90:55:74:26:6e:a2:
         3c:7f:23:6d:a1:f7:dc:6c:ae:a3:3b:00:39:9d:1c:45:1e:18:
         12:f8:e2:20:72:58:ab:48:55:54:64:22:50:78:77:c7:e1:a0:
         36:0b:99:5e:67:41:40:01:c9:5b:b3:26:0d:f0:d8:2b:c8:b0:
         be:b6:67:b0:66:f8:a1:53:34:63:c4:91:b8:58:09:ea:ad:16:
         b5:b5:e4:c7:8a:f4:6d:23:77:53:d8:74:2d:8c:43:87:da:a3:
         42:17:1f:30:03:56:4a:f5:97:ee:17:6f:3b:07:ef:ff:cd:53:
         dd:ba:4a:35:2f:ff:8c:a5:f3:7d:a6:f7:08:e6:a3:35:c1:c7:
         81:d7:39:82:79:a5:fd:dd:26:5d:a6:a7:21:88:05:e7:0b:5b:
         4f:6b:0d:aa:36:40:b9:73:7b:c0:a1:23:19:bd:2f:19:b7:9d:
         45:ae:1b:54:d9:3e:c2:b4:d0:c8:da:43:a9:62:c7:5b:e5:ef:
         5b:f9:fc:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPpdIh5p9RVqiluflcSnfQeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MjczOGMwZDJkYWUwNGIzYzllYzU1MDQ4NTJmN2FkNzRj
ZTIxNTIwHhcNMjIxMDE4MDQ1NzUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmYxNThkMjAyNTk5MWYzYzVlZDc0MmQ3NjJkMzgyYThhMzQ0MTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmYLMEN0unvcmEvqNngqMvey0Ktm
EBfAvQCEjdeVH5veogis+XNfMDlRK9qo0WjpX3uZrOU8mcg159HidW/E/BxOpz9U
ykHYHgOrjEwTkFGzR3QIwUcPrmUmvkZ68PgvlGmVh2RQ3Nyn4OpJCmf3kmD3St0q
+lstIBVu7fv6ysw/pPlaSgNpeYtgr4HKu3/l12gLNlVN6fDsl28TWQS1mYhk9Jbg
/bMc9R39GUUvdtfJwTfWLEXXBD2rHr4FV27fdoYgj55lIbOhX6sl7uGfwl2xD5r2
RzQXy/YaFivLhTrEfKDpbLYzQoYMjLcWGuBfroaXIzAPS7SaPPLRaocv0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGLxWNICWZHzxe10LXYtOCqKNEFCMB8GA1UdIwQY
MBaAFCYnOMDS2uBLPJ7FUEhS9610ziFSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmljNHdOTGE0RXM4bnNWUVNGTDNyWFRPSVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9jNmE5NjAtNTJlMi00M2U2LWFjYzMt
YmRkZTVhYzI2ODMxLzEvWXZGWTBnSlprZlBGN1hRdGRpMDRLb28wUVVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9jNmE5NjAtNTJlMi00M2U2LWFjYzMtYmRkZTVhYzI2ODMx
LzEvSmljNHdOTGE0RXM4bnNWUVNGTDNyWFRPSVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdGHMA0G
CSqGSIb3DQEBCwUAA4IBAQA+xMemJtyqx8KCVgXQohsrQ1zs6BLcC9Z+Fbio+ez3
UIhFLhGd3ZE1fyKyGcbpTAPnV1r6JC+gCa6nptsT+E8Kc/eQVXQmbqI8fyNtoffc
bK6jOwA5nRxFHhgS+OIgclirSFVUZCJQeHfH4aA2C5leZ0FAAclbsyYN8NgryLC+
tmewZvihUzRjxJG4WAnqrRa1teTHivRtI3dT2HQtjEOH2qNCFx8wA1ZK9ZfuF287
B+//zVPduko1L/+MpfN9pvcI5qM1wceB1zmCeaX93SZdpqchiAXnC1tPaw2qNkC5
c3vAoSMZvS8Zt51FrhtU2T7CtNDI2kOpYsdb5e9b+fwa
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:01 2024 by rpki-client on console-fra.rpki-client.org