Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/835108-1bc4-44fe-b0ba-a49328b79185/1/DWwTC95fnwd9zvBHWJNu3JPgB8w.roa
File:                     DWwTC95fnwd9zvBHWJNu3JPgB8w.roa (raw, json)
Hash identifier:          RqzpiEba23fnzGSbmZ5sUDuTsYfH2RSVWdnUUnceCu8=
Subject key identifier:   0D:6C:13:0B:DE:5F:9F:07:7D:CE:F0:47:58:93:6E:DC:93:E0:07:CC
Certificate issuer:       /CN=001346cc2f9c4def3ea8d06fd9406175d3e08b6a
Certificate serial:       05241016
Authority key identifier: 00:13:46:CC:2F:9C:4D:EF:3E:A8:D0:6F:D9:40:61:75:D3:E0:8B:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABNGzC-cTe8-qNBv2UBhddPgi2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/835108-1bc4-44fe-b0ba-a49328b79185/1/DWwTC95fnwd9zvBHWJNu3JPgB8w.roa
Signing time:             Sat 01 Jan 2022 01:51:35 +0000
ROA not before:           Sat 01 Jan 2022 01:51:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34617
IP address blocks:        193.104.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86249494 (0x5241016)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001346cc2f9c4def3ea8d06fd9406175d3e08b6a
        Validity
            Not Before: Jan  1 01:51:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0d6c130bde5f9f077dcef04758936edc93e007cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2a:f6:17:6e:bc:3c:59:e2:16:0e:38:19:a4:
                    13:ba:ab:77:07:7b:c1:00:fa:02:fb:73:09:ea:22:
                    17:71:eb:c8:74:62:ad:97:7f:32:17:c1:a9:06:12:
                    2d:c3:d0:f1:0e:eb:57:e1:de:d4:98:16:e9:b7:8b:
                    9a:9b:57:48:f7:23:cb:a0:36:6e:e6:56:41:c4:9e:
                    37:38:a5:4c:31:33:9a:ad:df:ef:04:05:f3:00:ae:
                    69:6f:0f:96:00:ec:7e:0a:92:63:cf:12:76:51:6f:
                    b5:8c:c1:dd:97:98:dc:e5:5a:a8:7b:0d:50:05:eb:
                    6f:2f:65:99:93:fd:de:4f:72:8c:2d:33:bd:d9:1f:
                    83:4b:9b:ae:a2:97:d3:11:96:27:73:8f:42:68:7d:
                    25:68:28:be:c5:1d:6f:71:d7:74:17:4b:d7:93:14:
                    0f:74:b7:5e:22:f1:67:d4:fa:7f:81:cd:43:3a:b7:
                    6a:29:92:14:49:8c:37:f7:e1:8b:72:69:87:4f:cd:
                    87:8b:5e:b9:b3:b4:c6:d3:6e:a8:90:ed:b4:2e:13:
                    0c:a3:0f:7e:9a:5d:cb:d6:1f:6d:a3:fb:0d:02:9d:
                    b9:40:f6:66:61:8b:c6:0a:5e:d1:ce:7b:f9:a0:34:
                    28:73:c5:0e:69:41:b6:76:82:ea:16:2d:de:ff:2c:
                    0c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6C:13:0B:DE:5F:9F:07:7D:CE:F0:47:58:93:6E:DC:93:E0:07:CC
            X509v3 Authority Key Identifier:
                keyid:00:13:46:CC:2F:9C:4D:EF:3E:A8:D0:6F:D9:40:61:75:D3:E0:8B:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABNGzC-cTe8-qNBv2UBhddPgi2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/835108-1bc4-44fe-b0ba-a49328b79185/1/DWwTC95fnwd9zvBHWJNu3JPgB8w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/835108-1bc4-44fe-b0ba-a49328b79185/1/ABNGzC-cTe8-qNBv2UBhddPgi2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:00:99:a8:68:01:46:a4:31:44:84:f5:68:8f:48:ad:60:38:
         f4:d5:6a:5c:71:e5:ab:4d:ff:5a:6e:ca:d6:b5:e0:2f:a5:df:
         86:ee:52:52:24:e4:86:4d:e5:a3:0d:93:23:9a:14:4b:b1:74:
         59:8a:c5:86:b4:63:7e:28:5e:af:21:01:5e:e8:38:d3:98:52:
         af:e7:4d:fd:8d:6a:12:12:33:5b:bb:26:8f:85:5b:f0:11:0a:
         a6:70:28:0c:1c:b6:34:db:6d:69:ff:13:dd:29:cc:28:83:ed:
         6e:f5:82:55:6a:7b:b1:d0:1f:19:ac:cf:3f:c3:57:d8:0d:a4:
         54:be:8e:f9:5e:3b:72:24:f7:56:72:d1:0a:1c:35:61:72:d9:
         8a:de:35:87:5a:df:b2:33:00:b7:87:e4:82:c0:fd:39:1c:38:
         4b:b7:69:45:f8:2d:79:81:9d:96:34:96:54:28:8b:f1:04:85:
         3d:09:10:5d:d5:43:50:aa:2f:cd:1b:91:bc:f8:1c:e8:d8:13:
         57:1e:0e:b5:5a:8b:05:56:42:a4:03:18:f7:6d:e9:db:af:c7:
         53:c1:7f:70:b3:94:0d:75:0b:d0:bc:f0:47:41:b1:ea:e6:74:
         f2:2c:62:8e:95:21:af:80:b0:f8:7b:5c:d2:cc:61:e8:7b:e4:
         21:12:05:ac
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBSQQFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MDEzNDZjYzJmOWM0ZGVmM2VhOGQwNmZkOTQwNjE3NWQzZTA4YjZhMB4XDTIyMDEw
MTAxNTEzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGQ2YzEzMGJkZTVm
OWYwNzdkY2VmMDQ3NTg5MzZlZGM5M2UwMDdjYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJYq9hduvDxZ4hYOOBmkE7qrdwd7wQD6AvtzCeoiF3HryHRi
rZd/MhfBqQYSLcPQ8Q7rV+He1JgW6beLmptXSPcjy6A2buZWQcSeNzilTDEzmq3f
7wQF8wCuaW8PlgDsfgqSY88SdlFvtYzB3ZeY3OVaqHsNUAXrby9lmZP93k9yjC0z
vdkfg0ubrqKX0xGWJ3OPQmh9JWgovsUdb3HXdBdL15MUD3S3XiLxZ9T6f4HNQzq3
aimSFEmMN/fhi3Jph0/Nh4teubO0xtNuqJDttC4TDKMPfppdy9YfbaP7DQKduUD2
ZmGLxgpe0c57+aA0KHPFDmlBtnaC6hYt3v8sDGcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQNbBML3l+fB33O8EdYk27ck+AHzDAfBgNVHSMEGDAWgBQAE0bML5xN7z6o
0G/ZQGF10+CLajAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0FCTkd6Qy1jVGU4LXFOQnYyVUJoZGRQZ2kyby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTkvODM1MTA4LTFiYzQtNDRmZS1iMGJhLWE0OTMyOGI3OTE4NS8x
L0RXd1RDOTVmbndkOXp2QkhXSk51M0pQZ0I4dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkv
ODM1MTA4LTFiYzQtNDRmZS1iMGJhLWE0OTMyOGI3OTE4NS8xL0FCTkd6Qy1jVGU4
LXFOQnYyVUJoZGRQZ2kyby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMFouTANBgkqhkiG9w0BAQsFAAOC
AQEAAACZqGgBRqQxRIT1aI9IrWA49NVqXHHlq03/Wm7K1rXgL6Xfhu5SUiTkhk3l
ow2TI5oUS7F0WYrFhrRjfiheryEBXug405hSr+dN/Y1qEhIzW7smj4Vb8BEKpnAo
DBy2NNttaf8T3SnMKIPtbvWCVWp7sdAfGazPP8NX2A2kVL6O+V47ciT3VnLRChw1
YXLZit41h1rfsjMAt4fkgsD9ORw4S7dpRfgteYGdljSWVCiL8QSFPQkQXdVDUKov
zRuRvPgc6NgTVx4OtVqLBVZCpAMY923p26/HU8F/cLOUDXUL0LzwR0Gx6uZ08ixi
jpUhr4Cw+Htc0sxh6HvkIRIFrA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:08 2024 by rpki-client on console-fra.rpki-client.org