Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/9aa25b-5d1f-43b8-9f89-ccb5e39b208b/1/EpZG23kjJvMbc6ZyiFyx4w6qP70.roa
File:                     EpZG23kjJvMbc6ZyiFyx4w6qP70.roa (raw, json)
Hash identifier:          9dY8cH0fDGWs9J+fhBBZl7rIqWUE/vr2seGL6FRl2As=
Subject key identifier:   12:96:46:DB:79:23:26:F3:1B:73:A6:72:88:5C:B1:E3:0E:AA:3F:BD
Certificate issuer:       /CN=fb05135f037d25d716d3b721c1ab721366faf905
Certificate serial:       0683C570
Authority key identifier: FB:05:13:5F:03:7D:25:D7:16:D3:B7:21:C1:AB:72:13:66:FA:F9:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wUTXwN9JdcW07chwatyE2b6-QU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/9aa25b-5d1f-43b8-9f89-ccb5e39b208b/1/EpZG23kjJvMbc6ZyiFyx4w6qP70.roa
Signing time:             Sat 01 Jan 2022 02:54:26 +0000
ROA not before:           Sat 01 Jan 2022 02:54:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208149
IP address blocks:        91.220.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109299056 (0x683c570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb05135f037d25d716d3b721c1ab721366faf905
        Validity
            Not Before: Jan  1 02:54:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=129646db792326f31b73a672885cb1e30eaa3fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:41:ae:2e:b1:98:4b:ff:c3:1f:1a:68:99:dd:
                    e2:3a:2d:1e:bb:83:37:e6:4b:b9:44:92:63:b0:53:
                    e7:3d:b2:8c:16:7f:fb:98:cd:a3:ce:17:95:01:be:
                    87:9f:8e:fd:4e:6b:c6:e1:01:cf:ef:ab:88:2f:c6:
                    22:1d:7f:39:6e:a2:d1:2a:1c:64:58:d7:9f:57:c3:
                    1a:a8:58:da:d4:09:d5:e8:1e:1a:09:44:cc:c7:6c:
                    bb:dd:2c:3a:e8:fc:e3:89:9c:06:4e:fe:6e:36:a1:
                    46:42:b0:b3:de:96:cd:5e:b8:99:83:69:98:82:d6:
                    bc:04:35:18:f9:b6:b9:68:40:64:f7:4c:34:c5:bb:
                    1b:1a:ec:35:d3:bd:c8:bf:74:94:27:dd:fb:3d:ca:
                    a5:01:21:8c:c0:9a:34:99:6d:08:47:1f:c5:5d:e4:
                    57:d8:fb:71:6f:e0:54:e5:93:4e:ad:05:c4:fa:3e:
                    9f:ba:c8:33:4c:84:6c:f9:39:dd:e5:cf:52:b0:70:
                    44:41:2e:5e:31:de:33:27:7f:f8:7e:cc:d4:00:e9:
                    95:17:06:3a:54:8e:fa:34:16:7a:bd:7a:b0:b3:9b:
                    b4:5e:67:fd:7b:01:81:b6:bc:04:05:68:5c:b0:9e:
                    4d:a4:44:a9:12:2f:79:ef:15:ac:ad:e4:03:63:70:
                    a1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:96:46:DB:79:23:26:F3:1B:73:A6:72:88:5C:B1:E3:0E:AA:3F:BD
            X509v3 Authority Key Identifier:
                keyid:FB:05:13:5F:03:7D:25:D7:16:D3:B7:21:C1:AB:72:13:66:FA:F9:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wUTXwN9JdcW07chwatyE2b6-QU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9aa25b-5d1f-43b8-9f89-ccb5e39b208b/1/EpZG23kjJvMbc6ZyiFyx4w6qP70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9aa25b-5d1f-43b8-9f89-ccb5e39b208b/1/1-wUTXwN9JdcW07chwatyE2b6-QU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.220.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:fc:3f:f1:df:89:6d:a0:6d:ef:c9:89:7d:49:3c:8e:bf:cb:
         38:ce:59:8c:a3:2f:ab:df:9e:13:9a:17:96:18:ca:50:60:44:
         de:70:e8:fe:55:c3:86:a8:b9:8b:8b:50:b4:3f:c9:d9:d7:12:
         3a:67:28:dd:a3:e8:6b:16:b6:4a:24:4d:cb:46:f2:39:6b:7d:
         a5:7e:8a:23:65:a0:dd:33:2d:78:05:d1:60:08:51:ea:26:b6:
         ea:8b:08:71:fb:f2:5b:3b:97:df:64:8d:9b:02:b2:8b:8f:bb:
         ce:9b:d5:bd:a0:5d:f8:e7:09:9a:e7:67:66:b7:69:0a:d6:ac:
         9c:fe:80:2d:a6:5c:71:db:86:73:e9:16:31:c0:87:39:37:04:
         e5:da:dc:2f:57:f2:3e:43:f0:02:bd:29:75:19:d4:00:84:76:
         ef:7e:9f:3d:ef:75:eb:80:52:54:c2:7d:ea:5a:96:b9:e2:9d:
         47:ef:04:07:1b:a7:9b:c4:59:d4:5a:c7:31:d1:d8:e0:0c:7f:
         5e:ac:61:46:76:00:fa:44:b0:5a:aa:30:35:05:8c:5c:93:6e:
         a0:36:c6:01:68:d1:b0:40:a2:83:d5:1c:d1:20:6c:f3:eb:0b:
         86:82:8b:cb:05:49:dd:c4:12:0f:2e:97:20:0d:16:5b:4b:d0:
         13:5e:22:14
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIEBoPFcDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
YjA1MTM1ZjAzN2QyNWQ3MTZkM2I3MjFjMWFiNzIxMzY2ZmFmOTA1MB4XDTIyMDEw
MTAyNTQyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTI5NjQ2ZGI3OTIz
MjZmMzFiNzNhNjcyODg1Y2IxZTMwZWFhM2ZiZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJtBri6xmEv/wx8aaJnd4jotHruDN+ZLuUSSY7BT5z2yjBZ/
+5jNo84XlQG+h5+O/U5rxuEBz++riC/GIh1/OW6i0SocZFjXn1fDGqhY2tQJ1ege
GglEzMdsu90sOuj844mcBk7+bjahRkKws96WzV64mYNpmILWvAQ1GPm2uWhAZPdM
NMW7GxrsNdO9yL90lCfd+z3KpQEhjMCaNJltCEcfxV3kV9j7cW/gVOWTTq0FxPo+
n7rIM0yEbPk53eXPUrBwREEuXjHeMyd/+H7M1ADplRcGOlSO+jQWer16sLObtF5n
/XsBgba8BAVoXLCeTaREqRIvee8VrK3kA2NwofMCAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBQSlkbbeSMm8xtzpnKIXLHjDqo/vTAfBgNVHSMEGDAWgBT7BRNfA30l1xbT
tyHBq3ITZvr5BTAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtd1VUWHdOOUpkY1cwN2Nod2F0eUUyYjYtUVUuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL2VlLzlhYTI1Yi01ZDFmLTQzYjgtOWY4OS1jY2I1ZTM5YjIwOGIv
MS9FcFpHMjNrakp2TWJjNlp5aUZ5eDR3NnFQNzAucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Vl
LzlhYTI1Yi01ZDFmLTQzYjgtOWY4OS1jY2I1ZTM5YjIwOGIvMS8xLXdVVFh3TjlK
ZGNXMDdjaHdhdHlFMmI2LVFVLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9ywMA0GCSqGSIb3DQEBCwUA
A4IBAQBq/D/x34ltoG3vyYl9STyOv8s4zlmMoy+r354TmheWGMpQYETecOj+VcOG
qLmLi1C0P8nZ1xI6Zyjdo+hrFrZKJE3LRvI5a32lfoojZaDdMy14BdFgCFHqJrbq
iwhx+/JbO5ffZI2bArKLj7vOm9W9oF345wma52dmt2kK1qyc/oAtplxx24Zz6RYx
wIc5NwTl2twvV/I+Q/ACvSl1GdQAhHbvfp8973XrgFJUwn3qWpa54p1H7wQHG6eb
xFnUWscx0djgDH9erGFGdgD6RLBaqjA1BYxck26gNsYBaNGwQKKD1RzRIGzz6wuG
govLBUndxBIPLpcgDRZbS9ATXiIU
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:27 2024 by rpki-client on console-ams.rpki-client.org