Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/X8hY5IIaBPsIPh4Ey3O8vkuMPdM.roa
File:                     X8hY5IIaBPsIPh4Ey3O8vkuMPdM.roa (raw, json)
Hash identifier:          RHwFBv0fDFbgsIx/Rpfl55MWGvZgxOs+wKtb125D8F8=
Subject key identifier:   5F:C8:58:E4:82:1A:04:FB:08:3E:1E:04:CB:73:BC:BE:4B:8C:3D:D3
Certificate issuer:       /CN=441fbd304346a14423e5ce5cafc6953a3e245b23
Certificate serial:       D603D1
Authority key identifier: 44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/X8hY5IIaBPsIPh4Ey3O8vkuMPdM.roa
Signing time:             Sat 01 Jan 2022 07:00:26 +0000
ROA not before:           Sat 01 Jan 2022 07:00:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211193
IP address blocks:        194.104.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14025681 (0xd603d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=441fbd304346a14423e5ce5cafc6953a3e245b23
        Validity
            Not Before: Jan  1 07:00:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5fc858e4821a04fb083e1e04cb73bcbe4b8c3dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a2:6b:bf:5d:80:64:7a:f4:ea:6e:44:e1:f8:
                    fd:8b:09:49:8a:7e:0d:28:03:5e:4a:7e:4b:6e:84:
                    d1:d4:e9:8a:48:77:b5:9f:9b:ea:89:2e:61:29:e6:
                    c7:ae:dc:aa:1a:90:ba:93:fc:05:cb:a9:7f:19:b1:
                    3d:8e:99:c8:78:93:b1:ce:f3:2b:44:93:32:d6:79:
                    29:b8:ad:d3:3e:e2:5f:bb:72:f8:77:07:f9:e2:bc:
                    52:fe:0e:9c:ec:9a:33:8a:61:0a:c7:3a:f1:b9:d8:
                    b4:e5:8b:b1:bd:db:2c:34:53:10:bd:25:ab:f8:bd:
                    c9:8b:f0:e9:94:fd:75:c4:5a:e0:b8:e6:8d:93:2e:
                    6e:e0:d2:ff:35:8c:09:18:00:04:96:ed:d1:f5:05:
                    66:19:66:67:81:86:80:af:01:ee:9c:e7:15:e2:ec:
                    97:70:09:4b:63:49:6c:13:23:4f:9c:f3:f1:e9:17:
                    e9:fb:7b:f9:e1:bf:98:3d:36:c6:66:e6:a8:25:d9:
                    a7:73:67:a6:7a:b4:2a:2b:43:83:03:27:2d:cb:b9:
                    eb:e6:ae:19:d9:16:df:3d:f8:e2:b9:b1:1c:2c:93:
                    b1:b7:56:d7:b1:74:1c:03:02:a0:0d:80:4a:5f:27:
                    6e:99:54:92:93:6b:81:1c:75:42:d5:7c:13:39:81:
                    28:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C8:58:E4:82:1A:04:FB:08:3E:1E:04:CB:73:BC:BE:4B:8C:3D:D3
            X509v3 Authority Key Identifier:
                keyid:44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/X8hY5IIaBPsIPh4Ey3O8vkuMPdM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/RB-9MENGoUQj5c5cr8aVOj4kWyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:25:03:a3:e7:c3:72:d9:d7:0d:ae:6e:57:b6:a3:4c:a3:d5:
         cf:cd:3f:cb:e8:04:d9:95:a1:24:dc:d5:d4:3d:ba:d6:76:dc:
         77:76:7c:44:bc:42:e4:f4:e3:4c:7c:8b:84:19:bb:d8:18:01:
         62:b1:36:fd:2a:b1:f0:ed:82:2f:de:ad:46:77:13:49:cc:7a:
         90:04:87:78:dd:77:2a:72:8b:fd:94:04:23:86:49:9f:5c:57:
         b9:38:b9:bf:51:87:3e:c1:a3:0a:2b:90:f0:75:53:6b:cb:28:
         9d:e6:0a:af:dc:46:da:83:64:a3:57:f0:18:d4:5b:75:ac:de:
         ab:16:ea:1a:d4:89:f7:c9:7b:1d:40:96:1b:e0:b8:04:88:d2:
         4e:ca:75:df:52:b0:77:b3:79:0f:31:4d:3b:5d:88:8b:06:2a:
         4c:08:a7:7b:fb:0e:82:43:2e:80:a4:29:2f:7e:9d:48:8d:4b:
         3b:ca:74:3d:38:7a:4d:22:40:74:93:e0:63:04:7c:f6:ae:29:
         2c:cb:f8:e9:75:55:de:0b:a1:53:81:78:d9:bf:71:80:97:fe:
         69:ce:01:50:fc:e7:89:2f:72:49:d8:90:3b:a1:0a:72:6f:c6:
         1f:6b:5c:69:ac:d3:cb:0a:0f:88:c3:92:de:34:b5:86:a0:5f:
         f6:76:de:50
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEANYD0TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NDFmYmQzMDQzNDZhMTQ0MjNlNWNlNWNhZmM2OTUzYTNlMjQ1YjIzMB4XDTIyMDEw
MTA3MDAyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWZjODU4ZTQ4MjFh
MDRmYjA4M2UxZTA0Y2I3M2JjYmU0YjhjM2RkMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOiia79dgGR69OpuROH4/YsJSYp+DSgDXkp+S26E0dTpikh3
tZ+b6okuYSnmx67cqhqQupP8BcupfxmxPY6ZyHiTsc7zK0STMtZ5Kbit0z7iX7ty
+HcH+eK8Uv4OnOyaM4phCsc68bnYtOWLsb3bLDRTEL0lq/i9yYvw6ZT9dcRa4Ljm
jZMubuDS/zWMCRgABJbt0fUFZhlmZ4GGgK8B7pznFeLsl3AJS2NJbBMjT5zz8ekX
6ft7+eG/mD02xmbmqCXZp3Nnpnq0KitDgwMnLcu56+auGdkW3z344rmxHCyTsbdW
17F0HAMCoA2ASl8nbplUkpNrgRx1QtV8EzmBKCkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRfyFjkghoE+wg+HgTLc7y+S4w90zAfBgNVHSMEGDAWgBREH70wQ0ahRCPl
zlyvxpU6PiRbIzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1JCLTlNRU5Hb1VRajVjNWNyOGFWT2o0a1d5TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWYvNmUyNmVhLWEwZjItNDM4Ny1hYzllLWI0ZDExNzc5OGQ0MS8x
L1g4aFk1SUlhQlBzSVBoNEV5M084dmt1TVBkTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYv
NmUyNmVhLWEwZjItNDM4Ny1hYzllLWI0ZDExNzc5OGQ0MS8xL1JCLTlNRU5Hb1VR
ajVjNWNyOGFWT2o0a1d5TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMJogzANBgkqhkiG9w0BAQsFAAOC
AQEAMSUDo+fDctnXDa5uV7ajTKPVz80/y+gE2ZWhJNzV1D261nbcd3Z8RLxC5PTj
THyLhBm72BgBYrE2/Sqx8O2CL96tRncTScx6kASHeN13KnKL/ZQEI4ZJn1xXuTi5
v1GHPsGjCiuQ8HVTa8soneYKr9xG2oNko1fwGNRbdazeqxbqGtSJ98l7HUCWG+C4
BIjSTsp131Kwd7N5DzFNO12IiwYqTAine/sOgkMugKQpL36dSI1LO8p0PTh6TSJA
dJPgYwR89q4pLMv46XVV3guhU4F42b9xgJf+ac4BUPzniS9ySdiQO6EKcm/GH2tc
aazTywoPiMOS3jS1hqBf9nbeUA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:35 2024 by rpki-client on console-ams.rpki-client.org