Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/woye_5_a9JG4NbSNDJXIVPPOTTw.roa
File:                     woye_5_a9JG4NbSNDJXIVPPOTTw.roa (raw, json)
Hash identifier:          tYwYfZBlOj5gn3KvDrRVSSg1y40LYiLjhDeSgWgx8j0=
Subject key identifier:   C2:8C:9E:FF:9F:DA:F4:91:B8:35:B4:8D:0C:95:C8:54:F3:CE:4D:3C
Certificate issuer:       /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial:       01879502FA2E9FA93D71F269A5F25A2E3CD0
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/woye_5_a9JG4NbSNDJXIVPPOTTw.roa
Signing time:             Tue 18 Apr 2023 15:36:52 +0000
ROA not before:           Tue 18 Apr 2023 15:36:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47285
IP address blocks:        194.147.150.0/24 maxlen: 24
                          185.105.236.0/24 maxlen: 24
                          45.139.8.0/24 maxlen: 24
                          194.180.209.0/24 maxlen: 24
                          2a12:2600::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:95:02:fa:2e:9f:a9:3d:71:f2:69:a5:f2:5a:2e:3c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
        Validity
            Not Before: Apr 18 15:36:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c28c9eff9fdaf491b835b48d0c95c854f3ce4d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:af:6b:04:93:bf:0f:07:89:f3:6e:4b:1e:b5:
                    46:74:ec:2c:a1:84:ad:36:c1:b1:1f:e2:31:b6:86:
                    c4:f5:78:fa:e6:7a:bd:f8:89:e4:7e:8b:fd:2a:f5:
                    92:ee:dc:38:51:44:68:1f:85:d7:0a:f4:97:75:bc:
                    09:29:e8:07:93:57:74:85:f8:32:3a:03:4b:14:9a:
                    3e:57:9c:f4:99:74:a3:a2:66:09:2f:c8:9d:de:aa:
                    a8:c8:94:f7:3e:c9:1f:83:a9:5b:7b:15:fb:93:28:
                    31:a1:9a:72:da:db:54:c1:9d:ba:40:0f:10:d7:86:
                    e2:08:10:bb:63:67:f7:34:a4:19:1e:47:a9:fc:99:
                    ec:99:b7:ab:a8:6a:65:9a:b0:89:29:46:96:8d:65:
                    c9:3a:ef:38:9a:61:10:e8:5a:cb:2f:5d:43:2e:53:
                    b0:81:b7:09:6b:12:a0:0a:15:fa:28:8d:68:09:18:
                    76:bf:ba:33:63:77:30:bb:d4:93:0e:cb:ba:06:c6:
                    79:c2:9e:bf:df:36:48:ec:16:f3:7b:14:54:d2:7d:
                    a5:a0:73:d5:87:3c:03:ba:0d:cf:13:dd:18:90:a6:
                    ce:a5:a9:fc:d9:0b:c4:19:1a:cf:3a:34:77:a5:f7:
                    94:fa:f4:27:09:a6:96:28:b9:21:16:d0:05:c6:a7:
                    fa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8C:9E:FF:9F:DA:F4:91:B8:35:B4:8D:0C:95:C8:54:F3:CE:4D:3C
            X509v3 Authority Key Identifier:
                keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/woye_5_a9JG4NbSNDJXIVPPOTTw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.8.0/24
                  185.105.236.0/24
                  194.147.150.0/24
                  194.180.209.0/24
                IPv6:
                  2a12:2600::/29

    Signature Algorithm: sha256WithRSAEncryption
         91:68:3d:3f:a2:fe:7a:15:ec:dd:5f:98:54:71:c0:b6:cf:19:
         ab:01:16:07:15:f7:d1:9c:40:19:cf:1d:81:a9:57:88:2d:ee:
         67:9d:44:b2:80:2d:6c:0e:4b:78:9b:3d:23:f7:7c:66:8c:50:
         5b:03:8a:30:79:e7:46:d4:37:70:4d:40:5d:82:13:4e:67:b2:
         dc:9a:03:03:46:8b:db:b0:d7:81:f1:92:67:d3:95:73:76:b0:
         5a:4d:3b:1c:eb:1e:62:f3:14:e3:cb:a3:e0:42:6c:8d:97:b2:
         29:88:70:c8:98:06:3a:65:3c:6e:98:e8:4b:93:d9:85:ae:c8:
         d3:08:b3:8d:42:20:a4:43:b5:9d:9f:54:4d:46:51:26:a1:5d:
         9f:78:e5:cc:b2:aa:db:8f:ed:36:03:aa:97:01:f1:e5:06:a2:
         4c:a3:8d:8b:e7:ad:0d:b3:9d:39:a8:0c:dd:b9:ca:29:59:71:
         c3:43:36:1c:cb:f4:d3:1f:77:83:06:4b:13:72:7a:f0:35:aa:
         32:0e:97:c7:34:19:f0:0f:2b:f5:e8:c9:4c:37:67:48:7c:6a:
         a7:0c:6e:bd:1e:58:2e:00:c9:5f:df:26:3c:f7:1a:28:d8:7d:
         7c:92:28:a2:74:b0:38:04:8b:02:81:f0:5a:c3:91:ec:5d:f3:
         3b:92:92:21
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYeVAvoun6k9cfJppfJaLjzQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4N2I1OTRlNWU2NzEzYTViODBhNTQ4MWE1Y2U3MWU2NTJk
ODQ1NzMwHhcNMjMwNDE4MTUzNjUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjhjOWVmZjlmZGFmNDkxYjgzNWI0OGQwYzk1Yzg1NGYzY2U0ZDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK9rBJO/DweJ825LHrVGdOwsoYSt
NsGxH+IxtobE9Xj65nq9+Inkfov9KvWS7tw4UURoH4XXCvSXdbwJKegHk1d0hfgy
OgNLFJo+V5z0mXSjomYJL8id3qqoyJT3Pskfg6lbexX7kygxoZpy2ttUwZ26QA8Q
14biCBC7Y2f3NKQZHkep/JnsmberqGplmrCJKUaWjWXJOu84mmEQ6FrLL11DLlOw
gbcJaxKgChX6KI1oCRh2v7ozY3cwu9STDsu6BsZ5wp6/3zZI7BbzexRU0n2loHPV
hzwDug3PE90YkKbOpan82QvEGRrPOjR3pfeU+vQnCaaWKLkhFtAFxqf6xwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFMKMnv+f2vSRuDW0jQyVyFTzzk08MB8GA1UdIwQY
MBaAFMh7WU5eZxOluApUgaXOceZS2EVzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUh0WlRsNW5FNlc0Q2xTQnBjNXg1bExZUlhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84MjRmNzgtZGVlMi00N2JjLWFmMmYt
MzhjYjZlNDE2ZjNhLzEvd295ZV81X2E5Skc0TmJTTkRKWElWUFBPVFR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84MjRmNzgtZGVlMi00N2JjLWFmMmYtMzhjYjZlNDE2ZjNh
LzEveUh0WlRsNW5FNlc0Q2xTQnBjNXg1bExZUlhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQALYsIAwQA
uWnsAwQAwpOWAwQAwrTRMA0EAgACMAcDBQMqEiYAMA0GCSqGSIb3DQEBCwUAA4IB
AQCRaD0/ov56FezdX5hUccC2zxmrARYHFffRnEAZzx2BqVeILe5nnUSygC1sDkt4
mz0j93xmjFBbA4oweedG1DdwTUBdghNOZ7LcmgMDRovbsNeB8ZJn05VzdrBaTTsc
6x5i8xTjy6PgQmyNl7IpiHDImAY6ZTxumOhLk9mFrsjTCLONQiCkQ7Wdn1RNRlEm
oV2feOXMsqrbj+02A6qXAfHlBqJMo42L560Ns505qAzducopWXHDQzYcy/TTH3eD
BksTcnrwNaoyDpfHNBnwDyv16MlMN2dIfGqnDG69HlguAMlf3yY89xoo2H18kiii
dLA4BIsCgfBaw5HsXfM7kpIh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:24 2024 by rpki-client on console-fra.rpki-client.org