Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e1a66f-ea3b-4d10-9e2d-f5d9c2c27fe3/1/GX2LAkGQnltHz-qXFQ-rNpUapyk.roa
File:                     GX2LAkGQnltHz-qXFQ-rNpUapyk.roa (raw, json)
Hash identifier:          9TEHGpSLGI3CGwZ4PyDu+nHfLjmhq2rHdClubZLGSNE=
Subject key identifier:   19:7D:8B:02:41:90:9E:5B:47:CF:EA:97:15:0F:AB:36:95:1A:A7:29
Certificate issuer:       /CN=8115992494f84b601f919431d123614149babaee
Certificate serial:       617A
Authority key identifier: 81:15:99:24:94:F8:4B:60:1F:91:94:31:D1:23:61:41:49:BA:BA:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gRWZJJT4S2AfkZQx0SNhQUm6uu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/e1a66f-ea3b-4d10-9e2d-f5d9c2c27fe3/1/GX2LAkGQnltHz-qXFQ-rNpUapyk.roa
Signing time:             Mon 04 Apr 2022 15:13:23 +0000
ROA not before:           Mon 04 Apr 2022 15:13:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57783
IP address blocks:        91.231.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24954 (0x617a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8115992494f84b601f919431d123614149babaee
        Validity
            Not Before: Apr  4 15:13:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=197d8b0241909e5b47cfea97150fab36951aa729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9a:bd:3e:e9:3e:c5:03:ef:34:9c:fe:3d:c7:
                    89:44:9d:1c:29:33:b4:7b:e1:b0:1b:80:cd:30:cf:
                    4c:1b:e1:38:87:12:84:77:18:cb:65:3a:a9:51:59:
                    c1:88:58:57:5a:06:4b:17:3c:5d:8d:4b:29:21:60:
                    fc:55:30:4b:fa:39:92:de:58:cf:6b:03:c5:c8:72:
                    32:04:a2:18:39:94:d6:62:b0:b4:d0:25:a2:7d:b7:
                    b9:26:02:ab:9f:11:06:89:92:78:31:17:47:9a:2a:
                    72:77:ae:16:96:16:3c:35:9c:28:5b:8a:19:86:1c:
                    1a:b5:43:2c:f4:1b:79:03:34:b5:8e:2c:3c:46:59:
                    25:04:bc:19:73:18:cc:34:90:e6:71:37:b5:db:7d:
                    16:f8:7c:48:9d:52:fc:e4:d3:da:0b:ed:4a:f2:ac:
                    c5:55:85:ff:34:8c:ba:32:ac:af:e0:be:7b:bc:9c:
                    43:9d:3d:b8:55:64:2f:34:7c:95:b8:72:8a:25:0b:
                    1f:62:7b:2a:1c:07:cc:8c:e3:1b:43:c9:5a:90:bc:
                    3f:23:f4:af:6c:16:f6:bb:18:93:cb:d8:4d:df:15:
                    27:ba:62:26:b9:60:a2:49:06:1f:6f:64:e9:f6:78:
                    f9:7a:54:0c:54:01:ef:1f:ef:01:0c:76:76:83:35:
                    f8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7D:8B:02:41:90:9E:5B:47:CF:EA:97:15:0F:AB:36:95:1A:A7:29
            X509v3 Authority Key Identifier:
                keyid:81:15:99:24:94:F8:4B:60:1F:91:94:31:D1:23:61:41:49:BA:BA:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRWZJJT4S2AfkZQx0SNhQUm6uu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1a66f-ea3b-4d10-9e2d-f5d9c2c27fe3/1/GX2LAkGQnltHz-qXFQ-rNpUapyk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1a66f-ea3b-4d10-9e2d-f5d9c2c27fe3/1/gRWZJJT4S2AfkZQx0SNhQUm6uu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.231.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:14:5b:ec:ee:8c:bd:fe:54:9d:84:af:cc:65:60:e6:3d:06:
         25:cb:4a:76:ef:92:be:47:79:2f:ca:cb:72:f3:be:d0:64:71:
         4d:ac:52:fc:a0:35:66:99:30:80:09:d9:8b:6a:17:d3:9f:3e:
         3a:66:49:8e:3e:05:cc:92:2f:90:d5:32:58:eb:d8:21:bb:0d:
         a7:ed:ef:fe:7f:80:50:71:a5:e0:67:f4:81:47:5a:4a:0a:a2:
         50:71:1f:57:d4:43:d1:8e:e1:c6:c8:aa:65:6c:69:6d:80:93:
         70:dd:31:ac:77:b8:8c:3c:b3:50:80:41:b5:e6:fe:40:3a:29:
         9b:ad:5b:27:91:d6:ad:d1:51:06:98:f0:4b:95:d8:15:7c:7e:
         d1:55:13:c0:ab:01:12:4f:87:27:d0:1e:50:80:e0:8c:f3:4c:
         69:d8:07:35:21:57:a9:05:6d:f0:26:a2:fc:55:52:65:cf:d5:
         b3:f9:dd:91:b8:be:83:cb:e2:4a:c2:53:c8:2c:7c:f2:25:eb:
         e3:33:e2:53:77:f6:8b:02:89:2b:b9:e7:11:de:c3:3e:9e:93:
         9c:6b:db:59:17:5c:2b:09:0f:31:35:b8:8b:70:f1:c8:58:2e:
         4d:bf:e9:58:11:e7:b0:51:3b:53:20:79:af:99:79:fb:f5:35:
         47:01:d8:43
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICYXowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODEx
NTk5MjQ5NGY4NGI2MDFmOTE5NDMxZDEyMzYxNDE0OWJhYmFlZTAeFw0yMjA0MDQx
NTEzMjNaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDE5N2Q4YjAyNDE5MDll
NWI0N2NmZWE5NzE1MGZhYjM2OTUxYWE3MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChmr0+6T7FA+80nP49x4lEnRwpM7R74bAbgM0wz0wb4TiHEoR3
GMtlOqlRWcGIWFdaBksXPF2NSykhYPxVMEv6OZLeWM9rA8XIcjIEohg5lNZisLTQ
JaJ9t7kmAqufEQaJkngxF0eaKnJ3rhaWFjw1nChbihmGHBq1Qyz0G3kDNLWOLDxG
WSUEvBlzGMw0kOZxN7XbfRb4fEidUvzk09oL7UryrMVVhf80jLoyrK/gvnu8nEOd
PbhVZC80fJW4coolCx9ieyocB8yM4xtDyVqQvD8j9K9sFva7GJPL2E3fFSe6Yia5
YKJJBh9vZOn2ePl6VAxUAe8f7wEMdnaDNfhJAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQUGX2LAkGQnltHz+qXFQ+rNpUapykwHwYDVR0jBBgwFoAUgRWZJJT4S2AfkZQx
0SNhQUm6uu4wDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEF
BQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9n
UldaSkpUNFMyQWZrWlF4MFNOaFFVbTZ1dTQuY2VyMIGNBggrBgEFBQcBCwSBgDB+
MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxUL2ZjL2UxYTY2Zi1lYTNiLTRkMTAtOWUyZC1mNWQ5YzJjMjdmZTMvMS9H
WDJMQWtHUW5sdEh6LXFYRlEtck5wVWFweWsucm9hMIGBBgNVHR8EejB4MHagdKBy
hnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjL2Ux
YTY2Zi1lYTNiLTRkMTAtOWUyZC1mNWQ5YzJjMjdmZTMvMS9nUldaSkpUNFMyQWZr
WlF4MFNOaFFVbTZ1dTQuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb5/MwDQYJKoZIhvcNAQELBQADggEB
AIkUW+zujL3+VJ2Er8xlYOY9BiXLSnbvkr5HeS/Ky3LzvtBkcU2sUvygNWaZMIAJ
2YtqF9OfPjpmSY4+BcySL5DVMljr2CG7Daft7/5/gFBxpeBn9IFHWkoKolBxH1fU
Q9GO4cbIqmVsaW2Ak3DdMax3uIw8s1CAQbXm/kA6KZutWyeR1q3RUQaY8EuV2BV8
ftFVE8CrARJPhyfQHlCA4IzzTGnYBzUhV6kFbfAmovxVUmXP1bP53ZG4voPL4krC
U8gsfPIl6+Mz4lN39osCiSu55xHewz6ek5xr21kXXCsJDzE1uItw8chYLk2/6VgR
57BRO1Mgea+Zefv1NUcB2EM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:49 2024 by rpki-client on console-fra.rpki-client.org