Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/944a87-a607-4552-9537-788b443b939f/1/IvF9jphy5Wv_ZNchWyYgF5I6gQQ.roa
File:                     IvF9jphy5Wv_ZNchWyYgF5I6gQQ.roa (raw, json)
Hash identifier:          CoYJRSmXgfnZJI0PtK/GeeDb80den9bBD/REVtxRvjU=
Subject key identifier:   22:F1:7D:8E:98:72:E5:6B:FF:64:D7:21:5B:26:20:17:92:3A:81:04
Certificate issuer:       /CN=196509a881e59ffafaa31cf48bf5e2761bb822ed
Certificate serial:       0130D380
Authority key identifier: 19:65:09:A8:81:E5:9F:FA:FA:A3:1C:F4:8B:F5:E2:76:1B:B8:22:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWUJqIHln_r6oxz0i_Xidhu4Iu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/944a87-a607-4552-9537-788b443b939f/1/IvF9jphy5Wv_ZNchWyYgF5I6gQQ.roa
Signing time:             Sat 01 Jan 2022 11:03:18 +0000
ROA not before:           Sat 01 Jan 2022 11:03:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        185.149.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19977088 (0x130d380)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196509a881e59ffafaa31cf48bf5e2761bb822ed
        Validity
            Not Before: Jan  1 11:03:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=22f17d8e9872e56bff64d7215b262017923a8104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8e:ec:73:a2:19:6d:fc:e6:c7:32:ba:14:1b:
                    e4:a4:9d:bd:e6:f8:b7:ec:9c:9d:89:ce:17:f5:b1:
                    1f:b0:e0:b6:f7:d6:0a:92:82:77:e9:ae:92:ad:4e:
                    3a:03:57:1b:b2:52:3d:38:34:fc:ed:2f:82:6d:5d:
                    4e:2a:16:ca:1e:ae:8f:48:ff:83:05:c6:db:23:f6:
                    8d:1a:67:97:51:d7:d4:f6:c6:f6:f1:94:7e:09:67:
                    10:6b:1c:c4:a6:d2:62:cb:46:aa:7e:90:75:f6:3f:
                    b7:3c:fa:00:8f:02:c1:32:df:7b:2b:a6:f3:7f:10:
                    33:10:92:d0:89:15:42:1c:c7:85:c9:e7:f4:dd:c9:
                    f9:d1:39:22:92:46:23:c2:32:65:55:9e:5a:6c:f2:
                    41:5d:42:63:41:ca:bb:18:9f:3c:71:34:40:6d:d6:
                    50:0a:4e:cc:1d:3a:09:60:3a:4f:89:48:b5:49:16:
                    1a:f4:02:d6:f8:a3:f8:bd:4a:66:f1:ef:9e:c0:ca:
                    bc:87:de:72:d0:48:96:50:31:38:41:8b:ef:17:60:
                    a7:b3:5d:c3:3d:ae:d2:6f:1d:53:70:8c:d2:cb:04:
                    bb:1b:94:86:eb:86:9c:86:18:1b:0e:8d:bd:5b:25:
                    b4:d9:2e:0b:b5:48:e7:80:cd:ee:e5:fb:68:19:cc:
                    a6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F1:7D:8E:98:72:E5:6B:FF:64:D7:21:5B:26:20:17:92:3A:81:04
            X509v3 Authority Key Identifier:
                keyid:19:65:09:A8:81:E5:9F:FA:FA:A3:1C:F4:8B:F5:E2:76:1B:B8:22:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWUJqIHln_r6oxz0i_Xidhu4Iu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/944a87-a607-4552-9537-788b443b939f/1/IvF9jphy5Wv_ZNchWyYgF5I6gQQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/944a87-a607-4552-9537-788b443b939f/1/GWUJqIHln_r6oxz0i_Xidhu4Iu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.149.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:8a:70:54:33:3f:2c:88:2d:7a:4a:b3:42:43:1a:db:09:d3:
         f2:8f:8f:05:88:04:6e:03:39:60:c7:93:c6:d2:40:1b:8e:91:
         89:ce:6d:43:37:78:de:a8:5e:12:0a:29:01:85:ee:08:e7:51:
         2e:29:c7:eb:47:38:43:24:4f:b8:ea:e5:fc:68:99:43:60:a6:
         dd:32:f4:22:f6:b6:87:df:d4:18:f3:69:68:69:24:15:33:c0:
         6c:8e:b4:d7:3d:c4:d1:07:33:76:e6:de:f7:00:a0:c4:c4:de:
         15:f1:d4:79:03:d4:05:11:28:53:1a:d9:d9:0b:0a:a8:52:dd:
         20:55:b2:c3:91:63:02:71:64:a1:01:3a:04:71:0e:73:cb:66:
         dc:82:44:89:26:15:17:af:a7:49:f2:48:f6:5f:44:a7:50:cd:
         7b:e2:16:09:4f:b8:36:b4:6e:71:ae:46:49:45:2e:39:1f:df:
         82:6c:e2:f5:01:98:54:71:16:a8:4c:d2:22:c0:cc:57:ba:5b:
         09:22:b6:3c:34:fb:69:9a:46:39:b1:c3:1f:fe:fc:f0:a2:94:
         53:64:70:ce:fc:59:a3:d0:73:09:a6:77:da:86:b3:f7:cd:1f:
         c9:81:4b:1d:c3:33:1b:23:de:2e:c5:5f:ea:53:f5:97:8f:c5:
         eb:3e:3a:db
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEATDTgDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OTY1MDlhODgxZTU5ZmZhZmFhMzFjZjQ4YmY1ZTI3NjFiYjgyMmVkMB4XDTIyMDEw
MTExMDMxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjJmMTdkOGU5ODcy
ZTU2YmZmNjRkNzIxNWIyNjIwMTc5MjNhODEwNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIWO7HOiGW385scyuhQb5KSdveb4t+ycnYnOF/WxH7DgtvfW
CpKCd+mukq1OOgNXG7JSPTg0/O0vgm1dTioWyh6uj0j/gwXG2yP2jRpnl1HX1PbG
9vGUfglnEGscxKbSYstGqn6QdfY/tzz6AI8CwTLfeyum838QMxCS0IkVQhzHhcnn
9N3J+dE5IpJGI8IyZVWeWmzyQV1CY0HKuxifPHE0QG3WUApOzB06CWA6T4lItUkW
GvQC1vij+L1KZvHvnsDKvIfectBIllAxOEGL7xdgp7Ndwz2u0m8dU3CM0ssEuxuU
huuGnIYYGw6NvVsltNkuC7VI54DN7uX7aBnMplcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQi8X2OmHLla/9k1yFbJiAXkjqBBDAfBgNVHSMEGDAWgBQZZQmogeWf+vqj
HPSL9eJ2G7gi7TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dXVUpxSUhsbl9yNm94ejBpX1hpZGh1NEl1MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmQvOTQ0YTg3LWE2MDctNDU1Mi05NTM3LTc4OGI0NDNiOTM5Zi8x
L0l2RjlqcGh5NVd2X1pOY2hXeVlnRjVJNmdRUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQv
OTQ0YTg3LWE2MDctNDU1Mi05NTM3LTc4OGI0NDNiOTM5Zi8xL0dXVUpxSUhsbl9y
Nm94ejBpX1hpZGh1NEl1MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmVlzANBgkqhkiG9w0BAQsFAAOC
AQEABYpwVDM/LIgtekqzQkMa2wnT8o+PBYgEbgM5YMeTxtJAG46Ric5tQzd43qhe
EgopAYXuCOdRLinH60c4QyRPuOrl/GiZQ2Cm3TL0Iva2h9/UGPNpaGkkFTPAbI60
1z3E0Qczdube9wCgxMTeFfHUeQPUBREoUxrZ2QsKqFLdIFWyw5FjAnFkoQE6BHEO
c8tm3IJEiSYVF6+nSfJI9l9Ep1DNe+IWCU+4NrRuca5GSUUuOR/fgmzi9QGYVHEW
qEzSIsDMV7pbCSK2PDT7aZpGObHDH/788KKUU2RwzvxZo9BzCaZ32oaz980fyYFL
HcMzGyPeLsVf6lP1l4/F6z462w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:54 2024 by rpki-client on console-fra.rpki-client.org