Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1f898-91d2-46ab-8285-08904b7b5559/1/SzFSE2qJG1L_4yzs394O9gi46pc.roa
File:                     SzFSE2qJG1L_4yzs394O9gi46pc.roa (raw, json)
Hash identifier:          osXXYUK7qiCyqKOROb3qnH3wpl6Sv3W2g4IXhde4r90=
Subject key identifier:   4B:31:52:13:6A:89:1B:52:FF:E3:2C:EC:DF:DE:0E:F6:08:B8:EA:97
Certificate issuer:       /CN=fb483ef4cdf6606a3eda98cee8f39b8fde105e10
Certificate serial:       0181F465061484A19D59E7AD9F28C8F25EEF
Authority key identifier: FB:48:3E:F4:CD:F6:60:6A:3E:DA:98:CE:E8:F3:9B:8F:DE:10:5E:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0g-9M32YGo-2pjO6PObj94QXhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c1f898-91d2-46ab-8285-08904b7b5559/1/SzFSE2qJG1L_4yzs394O9gi46pc.roa
Signing time:             Tue 12 Jul 2022 21:51:10 +0000
ROA not before:           Tue 12 Jul 2022 21:51:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        185.232.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f4:65:06:14:84:a1:9d:59:e7:ad:9f:28:c8:f2:5e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb483ef4cdf6606a3eda98cee8f39b8fde105e10
        Validity
            Not Before: Jul 12 21:51:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4b3152136a891b52ffe32cecdfde0ef608b8ea97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2c:ea:6e:a7:4e:c1:9b:a1:f9:c2:80:87:af:
                    10:51:b7:fd:5d:a1:22:d2:32:d1:44:e9:cc:1d:4e:
                    bf:e8:76:e6:aa:b4:4a:42:75:5e:d3:4c:48:81:87:
                    78:18:ed:93:9c:27:55:f6:f8:5f:1a:8d:82:bd:e1:
                    02:90:ce:b4:69:ac:82:ad:2c:0a:d4:74:61:b0:9e:
                    6d:45:dc:22:6f:4e:22:6b:f4:eb:46:a0:e3:a6:4d:
                    a3:c8:fe:80:a0:1d:aa:20:42:fc:45:b4:41:a0:48:
                    70:ad:6f:f1:b8:7e:3c:cd:ad:a3:66:33:67:2a:97:
                    bb:67:ad:cd:3a:53:e4:11:bd:5f:49:5b:27:be:9f:
                    23:b1:95:c3:0d:c3:f5:e5:ea:ca:bc:d0:61:6e:95:
                    e2:f9:cc:d1:e0:3a:05:54:c3:14:7e:dd:1a:b8:2c:
                    0c:1d:4a:a4:b8:66:77:f3:92:da:79:94:14:c9:bc:
                    84:c6:5c:f6:dc:c4:a3:b6:72:df:33:47:5c:9e:75:
                    de:cc:9f:19:d1:de:46:e8:7a:18:43:7e:8b:5c:48:
                    fa:86:12:d0:61:2c:95:e1:3f:b4:80:36:06:de:66:
                    5b:65:94:bd:9f:df:71:22:60:a2:df:76:b9:42:b4:
                    5c:78:64:8c:00:a4:26:be:4b:c2:3d:25:43:80:b2:
                    ae:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:31:52:13:6A:89:1B:52:FF:E3:2C:EC:DF:DE:0E:F6:08:B8:EA:97
            X509v3 Authority Key Identifier:
                keyid:FB:48:3E:F4:CD:F6:60:6A:3E:DA:98:CE:E8:F3:9B:8F:DE:10:5E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0g-9M32YGo-2pjO6PObj94QXhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1f898-91d2-46ab-8285-08904b7b5559/1/SzFSE2qJG1L_4yzs394O9gi46pc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1f898-91d2-46ab-8285-08904b7b5559/1/1-0g-9M32YGo-2pjO6PObj94QXhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.232.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:20:3d:31:ac:8c:b9:c9:8a:7d:17:be:29:65:61:b2:3a:c1:
         77:eb:10:33:b5:53:a9:08:c6:27:b8:d0:0c:fe:fb:a8:7a:a0:
         41:a3:66:2c:2a:0b:05:3e:fb:89:62:95:82:de:4a:84:5e:f4:
         36:a6:ee:18:b0:4f:5d:18:40:e0:c8:62:58:fa:87:d0:f6:1e:
         d0:0d:51:5a:d4:5f:36:f2:9f:be:93:a4:76:26:72:72:ec:11:
         50:fd:76:27:17:5e:8d:c9:cb:7b:d9:75:72:0b:67:c9:75:22:
         37:22:26:fb:f9:3d:b0:ca:bd:97:9e:47:f0:cb:c2:dd:5d:7e:
         e5:9b:a3:61:ed:4e:35:25:69:b0:14:d2:1e:b7:5f:1b:c7:57:
         22:08:22:1f:12:bd:46:da:ed:ca:6b:75:e3:a3:dc:fa:44:8f:
         3d:9d:7b:9d:87:84:9f:b5:12:9d:4e:7e:11:a0:01:61:00:13:
         03:21:51:ff:cb:04:58:a3:28:5e:ed:ab:a4:d0:0c:71:38:34:
         1e:3c:97:f2:a4:b4:17:6c:c4:c2:1f:9b:4e:9c:ed:94:01:e3:
         a0:40:5b:f9:44:ea:67:69:99:12:16:20:d9:40:c0:5d:03:d3:
         0c:c1:c2:2a:a0:15:10:8c:0f:e5:7b:73:2c:1a:b3:72:75:14:
         10:81:36:0a
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYH0ZQYUhKGdWeetnyjI8l7vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNDgzZWY0Y2RmNjYwNmEzZWRhOThjZWU4ZjM5YjhmZGUx
MDVlMTAwHhcNMjIwNzEyMjE1MTEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjMxNTIxMzZhODkxYjUyZmZlMzJjZWNkZmRlMGVmNjA4YjhlYTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiizqbqdOwZuh+cKAh68QUbf9XaEi
0jLRROnMHU6/6HbmqrRKQnVe00xIgYd4GO2TnCdV9vhfGo2CveECkM60aayCrSwK
1HRhsJ5tRdwib04ia/TrRqDjpk2jyP6AoB2qIEL8RbRBoEhwrW/xuH48za2jZjNn
Kpe7Z63NOlPkEb1fSVsnvp8jsZXDDcP15erKvNBhbpXi+czR4DoFVMMUft0auCwM
HUqkuGZ385LaeZQUybyExlz23MSjtnLfM0dcnnXezJ8Z0d5G6HoYQ36LXEj6hhLQ
YSyV4T+0gDYG3mZbZZS9n99xImCi33a5QrRceGSMAKQmvkvCPSVDgLKuJQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFEsxUhNqiRtS/+Ms7N/eDvYIuOqXMB8GA1UdIwQY
MBaAFPtIPvTN9mBqPtqYzujzm4/eEF4QMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0wZy05TTMyWUdvLTJwak82UE9iajk0UVhoQS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvYzFmODk4LTkxZDItNDZhYi04Mjg1
LTA4OTA0YjdiNTU1OS8xL1N6RlNFMnFKRzFMXzR5enMzOTRPOWdpNDZwYy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZmUvYzFmODk4LTkxZDItNDZhYi04Mjg1LTA4OTA0YjdiNTU1
OS8xLzEtMGctOU0zMllHby0ycGpPNlBPYmo5NFFYaEEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC56C8w
DQYJKoZIhvcNAQELBQADggEBAAsgPTGsjLnJin0XvillYbI6wXfrEDO1U6kIxie4
0Az++6h6oEGjZiwqCwU++4lilYLeSoRe9Dam7hiwT10YQODIYlj6h9D2HtANUVrU
Xzbyn76TpHYmcnLsEVD9dicXXo3Jy3vZdXILZ8l1IjciJvv5PbDKvZeeR/DLwt1d
fuWbo2HtTjUlabAU0h63XxvHVyIIIh8SvUba7cprdeOj3PpEjz2de52HhJ+1Ep1O
fhGgAWEAEwMhUf/LBFijKF7tq6TQDHE4NB48l/KktBdsxMIfm06c7ZQB46BAW/lE
6mdpmRIWINlAwF0D0wzBwiqgFRCMD+V7cywas3J1FBCBNgo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:41 2024 by rpki-client on console-ams.rpki-client.org