Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/uuvqy6CeAKLtYXTWXwYDJqz8IEE.roa
File:                     uuvqy6CeAKLtYXTWXwYDJqz8IEE.roa (raw, json)
Hash identifier:          n/FkY8NJG+16esDRrGzwyPLrmJ/NznvoToSQzeLJSyw=
Subject key identifier:   BA:EB:EA:CB:A0:9E:00:A2:ED:61:74:D6:5F:06:03:26:AC:FC:20:41
Certificate issuer:       /CN=07bb5bfa64b0d5d18a3061a9869b1ca57172eaba
Certificate serial:       01920E0D0BABEB80FD1B6F5B103AEBA584FA
Authority key identifier: 07:BB:5B:FA:64:B0:D5:D1:8A:30:61:A9:86:9B:1C:A5:71:72:EA:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/uuvqy6CeAKLtYXTWXwYDJqz8IEE.roa
Signing time:             Fri 20 Sep 2024 06:09:48 +0000
ROA not before:           Fri 20 Sep 2024 06:09:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     203815
IP address blocks:        185.155.76.0/22 maxlen: 24
                          2a05:b8c0::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:0e:0d:0b:ab:eb:80:fd:1b:6f:5b:10:3a:eb:a5:84:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07bb5bfa64b0d5d18a3061a9869b1ca57172eaba
        Validity
            Not Before: Sep 20 06:09:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=baebeacba09e00a2ed6174d65f060326acfc2041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3c:d6:46:0b:1a:ac:d3:6b:62:3b:c0:c3:29:
                    c7:c5:ef:58:97:7e:a0:53:7f:6c:67:01:14:7f:3d:
                    0b:fe:3e:da:28:c4:93:45:a2:50:ae:a8:53:89:08:
                    29:58:af:cc:b1:d5:69:5b:c0:99:ce:bb:26:da:7c:
                    0e:88:e9:0e:58:40:12:20:ff:1a:2e:e1:4e:a9:ca:
                    1e:6e:19:8d:70:16:5f:79:d3:1b:d5:0e:fc:81:99:
                    38:91:22:ae:05:16:92:df:6e:a0:4e:53:b1:a2:39:
                    82:01:e0:a4:6a:72:78:27:ed:29:ff:78:58:05:85:
                    ec:fb:1b:9a:a5:0d:04:ff:bb:d6:a7:33:a0:a5:e0:
                    cf:38:99:f8:a4:73:d3:6b:f8:c0:8d:97:41:96:d9:
                    dc:43:87:73:d7:51:a8:cd:ae:18:40:95:e0:34:d7:
                    65:fb:f4:ff:98:cb:df:95:de:ac:67:78:05:c6:81:
                    24:02:da:c5:24:80:f5:56:63:77:2c:1a:33:8a:85:
                    f5:c3:ab:64:0c:19:4f:fe:2d:3f:4b:53:9c:8c:8c:
                    0a:cb:68:87:1f:e8:e8:5b:7f:cc:f2:b8:2f:fb:11:
                    c4:98:d4:ca:32:50:c3:23:da:f9:33:da:ba:14:8a:
                    f6:37:c1:65:8f:e9:76:cf:7f:cf:96:8d:39:61:f9:
                    09:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EB:EA:CB:A0:9E:00:A2:ED:61:74:D6:5F:06:03:26:AC:FC:20:41
            X509v3 Authority Key Identifier:
                keyid:07:BB:5B:FA:64:B0:D5:D1:8A:30:61:A9:86:9B:1C:A5:71:72:EA:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/uuvqy6CeAKLtYXTWXwYDJqz8IEE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.76.0/22
                IPv6:
                  2a05:b8c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         95:65:a2:a6:e1:6d:c5:51:c8:43:3d:3e:d9:b5:84:55:d0:07:
         d4:3e:f2:c6:24:0c:46:8e:10:60:0c:72:0a:4e:71:d9:2d:94:
         07:5e:c4:9d:28:e1:37:b4:c1:02:8b:30:1c:2f:3f:df:2c:f1:
         3c:4c:77:19:e4:9f:76:15:12:d8:9b:38:76:8f:2c:76:49:64:
         9b:c1:bf:a4:2c:a0:80:49:58:5e:63:c6:0e:24:41:38:04:62:
         22:1f:95:66:39:fa:f6:13:13:7e:12:79:f7:78:b9:5f:70:b7:
         43:aa:26:43:0d:21:67:df:20:4e:ca:ac:4a:b0:fd:ab:40:25:
         fc:c7:a6:17:5f:2a:7c:f5:6f:58:45:fa:12:74:a8:f4:0d:35:
         39:c5:76:ed:3f:b7:3e:ba:19:7e:c6:ad:f5:1a:70:b5:fe:b2:
         1f:a3:3f:56:51:e3:79:4e:4c:6b:b5:99:34:fa:a0:95:54:4c:
         b9:54:14:8f:11:43:d2:4b:14:6a:45:3b:bf:ca:86:65:6a:2a:
         6d:fb:1c:57:05:8c:f4:bc:b3:50:1f:67:47:08:28:76:48:32:
         67:c0:ae:80:cb:86:3f:16:9f:4d:9a:a6:99:75:a6:44:23:90:
         73:d6:46:83:c1:5b:c2:82:32:a8:77:c9:76:0c:6b:5f:96:ae:
         ce:24:32:9e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZIODQur64D9G29bEDrrpYT6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YmI1YmZhNjRiMGQ1ZDE4YTMwNjFhOTg2OWIxY2E1NzE3
MmVhYmEwHhcNMjQwOTIwMDYwOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWViZWFjYmEwOWUwMGEyZWQ2MTc0ZDY1ZjA2MDMyNmFjZmMyMDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTzWRgsarNNrYjvAwynHxe9Yl36g
U39sZwEUfz0L/j7aKMSTRaJQrqhTiQgpWK/MsdVpW8CZzrsm2nwOiOkOWEASIP8a
LuFOqcoebhmNcBZfedMb1Q78gZk4kSKuBRaS326gTlOxojmCAeCkanJ4J+0p/3hY
BYXs+xuapQ0E/7vWpzOgpeDPOJn4pHPTa/jAjZdBltncQ4dz11Goza4YQJXgNNdl
+/T/mMvfld6sZ3gFxoEkAtrFJID1VmN3LBozioX1w6tkDBlP/i0/S1OcjIwKy2iH
H+joW3/M8rgv+xHEmNTKMlDDI9r5M9q6FIr2N8Flj+l2z3/Plo05YfkJLQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLrr6sugngCi7WF01l8GAyas/CBBMB8GA1UdIwQY
MBaAFAe7W/pksNXRijBhqYabHKVxcuq6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjd0Yi1tU3cxZEdLTUdHcGhwc2NwWEZ5NnJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hY2ZkOTgtYjczNi00OWY0LWE2NjAt
ZjkwOGQyMTcxOGY3LzEvdXV2cXk2Q2VBS0x0WVhUV1h3WURKcXo4SUVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hY2ZkOTgtYjczNi00OWY0LWE2NjAtZjkwOGQyMTcxOGY3
LzEvQjd0Yi1tU3cxZEdLTUdHcGhwc2NwWEZ5NnJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZtMMA0E
AgACMAcDBQMqBbjAMA0GCSqGSIb3DQEBCwUAA4IBAQCVZaKm4W3FUchDPT7ZtYRV
0AfUPvLGJAxGjhBgDHIKTnHZLZQHXsSdKOE3tMECizAcLz/fLPE8THcZ5J92FRLY
mzh2jyx2SWSbwb+kLKCASVheY8YOJEE4BGIiH5VmOfr2ExN+Enn3eLlfcLdDqiZD
DSFn3yBOyqxKsP2rQCX8x6YXXyp89W9YRfoSdKj0DTU5xXbtP7c+uhl+xq31GnC1
/rIfoz9WUeN5TkxrtZk0+qCVVEy5VBSPEUPSSxRqRTu/yoZlaipt+xxXBYz0vLNQ
H2dHCCh2SDJnwK6Ay4Y/Fp9NmqaZdaZEI5Bz1kaDwVvCgjKod8l2DGtflq7OJDKe
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:59 2024 by rpki-client on console.sobornost.net