Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/a5IgigEdVGDu-CZi68WUDZZ51Sg.roa
File:                     a5IgigEdVGDu-CZi68WUDZZ51Sg.roa (raw, json)
Hash identifier:          fBwQX92dMhhq1GKA1S4PWfUn2tWwdSyJuoI/UpElNhY=
Subject key identifier:   6B:92:20:8A:01:1D:54:60:EE:F8:26:62:EB:C5:94:0D:96:79:D5:28
Certificate issuer:       /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial:       01937C1FFAF28AC14E65B9EF9DD5ABC58B3C
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/a5IgigEdVGDu-CZi68WUDZZ51Sg.roa
Signing time:             Sat 30 Nov 2024 08:11:30 +0000
ROA not before:           Sat 30 Nov 2024 08:11:30 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     197071
IP address blocks:        81.31.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:7c:1f:fa:f2:8a:c1:4e:65:b9:ef:9d:d5:ab:c5:8b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
        Validity
            Not Before: Nov 30 08:11:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6b92208a011d5460eef82662ebc5940d9679d528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8e:f9:f3:63:c7:cc:ec:a7:d1:f5:3d:d8:45:
                    90:46:20:64:70:15:40:88:50:35:0c:04:93:63:53:
                    70:ba:77:3b:bb:8c:0b:33:09:0c:2e:73:be:7d:e6:
                    be:68:7e:0b:3a:fb:df:5f:91:5a:97:83:4d:6b:99:
                    da:39:60:86:6e:36:15:23:eb:0f:14:f9:d7:17:e4:
                    e3:97:76:43:3f:25:18:ae:c3:5a:c8:04:f9:4e:fc:
                    ea:4d:1f:75:b7:d7:fe:ec:b1:c2:ac:39:9a:ca:af:
                    8d:c0:a8:d5:f4:08:65:6a:c9:3d:96:77:de:1a:77:
                    d4:03:67:e7:3c:40:c2:93:2f:31:d0:3e:28:69:96:
                    60:02:11:c3:82:b6:c1:3b:50:7a:34:aa:78:1f:ff:
                    a5:dc:4e:ae:7a:22:27:4d:cc:0c:7c:45:92:b2:36:
                    15:15:82:a9:c0:bc:c3:2c:cd:1c:55:4b:b1:30:8f:
                    62:0e:8c:a4:48:97:6f:0e:a8:f5:66:d8:58:79:de:
                    d0:fc:31:41:70:9e:91:3e:fa:0c:57:08:45:92:0c:
                    a7:90:75:ed:a3:b2:22:35:4d:43:33:68:a6:53:f7:
                    72:78:f8:11:6b:f7:09:0e:b7:68:24:d5:3d:3e:e7:
                    55:a3:17:41:c4:52:4b:f5:04:eb:ba:a4:b0:95:c0:
                    95:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:92:20:8A:01:1D:54:60:EE:F8:26:62:EB:C5:94:0D:96:79:D5:28
            X509v3 Authority Key Identifier:
                keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/a5IgigEdVGDu-CZi68WUDZZ51Sg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.31.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:09:11:b2:8b:b1:83:7b:6c:e5:58:02:7f:a1:65:8c:b8:84:
         02:44:c4:95:6e:fc:21:84:cb:3a:ff:ae:6c:7b:ec:c2:3f:c1:
         b2:f3:fe:69:c7:a6:ed:6f:e7:71:23:1d:bb:f1:7b:4e:68:8d:
         97:99:d7:d1:f1:f2:8c:0b:23:b0:2f:95:6c:33:73:4d:97:87:
         7a:92:1d:b7:b1:6d:9d:30:56:db:f9:dc:ba:a2:75:d1:bf:54:
         60:1c:f2:20:7f:e8:45:e1:ff:ff:01:f6:02:35:ae:12:80:43:
         b9:50:1f:c5:ec:56:a8:f6:0d:47:e4:5f:9d:e6:7a:53:fc:1e:
         8c:f4:a0:f7:89:31:60:8b:9b:c3:8a:70:24:db:63:f9:92:4c:
         58:cf:79:47:8e:12:fb:3b:de:fb:05:50:b2:3e:ef:06:31:84:
         f0:25:8a:c9:bd:c5:4a:3d:8a:ce:15:fe:23:c8:2d:58:2b:7a:
         fd:8d:7b:13:d9:7f:19:59:eb:9d:96:29:34:2d:61:cf:ee:15:
         2f:0c:23:83:9f:83:6e:46:6e:c0:cf:74:27:04:c8:93:ec:98:
         4c:c4:78:a2:5f:22:d5:d9:a1:e4:2f:dd:0d:d1:62:89:9c:70:
         1e:8e:00:03:90:3d:3c:31:3f:c0:ae:f3:50:37:a8:8e:52:c0:
         7a:ea:dd:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZN8H/ryisFOZbnvndWrxYs8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4OGIxMDI0ZWEwNTZlNWVkNDk4ZjZlOWRkYzIwNjMyYmRm
NmM5YzUwHhcNMjQxMTMwMDgxMTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjkyMjA4YTAxMWQ1NDYwZWVmODI2NjJlYmM1OTQwZDk2NzlkNTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y7582PHzOyn0fU92EWQRiBkcBVA
iFA1DASTY1Nwunc7u4wLMwkMLnO+fea+aH4LOvvfX5Fal4NNa5naOWCGbjYVI+sP
FPnXF+Tjl3ZDPyUYrsNayAT5TvzqTR91t9f+7LHCrDmayq+NwKjV9Ahlask9lnfe
GnfUA2fnPEDCky8x0D4oaZZgAhHDgrbBO1B6NKp4H/+l3E6ueiInTcwMfEWSsjYV
FYKpwLzDLM0cVUuxMI9iDoykSJdvDqj1ZthYed7Q/DFBcJ6RPvoMVwhFkgynkHXt
o7IiNU1DM2imU/dyePgRa/cJDrdoJNU9PudVoxdBxFJL9QTruqSwlcCVsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGuSIIoBHVRg7vgmYuvFlA2WedUoMB8GA1UdIwQY
MBaAFFiLECTqBW5e1Jj26d3CBjK99snFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2Qt
NTY2MjhhNDZkZjQwLzEvYTVJZ2lnRWRWR0R1LUNaaTY4V1VEWlo1MVNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2QtNTY2MjhhNDZkZjQw
LzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR/HMA0G
CSqGSIb3DQEBCwUAA4IBAQBjCRGyi7GDe2zlWAJ/oWWMuIQCRMSVbvwhhMs6/65s
e+zCP8Gy8/5px6btb+dxIx278XtOaI2XmdfR8fKMCyOwL5VsM3NNl4d6kh23sW2d
MFbb+dy6onXRv1RgHPIgf+hF4f//AfYCNa4SgEO5UB/F7Fao9g1H5F+d5npT/B6M
9KD3iTFgi5vDinAk22P5kkxYz3lHjhL7O977BVCyPu8GMYTwJYrJvcVKPYrOFf4j
yC1YK3r9jXsT2X8ZWeudlik0LWHP7hUvDCODn4NuRm7Az3QnBMiT7JhMxHiiXyLV
2aHkL90N0WKJnHAejgADkD08MT/ArvNQN6iOUsB66t3q
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:25 2024 by rpki-client on console.sobornost.net