Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/teVImywHZZSnx-599gbmhvzsLos.roa
File:                     teVImywHZZSnx-599gbmhvzsLos.roa (raw, json)
Hash identifier:          2N012+o7ToajxzzSE9VNc+CCRpovwZeJABNEBjN7oSU=
Subject key identifier:   B5:E5:48:9B:2C:07:65:94:A7:C7:EE:7D:F6:06:E6:86:FC:EC:2E:8B
Certificate issuer:       /CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Certificate serial:       01936E3D956CF5A7C38942DC53A5B71D643B
Authority key identifier: 4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/teVImywHZZSnx-599gbmhvzsLos.roa
Signing time:             Wed 27 Nov 2024 15:29:09 +0000
ROA not before:           Wed 27 Nov 2024 15:29:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215682
IP address blocks:        193.143.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6e:3d:95:6c:f5:a7:c3:89:42:dc:53:a5:b7:1d:64:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
        Validity
            Not Before: Nov 27 15:29:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b5e5489b2c076594a7c7ee7df606e686fcec2e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:97:87:61:41:65:f4:5e:48:44:e2:05:41:8a:
                    5a:d6:7c:f2:09:3b:d5:4b:0d:b3:0d:b2:2e:2b:1a:
                    da:79:b5:2a:b9:a8:a1:de:fa:91:e3:ff:91:c7:82:
                    23:05:47:5c:d5:d5:be:ac:a7:2d:23:5d:0e:2a:9b:
                    3e:ca:db:ec:9e:7b:9b:68:75:42:84:4c:62:1d:b5:
                    30:38:49:3d:10:a8:b7:75:0e:93:ec:aa:96:79:01:
                    ca:11:c7:f5:ef:5e:d0:0f:6c:c5:6d:62:be:ce:67:
                    1e:53:2c:f5:ac:d3:75:3a:a0:83:28:79:eb:25:3a:
                    29:b9:fa:4b:2e:cc:65:4a:67:2a:86:38:b1:52:b7:
                    e3:ff:6d:7d:d6:88:7a:6e:b6:a4:7d:6c:d9:62:46:
                    dd:f9:5c:62:c5:f5:46:90:88:5b:fd:c9:b5:b0:af:
                    82:1f:5f:b1:df:e0:25:9f:3c:c2:de:31:43:c9:91:
                    c0:34:ec:41:93:d2:62:53:11:b1:a7:71:8a:37:36:
                    b1:ce:c6:48:db:21:8e:b9:a9:be:2d:0a:7c:04:c5:
                    1d:1d:82:0f:c7:7a:15:e3:86:64:49:2c:9e:ff:5a:
                    21:0f:38:c1:98:d8:89:a6:a8:fa:5a:a6:e1:68:af:
                    0d:6a:d9:a0:42:b4:57:35:6b:9b:76:f0:e9:6c:5f:
                    37:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E5:48:9B:2C:07:65:94:A7:C7:EE:7D:F6:06:E6:86:FC:EC:2E:8B
            X509v3 Authority Key Identifier:
                keyid:4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/teVImywHZZSnx-599gbmhvzsLos.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.143.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:49:dc:de:b7:53:2f:8a:bf:c0:f0:f0:17:97:6d:f6:b6:1e:
         db:69:e9:5e:a9:78:0d:72:59:66:e0:ca:d8:9f:62:44:05:43:
         42:c3:65:44:91:a6:fb:ed:11:3b:17:49:6e:08:cb:80:ed:77:
         99:80:45:1c:13:f7:40:c5:92:4b:ac:af:bc:15:60:26:5e:77:
         c5:8b:64:d8:21:4f:fb:06:44:30:53:25:ff:bb:95:de:9f:15:
         2f:1a:c9:02:01:e3:d9:9e:da:28:4c:7e:51:44:60:00:a2:98:
         a3:3a:45:1c:01:98:84:38:55:1c:66:fb:cb:ba:49:86:44:02:
         47:48:33:dd:7c:5d:a1:60:db:31:51:8d:e1:a3:77:09:f4:d7:
         ec:d4:53:0d:70:a8:e2:32:1c:67:00:53:c3:89:f4:51:12:e9:
         22:4a:49:2c:0d:09:79:4c:77:b9:b0:69:63:1c:49:13:50:54:
         ae:2f:ca:ab:dd:5f:22:17:b4:df:f8:0a:0a:24:b4:a3:7e:1c:
         59:66:e1:77:c8:89:b9:9f:68:d2:4c:c6:8e:e5:b5:1a:79:71:
         e7:2d:91:48:7a:88:ec:fc:f4:51:54:6d:50:56:a3:3d:a0:81:
         32:e2:19:ae:b6:1f:47:36:88:9f:19:f2:63:0e:71:8f:ce:b5:
         9f:6f:19:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNuPZVs9afDiULcU6W3HWQ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMDRiY2MyZmVlMWMzYTJlMDQzODgyNjBlMTA2NDRiNjVl
NzAxZjMwHhcNMjQxMTI3MTUyOTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWU1NDg5YjJjMDc2NTk0YTdjN2VlN2RmNjA2ZTY4NmZjZWMyZThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpeHYUFl9F5IROIFQYpa1nzyCTvV
Sw2zDbIuKxraebUquaih3vqR4/+Rx4IjBUdc1dW+rKctI10OKps+ytvsnnubaHVC
hExiHbUwOEk9EKi3dQ6T7KqWeQHKEcf1717QD2zFbWK+zmceUyz1rNN1OqCDKHnr
JTopufpLLsxlSmcqhjixUrfj/2191oh6brakfWzZYkbd+VxixfVGkIhb/cm1sK+C
H1+x3+AlnzzC3jFDyZHANOxBk9JiUxGxp3GKNzaxzsZI2yGOuam+LQp8BMUdHYIP
x3oV44ZkSSye/1ohDzjBmNiJpqj6WqbhaK8NatmgQrRXNWubdvDpbF83MwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLXlSJssB2WUp8fuffYG5ob87C6LMB8GA1UdIwQY
MBaAFEoEvML+4cOi4EOIJg4QZEtl5wHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2dTOHd2N2h3NkxnUTRnbURoQmtTMlhuQWZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81OTk3NDAtYjk2ZS00OWM0LWI2MDQt
NjNmMTk3ZmIxYzk2LzEvdGVWSW15d0haWlNueC01OTlnYm1odnpzTG9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi81OTk3NDAtYjk2ZS00OWM0LWI2MDQtNjNmMTk3ZmIxYzk2
LzEvU2dTOHd2N2h3NkxnUTRnbURoQmtTMlhuQWZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY9OMA0G
CSqGSIb3DQEBCwUAA4IBAQB+Sdzet1Mvir/A8PAXl232th7baeleqXgNcllm4MrY
n2JEBUNCw2VEkab77RE7F0luCMuA7XeZgEUcE/dAxZJLrK+8FWAmXnfFi2TYIU/7
BkQwUyX/u5XenxUvGskCAePZntooTH5RRGAAopijOkUcAZiEOFUcZvvLukmGRAJH
SDPdfF2hYNsxUY3ho3cJ9Nfs1FMNcKjiMhxnAFPDifRREukiSkksDQl5THe5sGlj
HEkTUFSuL8qr3V8iF7Tf+AoKJLSjfhxZZuF3yIm5n2jSTMaO5bUaeXHnLZFIeojs
/PRRVG1QVqM9oIEy4hmuth9HNoifGfJjDnGPzrWfbxne
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:34 2024 by rpki-client on console.sobornost.net