Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/NYsePd7_fKqJHzyX5IAjQ4Ho0Fw.roa
File:                     NYsePd7_fKqJHzyX5IAjQ4Ho0Fw.roa (raw, json)
Hash identifier:          csY6ZQEKwk3pwl09JX3lBw15jvSnHZZnPZdwY5GY6Ps=
Subject key identifier:   35:8B:1E:3D:DE:FF:7C:AA:89:1F:3C:97:E4:80:23:43:81:E8:D0:5C
Certificate issuer:       /CN=0515c15583b9ccff942cfb3eee04e2de95642662
Certificate serial:       018CC9BBE311FA8AB0868F10CA0DA33D4824
Authority key identifier: 05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/NYsePd7_fKqJHzyX5IAjQ4Ho0Fw.roa
Signing time:             Tue 02 Jan 2024 10:33:02 +0000
ROA not before:           Tue 02 Jan 2024 10:33:02 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     47190
IP address blocks:        195.216.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bb:e3:11:fa:8a:b0:86:8f:10:ca:0d:a3:3d:48:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0515c15583b9ccff942cfb3eee04e2de95642662
        Validity
            Not Before: Jan  2 10:33:02 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=358b1e3ddeff7caa891f3c97e480234381e8d05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:30:7a:64:37:38:d0:7c:cf:ad:f0:1b:0c:3b:
                    1f:0d:db:5c:12:1b:32:37:22:0c:71:6f:8e:3e:dc:
                    7a:ea:ed:a6:24:2d:df:93:09:7d:5d:9a:59:36:2f:
                    3f:41:e2:54:57:70:36:b2:a2:64:c0:5c:d1:74:2f:
                    a9:ea:b7:a3:60:4d:f7:bc:d9:13:95:99:3b:a6:f2:
                    a9:e2:b4:76:f2:ea:42:b5:4e:89:cb:90:01:7e:39:
                    5f:bb:1c:50:db:23:9a:87:e5:64:3d:ba:e1:9d:f9:
                    9f:94:38:de:0a:58:32:2c:ac:36:34:76:75:ad:00:
                    04:d1:69:24:4c:d4:53:3b:2e:cc:82:eb:79:8b:04:
                    6d:b8:a4:4f:c4:bd:74:e9:74:81:d5:85:e7:cf:ee:
                    57:78:6f:57:cd:df:70:ff:3a:1e:2b:27:79:57:dd:
                    9d:f0:eb:26:34:7d:cb:6e:f4:f0:07:e1:85:4d:db:
                    36:5b:9c:57:a8:35:c3:f8:f7:60:48:77:23:10:0e:
                    85:99:ea:37:ab:8a:32:ab:d2:7a:9a:71:b4:02:f2:
                    47:bf:09:e4:08:a7:ac:53:17:1c:e1:39:9b:e1:02:
                    9b:07:da:ff:57:0f:d1:8c:b3:07:ce:88:b8:43:f8:
                    e2:84:43:b8:14:1b:66:36:65:b5:59:e9:ab:97:44:
                    da:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8B:1E:3D:DE:FF:7C:AA:89:1F:3C:97:E4:80:23:43:81:E8:D0:5C
            X509v3 Authority Key Identifier:
                keyid:05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/NYsePd7_fKqJHzyX5IAjQ4Ho0Fw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.216.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:e2:83:e6:9a:96:6d:2e:3c:b0:db:20:27:b1:69:ef:71:92:
         2b:96:ca:e7:65:03:e7:f7:81:f7:90:a3:ba:65:18:72:af:fd:
         f9:0b:f6:47:69:94:5a:a3:a4:75:b9:4f:05:63:4f:28:35:99:
         00:7b:3b:82:d3:7e:f0:32:a2:bb:1a:5e:12:b6:f8:77:48:32:
         5a:da:be:60:60:72:a8:8f:00:40:e5:cc:1f:0a:52:aa:f3:96:
         b2:fb:19:56:a7:2e:3e:40:35:b8:c0:c3:e1:26:e8:ef:fa:77:
         83:05:82:57:e5:a8:83:31:c1:61:cc:d1:37:9f:cb:6a:c1:7a:
         83:44:fb:95:ae:1e:e0:02:49:8f:00:6d:b6:92:f5:18:31:5a:
         6e:19:8d:89:d8:4c:c7:4c:28:a7:bf:d2:c4:c3:50:57:f5:be:
         05:48:6a:fb:92:a2:45:7c:68:39:42:51:62:f2:9e:51:12:6d:
         91:29:ef:90:2e:3e:41:68:c0:60:6d:85:40:c2:a8:35:d5:c0:
         61:03:f8:80:33:02:75:53:b8:e3:83:7b:fc:8a:6c:11:6a:2a:
         9b:af:73:45:0c:41:53:55:6b:13:65:c3:1f:c6:3a:ba:1e:30:
         d0:15:ba:c7:cb:4b:17:a2:94:12:7e:b1:5a:da:d5:b1:20:20:
         ae:1c:99:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJu+MR+oqwho8Qyg2jPUgkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MTVjMTU1ODNiOWNjZmY5NDJjZmIzZWVlMDRlMmRlOTU2
NDI2NjIwHhcNMjQwMTAyMTAzMzAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNThiMWUzZGRlZmY3Y2FhODkxZjNjOTdlNDgwMjM0MzgxZThkMDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjB6ZDc40HzPrfAbDDsfDdtcEhsy
NyIMcW+OPtx66u2mJC3fkwl9XZpZNi8/QeJUV3A2sqJkwFzRdC+p6rejYE33vNkT
lZk7pvKp4rR28upCtU6Jy5ABfjlfuxxQ2yOah+VkPbrhnfmflDjeClgyLKw2NHZ1
rQAE0WkkTNRTOy7Mgut5iwRtuKRPxL106XSB1YXnz+5XeG9Xzd9w/zoeKyd5V92d
8OsmNH3LbvTwB+GFTds2W5xXqDXD+PdgSHcjEA6Fmeo3q4oyq9J6mnG0AvJHvwnk
CKesUxcc4Tmb4QKbB9r/Vw/RjLMHzoi4Q/jihEO4FBtmNmW1Wemrl0Ta4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDWLHj3e/3yqiR88l+SAI0OB6NBcMB8GA1UdIwQY
MBaAFAUVwVWDucz/lCz7Pu4E4t6VZCZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZTViYTYtNmY1MS00N2FiLTg1NDAt
YmUzZTdhOWNlMTViLzEvTllzZVBkN19mS3FKSHp5WDVJQWpRNEhvMEZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zZTViYTYtNmY1MS00N2FiLTg1NDAtYmUzZTdhOWNlMTVi
LzEvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9joMA0G
CSqGSIb3DQEBCwUAA4IBAQAD4oPmmpZtLjyw2yAnsWnvcZIrlsrnZQPn94H3kKO6
ZRhyr/35C/ZHaZRao6R1uU8FY08oNZkAezuC037wMqK7Gl4Stvh3SDJa2r5gYHKo
jwBA5cwfClKq85ay+xlWpy4+QDW4wMPhJujv+neDBYJX5aiDMcFhzNE3n8tqwXqD
RPuVrh7gAkmPAG22kvUYMVpuGY2J2EzHTCinv9LEw1BX9b4FSGr7kqJFfGg5QlFi
8p5REm2RKe+QLj5BaMBgbYVAwqg11cBhA/iAMwJ1U7jjg3v8imwRaiqbr3NFDEFT
VWsTZcMfxjq6HjDQFbrHy0sXopQSfrFa2tWxICCuHJn2
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:26 2024 by rpki-client on console.sobornost.net