Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/65e495-1b18-4c07-9031-2cd558281e95/1/E954FQ72_q0qxdF3ONZog6ZK9j4.roa
File:                     E954FQ72_q0qxdF3ONZog6ZK9j4.roa (raw, json)
Hash identifier:          fIDOeAZBVrLY6g0pv5bWJYQeFV26cUtD4AEyrWt7xdc=
Subject key identifier:   13:DE:78:15:0E:F6:FE:AD:2A:C5:D1:77:38:D6:68:83:A6:4A:F6:3E
Certificate issuer:       /CN=1e7e184abedf8b930451eb5a24b17c31782dfacc
Certificate serial:       02E914FE
Authority key identifier: 1E:7E:18:4A:BE:DF:8B:93:04:51:EB:5A:24:B1:7C:31:78:2D:FA:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hn4YSr7fi5MEUetaJLF8MXgt-sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/65e495-1b18-4c07-9031-2cd558281e95/1/E954FQ72_q0qxdF3ONZog6ZK9j4.roa
Signing time:             Sat 01 Jan 2022 15:07:37 +0000
ROA not before:           Sat 01 Jan 2022 15:07:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31400
IP address blocks:        45.133.9.0/24 maxlen: 24
                          45.133.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48829694 (0x2e914fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7e184abedf8b930451eb5a24b17c31782dfacc
        Validity
            Not Before: Jan  1 15:07:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=13de78150ef6fead2ac5d17738d66883a64af63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:48:71:35:87:85:47:e5:5d:eb:a3:3f:ea:5b:
                    99:f1:c1:9a:a9:72:80:4d:bd:1a:2d:0c:e3:43:74:
                    c2:af:ff:3a:75:0d:2d:04:53:12:ab:8e:29:78:04:
                    e2:54:ca:5a:77:a1:54:2a:8e:67:92:55:19:0b:d7:
                    fc:e3:40:9b:aa:7e:40:c9:ed:fe:12:0c:74:17:0b:
                    4c:20:c3:2d:30:e6:8f:8e:17:9b:2e:a4:74:a1:c7:
                    d3:50:87:56:45:28:00:f7:53:64:1b:b5:7e:5c:b8:
                    f2:3e:cf:3f:f4:6b:44:f4:2a:ba:31:32:3b:6d:f3:
                    27:44:d7:07:77:b3:27:4c:a6:dd:04:41:dd:da:a2:
                    90:00:e3:32:44:0b:f6:b1:98:61:f6:74:4c:06:07:
                    88:fa:c5:f2:68:36:30:ea:bf:18:fb:e6:72:f4:4b:
                    d7:a6:46:41:4c:ba:5e:f7:d3:b2:7e:31:ba:01:e5:
                    1c:8c:62:29:c3:59:28:d3:a7:cd:71:43:9f:06:9c:
                    24:0a:31:34:3c:ad:9e:6a:4e:2d:a0:b6:d5:01:30:
                    89:be:ee:a3:50:b5:43:6c:3d:38:87:9e:0d:db:1d:
                    5b:b0:23:05:b5:34:cb:bb:63:56:69:13:8f:3a:25:
                    df:fa:e6:c3:9a:7c:10:e1:68:d1:51:32:3e:e1:c1:
                    ff:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DE:78:15:0E:F6:FE:AD:2A:C5:D1:77:38:D6:68:83:A6:4A:F6:3E
            X509v3 Authority Key Identifier:
                keyid:1E:7E:18:4A:BE:DF:8B:93:04:51:EB:5A:24:B1:7C:31:78:2D:FA:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn4YSr7fi5MEUetaJLF8MXgt-sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/65e495-1b18-4c07-9031-2cd558281e95/1/E954FQ72_q0qxdF3ONZog6ZK9j4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/65e495-1b18-4c07-9031-2cd558281e95/1/Hn4YSr7fi5MEUetaJLF8MXgt-sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.9.0/24
                  45.133.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:10:79:e5:da:af:d6:5c:91:cf:4d:ea:91:21:10:74:ae:5f:
         64:af:a3:f4:74:29:8e:45:f4:f3:a0:5d:ce:5e:1c:ca:8f:87:
         b1:77:fe:28:ec:ee:dc:18:6e:19:d1:de:1e:49:ff:8d:ef:bd:
         61:17:17:c9:21:a1:6a:2c:8c:a7:63:bf:a5:b3:1b:a5:24:39:
         d2:e6:55:30:a7:d2:1d:bf:e4:ba:fa:f6:7d:7b:99:b9:75:c5:
         c5:13:8d:54:bf:37:88:a0:03:4f:a5:f6:cb:ec:26:10:f8:91:
         8a:f5:36:b5:92:ab:7b:d3:91:9a:51:34:51:25:e1:4c:c1:a1:
         26:e6:2c:83:ac:0a:b5:3a:c9:7d:58:7d:33:df:0c:aa:9d:32:
         6c:a0:c9:c9:f9:19:db:b9:b6:53:60:fe:78:8c:9a:ea:14:af:
         ba:00:5e:93:3e:1d:21:ed:fc:a2:7e:10:1d:a7:bb:03:16:99:
         b5:df:13:23:e0:94:26:01:46:97:05:2e:59:55:5c:93:a8:3d:
         9b:16:e4:d3:5d:12:44:74:41:36:4c:b3:7a:de:f2:6a:49:d2:
         cc:e1:78:f4:39:40:0a:58:91:bd:71:a2:d4:34:e1:c5:70:ad:
         20:04:60:b3:6f:20:ef:d4:ea:e1:eb:f2:49:ea:46:d8:f0:47:
         60:5a:d1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:51 2024 by rpki-client on console-fra.rpki-client.org