Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/e6O9NQbENpv5YM007Ep8efr-W44.roa
File:                     e6O9NQbENpv5YM007Ep8efr-W44.roa (raw, json)
Hash identifier:          FPkTqrlqltBdXVkLOFFT6HWLoXO6XoMe6h5g6haZXV0=
Subject key identifier:   7B:A3:BD:35:06:C4:36:9B:F9:60:CD:34:EC:4A:7C:79:FA:FE:5B:8E
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       01942824BC9C705947C86748804A48EE28A0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/e6O9NQbENpv5YM007Ep8efr-W44.roa
Signing time:             Thu 02 Jan 2025 17:51:23 +0000
ROA not before:           Thu 02 Jan 2025 17:51:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     211415
IP address blocks:        45.81.240.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:24:bc:9c:70:59:47:c8:67:48:80:4a:48:ee:28:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan  2 17:51:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7ba3bd3506c4369bf960cd34ec4a7c79fafe5b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:7f:b3:83:0f:e5:61:32:3e:88:46:33:14:
                    74:12:29:f8:5e:52:34:44:2c:d1:a6:33:5a:50:d2:
                    27:d5:c7:60:73:1f:3a:6c:7a:0a:17:55:ad:ea:f0:
                    77:3a:71:47:60:6f:fd:3a:94:58:ce:71:e6:e4:f1:
                    db:e4:66:d0:34:83:e3:e8:ba:d8:11:c9:80:dc:a3:
                    d0:87:4d:fd:3d:de:44:80:46:48:84:32:31:e3:0a:
                    cf:a6:e4:52:1f:6b:23:4e:6c:3e:1a:f3:76:6c:67:
                    04:b5:e1:e2:48:e9:08:80:51:95:3d:f9:f5:c9:de:
                    3a:64:e5:a1:15:59:c6:50:2b:83:c3:9f:de:29:69:
                    19:f2:15:4c:1f:78:48:61:13:de:d2:25:72:d2:db:
                    b9:b9:8d:71:9d:1c:e5:93:e7:72:ae:71:c9:22:e1:
                    8a:eb:b9:a6:56:2e:62:9c:be:63:2d:22:6a:bc:7a:
                    4d:fc:1e:9b:4a:a6:bf:b3:f2:fe:84:79:df:d0:0b:
                    62:76:f0:88:c5:da:05:cb:8a:47:09:ad:66:13:21:
                    57:22:6c:78:58:14:c5:a2:4e:7c:81:69:db:a4:93:
                    2c:e9:6a:ee:4f:b0:f6:c0:7f:54:60:c9:54:00:de:
                    cd:5b:ff:f7:a4:e2:29:c0:9c:a4:42:37:3c:74:4f:
                    ca:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A3:BD:35:06:C4:36:9B:F9:60:CD:34:EC:4A:7C:79:FA:FE:5B:8E
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/e6O9NQbENpv5YM007Ep8efr-W44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:a1:bb:9d:88:0c:db:49:c5:69:57:80:9c:18:9a:0e:de:a7:
         10:3d:7d:57:8c:c7:cf:e3:2a:59:e3:4d:f0:67:d6:24:15:00:
         17:4c:09:f2:7f:6a:58:26:da:04:9b:89:10:0e:18:b2:54:dd:
         29:f5:9e:7b:db:6c:93:2e:31:82:03:9e:5e:d0:d3:9f:b6:54:
         c8:f2:5e:fe:5a:2c:39:b9:95:e1:03:49:37:c0:72:3e:38:8b:
         86:59:0b:30:af:a0:30:2a:7c:69:94:98:25:02:5e:62:17:36:
         17:17:51:e1:6c:8d:11:38:64:53:6f:40:10:3c:95:a5:6b:d2:
         cf:80:d0:36:c1:6c:74:87:ed:da:ab:bf:15:e1:fd:00:d1:9f:
         cc:14:0e:b1:58:fa:09:4e:a2:0e:40:2e:af:d9:96:23:79:47:
         21:af:c4:92:c2:91:c8:5c:b3:d8:95:68:37:a5:ef:da:b5:db:
         98:35:b3:36:7e:c2:99:d8:b8:a1:ba:3e:0a:b6:64:4c:b6:26:
         93:c3:3b:85:bb:37:8a:1a:8e:69:23:44:58:e2:b1:b2:f0:0a:
         f1:ec:4b:eb:87:e7:f8:90:92:f4:14:e5:b7:81:77:c4:cb:79:
         98:0c:d1:65:8f:e5:99:56:f5:fd:ab:64:8d:fa:44:71:9c:e3:
         7b:72:a5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:26:19 2025 by rpki-client