Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ee84b7-ae27-4ee5-952f-64da5c10cd1f/1/f6YyyU9K2mIYZs9poVDHCGcQeVk.roa
File:                     f6YyyU9K2mIYZs9poVDHCGcQeVk.roa (raw, json)
Hash identifier:          ZQbnFwdRFT3Kb29m3j5zt50gJFpG53fY7P9AnqWyCc8=
Subject key identifier:   7F:A6:32:C9:4F:4A:DA:62:18:66:CF:69:A1:50:C7:08:67:10:79:59
Certificate issuer:       /CN=450f9ed05fe03f38cfa53d6a85db3b79bffe8c91
Certificate serial:       0182EDF91E3BC923979486962281721BAFF1
Authority key identifier: 45:0F:9E:D0:5F:E0:3F:38:CF:A5:3D:6A:85:DB:3B:79:BF:FE:8C:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQ-e0F_gPzjPpT1qhds7eb_-jJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/ee84b7-ae27-4ee5-952f-64da5c10cd1f/1/f6YyyU9K2mIYZs9poVDHCGcQeVk.roa
Signing time:             Tue 30 Aug 2022 08:58:22 +0000
ROA not before:           Tue 30 Aug 2022 08:58:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60741
IP address blocks:        45.132.56.0/24 maxlen: 24
                          45.132.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:ed:f9:1e:3b:c9:23:97:94:86:96:22:81:72:1b:af:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450f9ed05fe03f38cfa53d6a85db3b79bffe8c91
        Validity
            Not Before: Aug 30 08:58:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7fa632c94f4ada621866cf69a150c70867107959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:25:16:7e:85:35:5c:93:32:f6:b0:2e:91:53:
                    bb:1a:5b:b4:d5:78:c5:bf:b9:3f:74:8f:f8:f9:ab:
                    91:9b:57:25:da:2b:41:66:3c:35:65:25:09:de:87:
                    b1:17:f6:ff:b4:02:48:ca:b5:32:cf:e2:d9:0c:53:
                    86:a5:4d:a0:74:a0:c4:70:3c:a1:d8:2b:69:5c:4f:
                    51:8e:dd:0d:24:32:5f:00:90:02:99:a3:50:af:57:
                    84:fa:09:c3:5e:d9:d8:c6:0a:c8:48:6e:15:cf:17:
                    df:cc:5a:d2:7d:d0:c6:77:61:9a:a3:5b:bd:63:b0:
                    95:d6:1d:93:ce:a4:ce:3f:c1:50:56:2d:5f:16:1a:
                    ff:f3:24:62:60:fd:71:d6:12:f0:39:07:61:60:71:
                    c7:8b:d7:2d:d7:24:1f:0f:85:0e:39:7a:1e:21:0a:
                    0c:98:94:26:13:7b:91:ed:34:d7:2c:3b:d0:fe:31:
                    94:13:6e:72:c4:65:42:14:f8:36:d3:ef:5c:d7:a1:
                    23:e1:f8:02:6e:97:0a:18:c2:89:d5:b9:15:44:1e:
                    7f:31:82:c6:e2:ac:e8:d9:4f:bd:56:0b:8e:71:c9:
                    32:fe:59:4d:9f:7f:e2:48:18:b8:5c:be:f5:44:a3:
                    99:3f:77:d6:54:15:e0:ac:4b:a4:a7:ad:f6:5b:dc:
                    03:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A6:32:C9:4F:4A:DA:62:18:66:CF:69:A1:50:C7:08:67:10:79:59
            X509v3 Authority Key Identifier:
                keyid:45:0F:9E:D0:5F:E0:3F:38:CF:A5:3D:6A:85:DB:3B:79:BF:FE:8C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQ-e0F_gPzjPpT1qhds7eb_-jJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ee84b7-ae27-4ee5-952f-64da5c10cd1f/1/f6YyyU9K2mIYZs9poVDHCGcQeVk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ee84b7-ae27-4ee5-952f-64da5c10cd1f/1/RQ-e0F_gPzjPpT1qhds7eb_-jJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.56.0/24
                  45.132.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:5b:0a:7b:60:ba:13:83:00:79:36:4c:1f:ba:18:86:66:74:
         c9:26:31:6b:07:08:06:2a:6b:ef:96:fa:ed:1c:af:c0:5d:2f:
         78:0c:8c:1e:12:87:5c:79:9b:97:be:54:4b:2e:cf:95:ff:67:
         66:01:29:7f:c8:ee:2d:a6:e9:59:72:88:2d:44:e0:b4:4b:34:
         58:27:27:46:6f:e9:58:4e:da:c4:d1:66:6f:9b:91:95:99:07:
         38:31:96:17:08:33:7b:15:52:1d:2e:ec:26:6f:d7:06:1e:94:
         83:3c:7a:ff:a6:28:9c:2f:7b:ba:23:7c:d9:ef:bc:1e:42:58:
         a1:f5:89:1f:60:fc:a2:7e:41:82:ab:30:3b:be:38:b6:3d:67:
         28:37:6a:d5:aa:61:7a:0e:89:f3:6b:f1:7a:22:60:0e:a0:de:
         63:d2:43:64:16:18:35:a7:7f:4e:c6:bc:24:8f:7b:f0:12:cb:
         3d:dd:fc:9a:94:50:0b:14:2e:05:6f:52:99:48:81:39:48:d5:
         be:c5:d1:3e:36:0a:c2:66:5a:9c:df:97:86:b9:d3:f9:0e:36:
         c4:53:8b:cc:67:29:1a:c2:37:77:a4:45:70:e1:1c:e0:8c:fa:
         a8:92:7a:0f:c3:30:64:a5:34:ea:33:f3:66:1a:c3:07:fe:99:
         ae:b6:21:95
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYLt+R47ySOXlIaWIoFyG6/xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MGY5ZWQwNWZlMDNmMzhjZmE1M2Q2YTg1ZGIzYjc5YmZm
ZThjOTEwHhcNMjIwODMwMDg1ODIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmE2MzJjOTRmNGFkYTYyMTg2NmNmNjlhMTUwYzcwODY3MTA3OTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSUWfoU1XJMy9rAukVO7Glu01XjF
v7k/dI/4+auRm1cl2itBZjw1ZSUJ3oexF/b/tAJIyrUyz+LZDFOGpU2gdKDEcDyh
2CtpXE9Rjt0NJDJfAJACmaNQr1eE+gnDXtnYxgrISG4VzxffzFrSfdDGd2Gao1u9
Y7CV1h2TzqTOP8FQVi1fFhr/8yRiYP1x1hLwOQdhYHHHi9ct1yQfD4UOOXoeIQoM
mJQmE3uR7TTXLDvQ/jGUE25yxGVCFPg20+9c16Ej4fgCbpcKGMKJ1bkVRB5/MYLG
4qzo2U+9VguOccky/llNn3/iSBi4XL71RKOZP3fWVBXgrEukp632W9wDAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH+mMslPStpiGGbPaaFQxwhnEHlZMB8GA1UdIwQY
MBaAFEUPntBf4D84z6U9aoXbO3m//oyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlEtZTBGX2dQempQcFQxcWhkczdlYl8takpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9lZTg0YjctYWUyNy00ZWU1LTk1MmYt
NjRkYTVjMTBjZDFmLzEvZjZZeXlVOUsybUlZWnM5cG9WREhDR2NRZVZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9lZTg0YjctYWUyNy00ZWU1LTk1MmYtNjRkYTVjMTBjZDFm
LzEvUlEtZTBGX2dQempQcFQxcWhkczdlYl8takpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYQ4AwQA
LYQ7MA0GCSqGSIb3DQEBCwUAA4IBAQB2Wwp7YLoTgwB5NkwfuhiGZnTJJjFrBwgG
KmvvlvrtHK/AXS94DIweEodceZuXvlRLLs+V/2dmASl/yO4tpulZcogtROC0SzRY
JydGb+lYTtrE0WZvm5GVmQc4MZYXCDN7FVIdLuwmb9cGHpSDPHr/piicL3u6I3zZ
77weQlih9YkfYPyifkGCqzA7vji2PWcoN2rVqmF6Donza/F6ImAOoN5j0kNkFhg1
p39Oxrwkj3vwEss93fyalFALFC4Fb1KZSIE5SNW+xdE+NgrCZlqc35eGudP5DjbE
U4vMZykawjd3pEVw4RzgjPqoknoPwzBkpTTqM/NmGsMH/pmutiGV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:37 2024 by rpki-client on console-fra.rpki-client.org