Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/SLXZ2C1tPoa6m7BrvTjPrlsoOYQ.roa
File:                     SLXZ2C1tPoa6m7BrvTjPrlsoOYQ.roa (raw, json)
Hash identifier:          vdHFyN7337BQvI2FoQ8B2LNbAx2UzVJ5w4BMmbACn2A=
Subject key identifier:   48:B5:D9:D8:2D:6D:3E:86:BA:9B:B0:6B:BD:38:CF:AE:5B:28:39:84
Certificate issuer:       /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial:       0182CBAB4631C47AE58CEC53C46C989177A4
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/SLXZ2C1tPoa6m7BrvTjPrlsoOYQ.roa
Signing time:             Tue 23 Aug 2022 17:06:15 +0000
ROA not before:           Tue 23 Aug 2022 17:06:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44258
IP address blocks:        45.132.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:cb:ab:46:31:c4:7a:e5:8c:ec:53:c4:6c:98:91:77:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: Aug 23 17:06:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=48b5d9d82d6d3e86ba9bb06bbd38cfae5b283984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0a:25:12:ce:61:43:1d:20:0b:ca:29:14:b1:
                    94:7a:fd:60:ff:0c:ae:da:d5:9a:bc:dd:23:b1:50:
                    ab:96:39:c2:b4:b3:04:11:fd:3b:6f:77:3c:a0:cd:
                    c5:8e:de:52:f0:80:84:60:d3:47:b2:f6:dd:72:d5:
                    58:9b:4f:58:e8:c5:99:fc:0b:2f:35:c1:9b:a0:29:
                    72:68:25:d3:33:01:c0:f0:dd:20:4e:fa:f5:5b:86:
                    ad:8d:d4:02:b9:37:c9:ff:89:94:84:38:af:a6:0b:
                    43:50:e9:9f:5e:f7:08:73:88:1e:f0:25:55:a5:93:
                    b3:1a:21:0d:1f:73:d7:13:c5:1b:d3:ef:73:28:e6:
                    c3:34:ca:8d:54:00:b4:eb:9e:da:e4:e6:5b:93:67:
                    94:96:1d:5e:f1:52:00:8e:38:49:3a:6d:a7:09:d1:
                    49:1b:5d:8c:a8:20:bc:18:7e:79:a8:ea:6f:df:aa:
                    4f:65:95:9c:dc:e5:f6:13:e4:93:a7:e6:7f:94:e2:
                    52:3e:d6:5f:87:d5:90:c6:e4:2c:ae:3c:cf:aa:3b:
                    8d:4a:29:33:24:13:a7:5d:1e:c0:55:cb:fc:83:ee:
                    6d:52:e7:6f:6a:0a:40:08:c4:ed:ec:b6:e1:3d:eb:
                    e5:83:b8:f5:fa:de:77:23:b6:c9:25:63:86:d4:8a:
                    cb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B5:D9:D8:2D:6D:3E:86:BA:9B:B0:6B:BD:38:CF:AE:5B:28:39:84
            X509v3 Authority Key Identifier:
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/SLXZ2C1tPoa6m7BrvTjPrlsoOYQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:3a:1d:1e:76:e9:ed:98:97:5e:28:49:b5:07:e4:33:fa:cc:
         1a:68:12:4c:35:bc:6d:0f:f1:d8:28:e6:9a:d1:67:35:a7:01:
         54:7d:18:72:47:39:dc:a6:71:92:eb:eb:b0:31:31:65:a6:d3:
         3d:78:42:e8:64:68:c7:fe:27:74:e6:3e:4f:82:53:69:d2:bc:
         ed:5c:d7:01:06:06:42:b4:3e:b2:e6:a3:10:3b:9a:81:8f:b6:
         c4:4d:72:cc:84:35:19:d1:17:e5:7d:b3:2c:33:53:b7:bf:0d:
         77:ff:c3:e5:b5:c3:50:26:9b:0d:1a:87:1e:eb:1e:a5:c0:7e:
         04:00:5e:eb:57:4e:37:c4:6f:e7:30:a6:2d:4c:cb:ae:7e:80:
         9f:e0:5e:dd:37:e5:ff:e1:ad:d6:0f:6b:26:3b:27:fd:30:38:
         5f:1c:4e:9d:ff:84:10:1d:dd:0f:92:ff:ec:8a:ce:5e:e4:5a:
         5c:e6:9a:5c:f7:81:ce:95:1c:1f:96:61:0e:ce:2c:f4:fc:b1:
         bb:56:17:3e:43:08:87:02:2c:96:64:88:dc:5c:f5:2e:8a:1c:
         14:45:04:c4:7b:53:3a:e9:80:0a:d6:35:0f:fc:94:24:40:1d:
         43:14:1d:5f:0a:36:0a:3c:b8:46:af:d8:76:42:f5:ed:c8:4c:
         71:7c:e7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org