Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/z1YHw9nziumEOG4keUeMDiSx7Mk.roa
File:                     z1YHw9nziumEOG4keUeMDiSx7Mk.roa (raw, json)
Hash identifier:          p35OeL7aiD9TcKiDi79YYt8fFdWtWxj3M3GWOyaJigA=
Subject key identifier:   CF:56:07:C3:D9:F3:8A:E9:84:38:6E:24:79:47:8C:0E:24:B1:EC:C9
Certificate issuer:       /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial:       04BD57B5
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/z1YHw9nziumEOG4keUeMDiSx7Mk.roa
Signing time:             Thu 16 Jun 2022 16:24:46 +0000
ROA not before:           Thu 16 Jun 2022 16:24:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61138
IP address blocks:        45.146.105.0/24 maxlen: 24
                          92.114.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79517621 (0x4bd57b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: Jun 16 16:24:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cf5607c3d9f38ae984386e2479478c0e24b1ecc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d1:c8:2a:83:f5:f9:9b:4d:f4:07:9b:86:b1:
                    78:01:fa:59:1d:9e:9f:90:41:f6:12:f7:91:2b:75:
                    93:26:1f:2c:fe:a4:87:f6:4d:31:13:0f:17:13:42:
                    6f:61:24:19:ae:70:ce:74:ee:e5:9a:2b:51:88:e8:
                    1b:39:85:fc:4c:1d:84:4d:f9:39:85:e0:6d:d3:9b:
                    e2:d4:3e:92:0c:09:67:ca:e1:7e:b1:4b:09:b4:67:
                    e6:0e:a5:5d:8c:23:a7:4a:d0:53:f5:81:95:23:c3:
                    93:9c:15:7c:97:e5:02:6f:82:d7:e9:ef:fc:f3:b0:
                    f8:0e:5f:43:87:4a:83:dd:28:25:10:66:ed:8e:97:
                    28:22:db:46:08:97:e5:8f:96:8c:f9:76:cb:6c:7e:
                    45:23:eb:51:cd:16:ce:4c:be:25:99:88:fd:16:27:
                    7b:db:cd:a6:76:3b:44:b9:87:11:cb:05:4c:fd:a5:
                    51:4c:19:f9:c9:27:74:89:5d:ab:c5:37:03:4c:d4:
                    3f:03:12:8b:ba:c4:36:d1:29:59:bd:3c:86:8a:60:
                    59:08:64:7a:e7:4d:b0:0b:f8:6c:05:39:ae:57:c0:
                    2e:1c:eb:9d:de:34:e8:9c:37:fa:40:29:10:e9:e3:
                    72:ea:63:f4:04:12:c9:44:b9:2c:51:fe:3c:eb:63:
                    d2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:56:07:C3:D9:F3:8A:E9:84:38:6E:24:79:47:8C:0E:24:B1:EC:C9
            X509v3 Authority Key Identifier:
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/z1YHw9nziumEOG4keUeMDiSx7Mk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.146.105.0/24
                  92.114.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:eb:b8:bb:fd:84:17:c6:b3:28:05:41:56:3b:15:cd:4b:80:
         5d:b8:ec:07:eb:74:9a:a3:7b:06:db:b3:39:1d:44:9c:cc:52:
         39:d2:62:cf:3e:2a:f9:4c:e2:9b:9a:e4:26:d4:d6:38:c3:3f:
         05:18:39:5b:0c:63:74:14:ef:2e:47:a8:53:64:b9:66:79:4f:
         6e:3a:5c:ea:f0:c3:2f:5d:ac:62:8d:86:e4:cb:e1:d3:74:9c:
         b3:d4:dd:bf:b5:ea:8a:28:b5:c9:47:7b:b8:e8:1a:87:cb:da:
         2a:f8:bb:d9:5e:6f:6c:c4:97:1a:87:41:19:cb:a4:eb:cc:85:
         59:ba:d9:55:dd:7a:aa:4a:33:28:f6:0d:4f:e8:ea:4d:4f:66:
         c8:c4:ac:26:a2:1f:16:e4:84:df:3d:92:b1:e8:08:bd:a2:0c:
         fa:30:6b:ee:55:73:e5:8b:ce:f6:78:28:2c:e3:dd:3d:24:a1:
         28:09:72:6b:ae:58:98:54:15:22:da:44:a4:33:68:dc:86:ea:
         e5:6e:ae:9b:32:2e:72:52:a6:b5:18:41:2a:f2:d3:72:3e:41:
         1f:66:d3:75:9e:3c:5d:a8:2d:df:25:8a:fa:0f:a8:13:55:fe:
         89:c3:cf:4b:55:63:43:ed:2d:a3:ad:ac:4a:61:0d:aa:83:83:
         b6:c1:97:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org