Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/0YdOK5e4gH-F70gAHnNf2oZQMoU.roa
File:                     0YdOK5e4gH-F70gAHnNf2oZQMoU.roa (raw, json)
Hash identifier:          ZVa4dWS8Fhl0Fzqm0KqzJZHWDF2hdd8oFEXrlC70Kmk=
Subject key identifier:   D1:87:4E:2B:97:B8:80:7F:85:EF:48:00:1E:73:5F:DA:86:50:32:85
Certificate issuer:       /CN=2686d7e106b130ba85788dac3734cb628b139c49
Certificate serial:       08954639
Authority key identifier: 26:86:D7:E1:06:B1:30:BA:85:78:8D:AC:37:34:CB:62:8B:13:9C:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JobX4QaxMLqFeI2sNzTLYosTnEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/0YdOK5e4gH-F70gAHnNf2oZQMoU.roa
Signing time:             Sat 01 Jan 2022 06:02:44 +0000
ROA not before:           Sat 01 Jan 2022 06:02:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29119
IP address blocks:        45.13.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144000569 (0x8954639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2686d7e106b130ba85788dac3734cb628b139c49
        Validity
            Not Before: Jan  1 06:02:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d1874e2b97b8807f85ef48001e735fda86503285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b9:d1:e4:85:64:79:f3:ed:12:fb:29:65:33:
                    58:6e:73:c8:57:5a:35:17:c3:45:03:cd:3f:1a:cb:
                    c3:e6:b4:5a:74:db:bb:0a:c0:65:c6:58:77:96:85:
                    57:1b:0a:03:c7:59:79:e1:31:6a:95:86:5c:9f:9c:
                    6e:26:c0:84:8a:48:6b:50:fb:47:b3:c3:0c:bd:56:
                    ef:b4:94:ac:83:1a:2e:37:26:08:f3:fa:86:f9:9e:
                    06:da:1c:b2:a3:b6:30:24:cb:9e:e0:c8:6b:b2:34:
                    0d:07:91:99:91:41:fd:86:d8:d7:a8:80:ba:ea:40:
                    40:90:30:6a:6f:95:cb:38:f9:bf:60:fd:01:81:09:
                    77:d0:af:db:3e:22:78:1e:e6:05:e2:0d:d0:2d:d7:
                    e2:03:c2:a5:d7:d2:60:33:c1:45:aa:c1:a6:ad:48:
                    49:7b:a3:45:89:a9:e2:f3:ee:39:6f:e7:e4:14:7c:
                    59:9b:46:15:60:03:fe:e4:a3:54:14:b2:2b:58:9b:
                    49:f2:92:f9:25:14:d9:37:c6:15:76:79:ae:61:4c:
                    d4:42:1e:67:ec:43:76:8d:a7:80:18:1e:e9:ca:e1:
                    59:a1:97:83:c5:8c:0d:ca:53:85:30:d3:03:c7:b1:
                    28:cf:3f:70:d4:f1:33:39:cf:76:d6:3c:45:12:cb:
                    5d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:87:4E:2B:97:B8:80:7F:85:EF:48:00:1E:73:5F:DA:86:50:32:85
            X509v3 Authority Key Identifier:
                keyid:26:86:D7:E1:06:B1:30:BA:85:78:8D:AC:37:34:CB:62:8B:13:9C:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JobX4QaxMLqFeI2sNzTLYosTnEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/0YdOK5e4gH-F70gAHnNf2oZQMoU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/JobX4QaxMLqFeI2sNzTLYosTnEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:a6:56:70:67:23:fa:ea:3d:3c:54:37:10:d4:e4:e5:67:0a:
         de:9c:43:5c:f9:c3:7a:0e:0d:94:3f:59:e7:5a:88:6d:dc:ef:
         a3:fa:c6:7c:00:39:34:60:95:d9:84:03:fb:24:10:8b:5a:c2:
         d6:ed:54:fa:17:03:b6:67:13:61:44:a2:ed:b9:c6:cb:05:3b:
         dd:b3:5a:f5:86:fa:81:2e:e6:ad:17:26:3c:9a:f4:1c:36:c3:
         d6:0a:f7:a6:c2:45:4e:64:df:bc:a3:f2:ce:6c:12:32:0a:5b:
         8a:d1:36:e0:80:9c:7c:8e:b8:24:dd:59:7b:d0:6b:59:13:dc:
         c1:dd:47:63:6c:b3:7e:01:fb:89:09:e1:66:1e:fc:95:fc:69:
         ad:d6:28:a0:c5:dc:22:fe:dc:e5:20:6a:96:33:c9:f3:d5:4e:
         22:05:37:a7:46:7a:6b:87:c3:8c:50:62:71:61:51:2e:7d:2a:
         25:52:87:94:f8:9a:6c:f6:ac:f2:82:b5:48:0d:59:e5:d3:73:
         d6:06:fb:06:e5:f8:5b:4e:95:4a:da:65:8a:7f:18:00:37:c9:
         9c:d4:a0:ed:93:1a:ba:a0:4a:e3:3e:26:ee:39:6a:44:ff:37:
         cb:90:b3:90:25:5f:47:b6:3c:8d:22:34:a1:b6:1e:bd:6b:ea:
         8d:60:91:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:43 2024 by rpki-client on console-fra.rpki-client.org