Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/idRNYFfV3hVgEwJa3uT6Lu3gacs.roa
File:                     idRNYFfV3hVgEwJa3uT6Lu3gacs.roa (raw, json)
Hash identifier:          KLOm5O3B9GjTJ7uHbKknMODKi0XVAQ6PSLKc3C61WrE=
Subject key identifier:   89:D4:4D:60:57:D5:DE:15:60:13:02:5A:DE:E4:FA:2E:ED:E0:69:CB
Certificate issuer:       /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial:       32498F
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/idRNYFfV3hVgEwJa3uT6Lu3gacs.roa
Signing time:             Tue 22 Mar 2022 11:36:40 +0000
ROA not before:           Tue 22 Mar 2022 11:36:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212792
IP address blocks:        45.155.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3295631 (0x32498f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
        Validity
            Not Before: Mar 22 11:36:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=89d44d6057d5de156013025adee4fa2eede069cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:83:55:c7:db:21:70:ea:aa:f1:d1:de:0d:e2:
                    0a:61:bd:3a:41:28:bc:a8:08:f3:d7:06:15:4b:e5:
                    e1:f5:11:7e:86:72:03:9f:18:48:ce:c3:41:81:a0:
                    12:40:16:e5:c9:58:e1:79:38:c9:2b:50:3e:f5:5c:
                    0a:d7:d0:af:c1:33:54:4c:1f:af:8e:5a:28:bb:6b:
                    93:bd:ec:47:b8:3c:e1:ca:cc:18:56:3f:a1:59:e2:
                    df:b0:01:e5:9e:ef:c2:0f:33:22:88:72:e4:e7:93:
                    13:1a:ad:44:21:30:42:b0:46:08:6f:2b:90:b2:e5:
                    dd:97:a2:d2:72:d0:cf:e6:58:23:1f:2a:7a:db:7c:
                    7c:c1:5c:be:26:38:7e:4f:3c:b3:1c:2a:27:bd:12:
                    3c:e4:e5:07:1f:72:e2:1d:95:68:39:8c:e3:98:c1:
                    f3:ed:ed:66:a0:98:ff:4f:51:6b:91:6a:b8:6f:cd:
                    31:7c:21:c4:c8:c1:37:a0:10:94:aa:7e:39:8f:8f:
                    fb:47:23:9f:62:55:a5:49:53:f0:4c:79:24:cf:95:
                    e7:fe:9c:71:39:7a:fc:f0:c6:02:9c:6d:07:bd:76:
                    03:54:5b:25:a6:95:98:92:7c:a8:db:f1:ae:ad:5c:
                    72:1f:aa:7b:6f:6c:3d:73:8d:ac:64:4f:91:a1:a2:
                    45:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D4:4D:60:57:D5:DE:15:60:13:02:5A:DE:E4:FA:2E:ED:E0:69:CB
            X509v3 Authority Key Identifier:
                keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/idRNYFfV3hVgEwJa3uT6Lu3gacs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:f5:a8:82:61:7b:32:c3:7a:dc:8a:54:08:f5:f5:65:d3:f1:
         1b:96:59:71:6a:51:15:76:4f:d4:0f:fd:ae:14:fd:50:7b:59:
         41:99:39:70:9a:78:0a:f4:a7:a6:24:f9:37:4b:37:45:5f:77:
         0e:1f:89:64:cc:b2:25:ef:4f:f1:6b:32:5e:08:99:8a:9d:99:
         fe:26:ac:6d:a9:5b:d2:2e:c8:eb:1d:48:15:95:bf:44:2a:73:
         26:0b:6a:17:9a:46:fb:60:3b:9b:c2:b9:2f:5c:cc:08:d9:b7:
         56:84:85:df:af:5a:3e:ee:51:b2:69:ac:d1:1f:28:ab:05:3d:
         e4:e6:d5:bf:1b:c3:f4:9f:b1:c4:93:86:eb:45:c1:81:06:83:
         16:f0:9e:88:bf:61:05:65:21:63:be:bc:13:fc:bc:f9:3b:ea:
         89:e3:51:02:ef:ed:e9:af:e1:8e:be:ba:1a:47:3e:21:fe:46:
         73:75:89:2d:60:7f:6f:c4:94:74:c9:17:61:ef:b4:44:75:ba:
         bb:18:34:50:b1:ae:a3:87:1b:b1:8d:d5:94:bf:8a:b0:23:54:
         e8:b8:2c:f4:52:8f:a9:3b:70:dc:57:07:05:44:f0:96:ff:59:
         2d:b3:ad:bc:65:c7:d0:95:ce:2a:2e:76:04:25:06:30:9d:e9:
         d2:1f:b4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:48 2024 by rpki-client on console-ams.rpki-client.org