Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/D-F_XtRQhB0U87_ouv-bB97LEJg.roa
File:                     D-F_XtRQhB0U87_ouv-bB97LEJg.roa (raw, json)
Hash identifier:          JQUKeel5HeEq4jzjJQsdW4T2qZin19sDPrEOUvrw2dI=
Subject key identifier:   0F:E1:7F:5E:D4:50:84:1D:14:F3:BF:E8:BA:FF:9B:07:DE:CB:10:98
Certificate issuer:       /CN=45c491362b2e386197b9a0746124288bc0bcf031
Certificate serial:       018844230109527510352FE956BE70D8CEF2
Authority key identifier: 45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/D-F_XtRQhB0U87_ouv-bB97LEJg.roa
Signing time:             Mon 22 May 2023 15:45:24 +0000
ROA not before:           Mon 22 May 2023 15:45:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59814
IP address blocks:        45.8.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:44:23:01:09:52:75:10:35:2f:e9:56:be:70:d8:ce:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45c491362b2e386197b9a0746124288bc0bcf031
        Validity
            Not Before: May 22 15:45:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0fe17f5ed450841d14f3bfe8baff9b07decb1098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:22:a8:73:09:28:0d:ac:e4:11:89:d3:c3:e6:
                    be:90:b8:bd:ea:86:bf:49:d5:a1:a5:9b:0f:3a:c5:
                    0b:aa:d7:eb:69:68:fe:e0:dd:15:ef:0a:d2:2b:ba:
                    31:53:1c:df:92:c5:91:b6:eb:75:65:3f:85:83:32:
                    a5:45:89:3a:2c:5e:50:c9:15:87:9e:47:eb:99:af:
                    82:e1:0b:40:08:19:30:8d:7c:c8:8f:fb:f2:93:f4:
                    e6:8d:0d:30:61:84:9d:4e:08:98:12:67:7e:8d:de:
                    ee:97:c5:8b:95:e2:c2:ac:b5:fc:96:19:e9:59:b0:
                    07:46:b1:87:b4:cb:54:11:4e:95:e9:d3:9a:29:16:
                    42:38:63:5f:27:b4:56:0a:4b:1a:b2:a8:fe:dd:ea:
                    8e:6c:c4:dd:d6:89:a2:32:86:44:f4:a8:fc:1b:ba:
                    89:09:14:85:9a:e8:2f:61:76:24:bb:d4:e3:3f:8f:
                    f2:06:a6:24:17:8a:93:05:05:1e:4a:bd:bc:9d:f7:
                    c3:5b:29:f8:77:e7:1a:d9:f8:96:4d:05:3f:38:00:
                    d7:e9:07:65:05:52:21:08:d7:55:9b:a6:52:84:c2:
                    de:97:e6:75:20:78:67:f9:ed:15:45:15:3c:30:80:
                    aa:f2:bd:93:6d:ba:d7:62:ba:2d:9f:80:80:4a:ad:
                    06:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E1:7F:5E:D4:50:84:1D:14:F3:BF:E8:BA:FF:9B:07:DE:CB:10:98
            X509v3 Authority Key Identifier:
                keyid:45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/D-F_XtRQhB0U87_ouv-bB97LEJg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/RcSRNisuOGGXuaB0YSQoi8C88DE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:6a:4c:33:ae:72:c4:c0:e6:cb:35:67:26:86:31:2a:52:65:
         2b:14:a4:00:89:9c:40:0c:72:53:33:89:86:68:e2:65:17:1a:
         7a:2e:74:2e:33:4d:e7:75:3c:60:a0:d0:59:db:72:91:aa:53:
         c9:dd:0b:fd:42:f7:4e:71:9a:21:6c:ea:96:d6:a6:e0:a3:6b:
         55:d9:b2:e5:ed:01:bc:aa:5a:89:7b:15:9b:1b:7a:87:46:9c:
         9b:fe:37:70:3e:92:04:5f:03:57:0b:09:47:52:f2:ca:ba:cb:
         23:3a:0c:13:fe:40:90:91:d0:51:d3:03:50:1c:9f:58:11:94:
         a2:c3:3f:3c:6e:84:21:6b:75:28:be:3a:86:69:51:3f:50:48:
         24:4f:92:9c:61:87:34:60:a9:b4:45:5a:e0:f0:bb:9e:fd:27:
         5b:3d:7e:ae:36:94:70:0f:f8:09:9b:00:f0:ff:d9:39:a5:53:
         34:99:b4:cf:ad:d3:d2:d7:35:83:06:68:bf:1d:9b:8c:3a:09:
         3e:6e:ba:1d:d1:4f:5e:f9:e9:e4:23:5a:98:dd:ae:4c:6b:c6:
         74:56:4f:95:b3:bc:96:65:f6:55:80:62:f8:7f:d9:03:00:61:
         db:2a:97:91:e0:a9:a2:68:cb:9c:29:8c:83:77:74:1b:68:4e:
         d6:d8:96:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:08 2024 by rpki-client on console-ams.rpki-client.org