Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/ELEVvuhjkQTHnSQJJN5pdrJULIc.roa
File:                     ELEVvuhjkQTHnSQJJN5pdrJULIc.roa (raw, json)
Hash identifier:          dJ+PQBJVRrXstBsXZ66kY1BKYUNuxDFKJ/lSj/U6hAk=
Subject key identifier:   10:B1:15:BE:E8:63:91:04:C7:9D:24:09:24:DE:69:76:B2:54:2C:87
Certificate issuer:       /CN=45c491362b2e386197b9a0746124288bc0bcf031
Certificate serial:       01856D8AE21FC7520B148D96CD00473A10A6
Authority key identifier: 45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/ELEVvuhjkQTHnSQJJN5pdrJULIc.roa
Signing time:             Sun 01 Jan 2023 13:34:56 +0000
ROA not before:           Sun 01 Jan 2023 13:34:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43260
IP address blocks:        45.93.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:8a:e2:1f:c7:52:0b:14:8d:96:cd:00:47:3a:10:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45c491362b2e386197b9a0746124288bc0bcf031
        Validity
            Not Before: Jan  1 13:34:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=10b115bee8639104c79d240924de6976b2542c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fd:73:71:c9:91:62:9c:dc:16:14:c8:ae:55:
                    68:6c:43:ef:d8:95:51:e7:94:1f:bb:4b:09:b2:ce:
                    76:09:9d:97:fd:a4:7b:e3:d1:e6:c8:45:45:1f:ff:
                    9c:2f:ec:07:d9:8a:2b:52:6e:5e:94:ae:23:3e:87:
                    64:72:ae:72:eb:48:62:04:63:5b:d4:32:33:dc:7a:
                    94:cd:e0:92:17:09:b0:22:7d:84:f7:73:89:6d:a7:
                    cc:a5:a6:b4:b7:4b:d0:ed:f5:e9:3e:a6:a1:e9:06:
                    35:74:de:c2:4e:f2:de:c6:f7:c8:fe:c4:66:ee:7c:
                    a0:a5:48:00:e7:d9:12:89:a5:48:d2:ae:83:1a:74:
                    d1:f0:cf:b4:b3:e5:e4:87:70:b7:b9:25:f8:78:84:
                    84:1d:6f:58:bb:30:06:8a:36:e8:0e:f1:c1:92:40:
                    4c:a0:14:6a:11:b3:f2:f2:78:f5:32:93:99:66:a9:
                    7c:cf:b2:1a:51:4a:d2:97:9b:1a:da:79:22:36:07:
                    8c:92:17:db:9f:7e:aa:ce:f6:83:57:5f:6c:8c:b9:
                    29:e1:ad:f7:d0:30:c3:fe:32:22:00:45:0a:fd:ac:
                    01:e1:f2:da:e9:b2:d5:d1:ff:75:54:54:0b:dd:19:
                    fb:00:88:a3:60:00:ab:e8:c7:95:bc:42:d4:eb:d9:
                    d9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B1:15:BE:E8:63:91:04:C7:9D:24:09:24:DE:69:76:B2:54:2C:87
            X509v3 Authority Key Identifier:
                keyid:45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/ELEVvuhjkQTHnSQJJN5pdrJULIc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/RcSRNisuOGGXuaB0YSQoi8C88DE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.93.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:ab:d9:5f:d5:91:80:4d:aa:d0:2e:c3:5c:2d:8b:e2:80:4b:
         a6:d0:01:0f:bd:a9:61:fc:01:cb:f0:87:c5:fb:b6:b9:b4:53:
         29:7a:e7:a7:8b:b5:83:e8:c0:4e:00:fc:85:71:c9:72:13:3f:
         f0:b1:ff:3e:55:12:31:ef:19:e2:de:c8:2d:5e:2b:7d:ba:ac:
         a0:64:3a:29:3a:12:80:92:2c:f0:c9:6e:a0:65:ff:f9:b2:ea:
         93:ba:bd:81:0f:fe:ed:ef:8a:01:f9:24:54:06:36:53:a1:5d:
         aa:74:c4:51:3c:8a:10:e1:9f:22:4a:f1:10:0b:1f:6f:31:38:
         6e:0a:af:53:2a:54:ea:44:4e:87:01:73:c3:bc:c0:95:50:b4:
         f6:38:56:ef:a2:39:ef:15:cb:05:44:ab:55:7c:e7:68:dc:6a:
         04:12:07:ce:b5:6a:18:dd:79:f5:1f:87:45:72:90:05:2e:3f:
         36:93:2a:f1:40:3a:72:b9:79:29:6e:80:94:95:27:fd:39:78:
         2f:4d:ef:6f:36:46:f7:b9:e6:7d:72:09:b2:99:e7:c0:8b:57:
         c8:29:e3:e0:75:92:a1:4e:76:c2:99:9b:f0:b4:33:f0:31:bf:
         2a:00:c8:df:46:d4:8a:68:63:ae:a7:85:71:d6:9e:b4:38:14:
         b8:e4:41:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtiuIfx1ILFI2WzQBHOhCmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YzQ5MTM2MmIyZTM4NjE5N2I5YTA3NDYxMjQyODhiYzBi
Y2YwMzEwHhcNMjMwMTAxMTMzNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGIxMTViZWU4NjM5MTA0Yzc5ZDI0MDkyNGRlNjk3NmIyNTQyYzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/1zccmRYpzcFhTIrlVobEPv2JVR
55Qfu0sJss52CZ2X/aR749HmyEVFH/+cL+wH2YorUm5elK4jPodkcq5y60hiBGNb
1DIz3HqUzeCSFwmwIn2E93OJbafMpaa0t0vQ7fXpPqah6QY1dN7CTvLexvfI/sRm
7nygpUgA59kSiaVI0q6DGnTR8M+0s+Xkh3C3uSX4eISEHW9YuzAGijboDvHBkkBM
oBRqEbPy8nj1MpOZZql8z7IaUUrSl5sa2nkiNgeMkhfbn36qzvaDV19sjLkp4a33
0DDD/jIiAEUK/awB4fLa6bLV0f91VFQL3Rn7AIijYACr6MeVvELU69nZ4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBCxFb7oY5EEx50kCSTeaXayVCyHMB8GA1UdIwQY
MBaAFEXEkTYrLjhhl7mgdGEkKIvAvPAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmNTUk5pc3VPR0dYdWFCMFlTUW9pOEM4OERFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy84NmMxODEtNGY1Yy00NWZjLWJhYWMt
MWY5YTE5YzM3ZTA4LzEvRUxFVnZ1aGprUVRIblNRSkpONXBkckpVTEljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy84NmMxODEtNGY1Yy00NWZjLWJhYWMtMWY5YTE5YzM3ZTA4
LzEvUmNTUk5pc3VPR0dYdWFCMFlTUW9pOEM4OERFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV1RMA0G
CSqGSIb3DQEBCwUAA4IBAQAKq9lf1ZGATarQLsNcLYvigEum0AEPvalh/AHL8IfF
+7a5tFMpeueni7WD6MBOAPyFcclyEz/wsf8+VRIx7xni3sgtXit9uqygZDopOhKA
kizwyW6gZf/5suqTur2BD/7t74oB+SRUBjZToV2qdMRRPIoQ4Z8iSvEQCx9vMThu
Cq9TKlTqRE6HAXPDvMCVULT2OFbvojnvFcsFRKtVfOdo3GoEEgfOtWoY3Xn1H4dF
cpAFLj82kyrxQDpyuXkpboCUlSf9OXgvTe9vNkb3ueZ9cgmymefAi1fIKePgdZKh
TnbCmZvwtDPwMb8qAMjfRtSKaGOup4Vx1p60OBS45EEF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:58 2024 by rpki-client on console-fra.rpki-client.org