Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/a9wwIh01bpEwEhAN70-rqknj22c.roa
File:                     a9wwIh01bpEwEhAN70-rqknj22c.roa (raw, json)
Hash identifier:          OakZGEb+c8gk5hTUgh0RFkhLllJF92ozO8L4ZUQkw0E=
Subject key identifier:   6B:DC:30:22:1D:35:6E:91:30:12:10:0D:EF:4F:AB:AA:49:E3:DB:67
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       03848491
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/a9wwIh01bpEwEhAN70-rqknj22c.roa
Signing time:             Wed 09 Feb 2022 12:20:19 +0000
ROA not before:           Wed 09 Feb 2022 12:20:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     26636
IP address blocks:        45.153.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59016337 (0x3848491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Feb  9 12:20:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6bdc30221d356e913012100def4fabaa49e3db67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3c:e2:b0:34:95:99:bd:15:80:cb:b9:28:db:
                    ee:96:4c:82:68:a4:a0:12:3b:73:75:77:5e:9e:89:
                    d1:76:0d:38:8b:f4:d4:40:41:45:8a:30:99:72:d6:
                    17:bb:10:2b:22:54:9b:38:b3:b1:1a:ba:9c:fe:58:
                    05:a8:90:b4:0f:ab:6c:57:03:f1:f3:b8:73:1c:1f:
                    a4:70:76:d7:1f:82:b5:c4:df:2e:42:8e:d7:86:ca:
                    9a:cf:b1:30:7b:c5:52:0c:e6:84:f7:04:fd:d3:fe:
                    fb:b9:d2:46:88:7c:7e:fb:8f:7d:fc:d0:e7:34:92:
                    fd:ee:9f:6c:45:9b:1b:cd:53:d5:b2:9a:47:dd:08:
                    c5:62:01:06:dc:2d:cf:d3:e6:9e:5f:a2:df:62:33:
                    45:80:83:0c:e1:ef:6a:93:97:eb:b1:36:59:49:dd:
                    d0:52:51:24:5c:cf:e6:2b:5d:e1:f3:f2:26:fa:4b:
                    69:09:f2:11:0a:f2:9c:96:6e:99:40:1e:76:a2:ae:
                    d1:bc:65:6b:2b:e9:11:e7:44:38:f9:77:c4:a3:6e:
                    45:6e:c2:c0:25:ce:4f:b5:7b:53:f7:f1:28:9f:ad:
                    05:30:09:2d:15:ca:88:27:f7:98:a0:79:1c:6d:be:
                    8e:2a:28:13:dd:c6:0b:1c:1b:98:93:d6:35:ef:f4:
                    34:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DC:30:22:1D:35:6E:91:30:12:10:0D:EF:4F:AB:AA:49:E3:DB:67
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/a9wwIh01bpEwEhAN70-rqknj22c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.153.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:44:7d:80:ed:14:17:b1:88:1d:ac:b9:c8:69:2b:86:08:13:
         97:93:f0:0f:10:f8:b8:bf:e6:58:2e:78:69:04:e1:48:d9:ad:
         9b:ec:7e:88:e3:18:8e:7f:37:36:13:d3:57:bf:24:e5:9c:51:
         a7:c0:0c:55:13:79:4a:6e:03:c5:62:1b:bf:8b:9f:c6:f6:b5:
         96:d2:f7:ca:d8:5b:26:62:d0:8e:bb:b1:34:a5:3b:32:c6:69:
         4a:83:a8:2f:40:03:3e:8e:d0:ff:28:3b:c6:c2:f2:5e:da:43:
         5d:31:59:b1:25:ba:5c:a8:fe:06:c1:bf:42:5b:e0:e4:2f:4b:
         0a:21:dd:59:6c:f4:ca:a6:61:0d:61:75:79:34:0f:67:1a:4c:
         c4:3c:27:cd:d2:6d:c1:34:6b:53:07:5f:66:21:32:f6:8d:86:
         d8:94:54:6f:68:35:02:15:a5:82:f9:19:f4:18:1d:cc:7e:80:
         4e:f2:90:83:fc:8b:7a:03:7a:35:07:38:45:93:c4:07:83:93:
         72:26:b9:f6:8f:c9:a6:88:f2:93:5f:b2:9a:7a:2f:fb:c6:ac:
         16:60:81:4a:f0:4e:72:93:17:12:5d:b4:0b:7e:6b:7f:40:2c:
         b5:aa:9c:c4:61:b8:e6:67:63:9b:17:b2:80:e3:2c:ac:40:46:
         56:c5:d2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:59 2024 by rpki-client on console-fra.rpki-client.org