Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/88e8c7-f02b-45c5-9d8e-bf3e80e7da57/1/YRJ6jz0KCXIMyUxPIKpRAAG1OMI.roa
File:                     YRJ6jz0KCXIMyUxPIKpRAAG1OMI.roa (raw, json)
Hash identifier:          I9mdxnuVIKS2qDzDLyFtxMcUCMUnmYCjHV2qMH7UbJQ=
Subject key identifier:   61:12:7A:8F:3D:0A:09:72:0C:C9:4C:4F:20:AA:51:00:01:B5:38:C2
Certificate issuer:       /CN=5c31949208774230cf8eafdc5f2b48b250ef308d
Certificate serial:       072EFD54
Authority key identifier: 5C:31:94:92:08:77:42:30:CF:8E:AF:DC:5F:2B:48:B2:50:EF:30:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XDGUkgh3QjDPjq_cXytIslDvMI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/88e8c7-f02b-45c5-9d8e-bf3e80e7da57/1/YRJ6jz0KCXIMyUxPIKpRAAG1OMI.roa
Signing time:             Sat 01 Jan 2022 02:01:30 +0000
ROA not before:           Sat 01 Jan 2022 02:01:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201971
IP address blocks:        45.141.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120520020 (0x72efd54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c31949208774230cf8eafdc5f2b48b250ef308d
        Validity
            Not Before: Jan  1 02:01:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=61127a8f3d0a09720cc94c4f20aa510001b538c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e8:b2:78:6e:0e:10:b0:c6:f8:59:81:ce:3a:
                    e6:ae:13:b2:b8:23:e7:44:6b:68:4e:b9:0e:a9:71:
                    b5:7f:75:a0:c5:32:a3:ce:60:11:c8:6b:87:03:b4:
                    bc:1c:22:3d:3f:63:22:58:59:f9:54:ca:c8:c0:1d:
                    b7:8a:c1:e4:ee:2c:95:23:d0:a9:53:4a:9f:93:53:
                    ec:55:3c:44:d3:b6:6d:dd:7e:3f:f3:d0:da:46:0c:
                    b7:f1:e3:bf:1d:45:27:78:3d:43:71:fe:00:4d:02:
                    17:3d:4c:e5:34:e2:d6:15:9f:be:9c:c6:ce:a3:fa:
                    0a:59:4c:37:64:b2:5c:08:6e:ff:b5:db:af:3c:8e:
                    13:62:d8:05:46:38:33:57:99:ab:9a:37:aa:72:95:
                    26:b3:81:6c:f1:bb:1e:16:e6:3a:28:c0:7f:b1:e7:
                    15:a1:89:3b:af:51:12:ee:d9:a4:e8:63:3e:d9:53:
                    a6:b1:57:2e:03:45:8b:62:a6:9d:39:00:26:f3:e2:
                    85:cf:a1:bf:91:b2:f8:2a:e4:84:15:dc:6e:01:59:
                    1a:6f:57:3e:d9:22:6d:10:36:d7:3c:7c:43:57:ec:
                    bd:d6:f8:24:86:48:f7:58:3a:20:97:0f:98:df:2e:
                    5e:9e:5f:55:cc:37:60:78:92:6d:6b:02:7a:b0:4a:
                    d9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:12:7A:8F:3D:0A:09:72:0C:C9:4C:4F:20:AA:51:00:01:B5:38:C2
            X509v3 Authority Key Identifier:
                keyid:5C:31:94:92:08:77:42:30:CF:8E:AF:DC:5F:2B:48:B2:50:EF:30:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDGUkgh3QjDPjq_cXytIslDvMI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/88e8c7-f02b-45c5-9d8e-bf3e80e7da57/1/YRJ6jz0KCXIMyUxPIKpRAAG1OMI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/88e8c7-f02b-45c5-9d8e-bf3e80e7da57/1/XDGUkgh3QjDPjq_cXytIslDvMI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:39:6d:a8:d2:25:53:a1:9f:9c:76:0f:11:3d:c2:11:14:00:
         21:4a:ec:c2:3b:6a:7e:39:83:5c:1d:be:89:d2:f2:44:79:e2:
         15:12:4f:40:e1:d2:e9:a7:4a:55:2f:36:f9:45:32:10:20:51:
         8b:e8:04:87:51:1f:a2:99:8e:7b:e2:06:74:9d:a3:4c:2d:fe:
         ad:54:b4:02:a2:a4:d9:c9:3e:79:86:5c:98:a0:51:ce:ec:3a:
         15:ba:95:2c:95:48:77:35:ea:c3:60:9c:b4:40:77:6d:0d:42:
         fe:74:c4:6e:de:d9:73:af:ce:e7:94:44:68:7c:1d:d3:50:3d:
         3e:bb:c7:f4:8e:da:2f:d3:68:3d:8f:3f:ec:3f:78:b0:14:a1:
         1a:61:a1:c8:57:91:7b:a7:ad:09:2b:6d:c8:6b:b7:f3:4d:5e:
         d9:9e:af:14:bc:1e:6e:20:bd:a6:9b:25:cc:11:a0:ba:71:a6:
         09:6d:ca:11:30:2b:25:1b:45:cb:51:1d:e3:4a:28:41:8d:25:
         57:ad:ec:f5:99:16:c6:f6:a2:c5:08:01:b7:1a:d9:4d:38:e7:
         b7:8d:56:78:dd:b9:e6:c8:f6:51:d7:2c:87:ad:bc:19:b8:a6:
         bf:09:f7:30:8d:82:fd:af:ea:55:45:c4:e2:2e:4b:71:c2:88:
         4d:61:ad:fb
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBy79VDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YzMxOTQ5MjA4Nzc0MjMwY2Y4ZWFmZGM1ZjJiNDhiMjUwZWYzMDhkMB4XDTIyMDEw
MTAyMDEzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjExMjdhOGYzZDBh
MDk3MjBjYzk0YzRmMjBhYTUxMDAwMWI1MzhjMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJfosnhuDhCwxvhZgc465q4Tsrgj50RraE65DqlxtX91oMUy
o85gEchrhwO0vBwiPT9jIlhZ+VTKyMAdt4rB5O4slSPQqVNKn5NT7FU8RNO2bd1+
P/PQ2kYMt/Hjvx1FJ3g9Q3H+AE0CFz1M5TTi1hWfvpzGzqP6CllMN2SyXAhu/7Xb
rzyOE2LYBUY4M1eZq5o3qnKVJrOBbPG7HhbmOijAf7HnFaGJO69REu7ZpOhjPtlT
prFXLgNFi2KmnTkAJvPihc+hv5Gy+CrkhBXcbgFZGm9XPtkibRA21zx8Q1fsvdb4
JIZI91g6IJcPmN8uXp5fVcw3YHiSbWsCerBK2ccCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRhEnqPPQoJcgzJTE8gqlEAAbU4wjAfBgNVHSMEGDAWgBRcMZSSCHdCMM+O
r9xfK0iyUO8wjTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hER1VrZ2gzUWpEUGpxX2NYeXRJc2xEdk1JMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmYvODhlOGM3LWYwMmItNDVjNS05ZDhlLWJmM2U4MGU3ZGE1Ny8x
L1lSSjZqejBLQ1hJTXlVeFBJS3BSQUFHMU9NSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYv
ODhlOGM3LWYwMmItNDVjNS05ZDhlLWJmM2U4MGU3ZGE1Ny8xL1hER1VrZ2gzUWpE
UGpxX2NYeXRJc2xEdk1JMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2NxDANBgkqhkiG9w0BAQsFAAOC
AQEASjltqNIlU6GfnHYPET3CERQAIUrswjtqfjmDXB2+idLyRHniFRJPQOHS6adK
VS82+UUyECBRi+gEh1EfopmOe+IGdJ2jTC3+rVS0AqKk2ck+eYZcmKBRzuw6FbqV
LJVIdzXqw2CctEB3bQ1C/nTEbt7Zc6/O55REaHwd01A9PrvH9I7aL9NoPY8/7D94
sBShGmGhyFeRe6etCSttyGu3801e2Z6vFLwebiC9ppslzBGgunGmCW3KETArJRtF
y1Ed40ooQY0lV63s9ZkWxvaixQgBtxrZTTjnt41WeN255sj2Udcsh628Gbimvwn3
MI2C/a/qVUXE4i5LccKITWGt+w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:13 2024 by rpki-client on console-fra.rpki-client.org