Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4a7b95-0592-4fc5-b9f7-42db12797dbc/1/xs_x_ZsDyxz-KpI2JldEtz21_sM.roa
File:                     xs_x_ZsDyxz-KpI2JldEtz21_sM.roa (raw, json)
Hash identifier:          L4KyWOwph/t0zoCrXlxpccVyHPrEPJa1HdPvEeZosLs=
Subject key identifier:   C6:CF:F1:FD:9B:03:CB:1C:FE:2A:92:36:26:57:44:B7:3D:B5:FE:C3
Certificate issuer:       /CN=4fdfd03ffbce1dfaf2191cef81b3477234ba2467
Certificate serial:       018326EC5D98209B880A99589FEAE850C908
Authority key identifier: 4F:DF:D0:3F:FB:CE:1D:FA:F2:19:1C:EF:81:B3:47:72:34:BA:24:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T9_QP_vOHfryGRzvgbNHcjS6JGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/4a7b95-0592-4fc5-b9f7-42db12797dbc/1/xs_x_ZsDyxz-KpI2JldEtz21_sM.roa
Signing time:             Sat 10 Sep 2022 10:22:48 +0000
ROA not before:           Sat 10 Sep 2022 10:22:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39855
IP address blocks:        45.91.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:26:ec:5d:98:20:9b:88:0a:99:58:9f:ea:e8:50:c9:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fdfd03ffbce1dfaf2191cef81b3477234ba2467
        Validity
            Not Before: Sep 10 10:22:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c6cff1fd9b03cb1cfe2a9236265744b73db5fec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a4:2d:a3:16:30:44:a2:8a:50:a6:99:8e:c6:
                    d0:1e:2f:50:67:0b:96:55:4f:e0:a3:16:19:0c:92:
                    15:ee:b5:dc:c5:38:f5:de:ce:52:11:55:38:fd:79:
                    f8:5f:db:5f:08:f3:e6:2f:8c:14:6c:a0:1a:ca:29:
                    39:d1:43:80:7d:a6:b9:2d:1f:68:9d:dc:b9:ab:d1:
                    a8:0d:a6:83:dd:fd:46:74:21:0d:36:9e:9c:32:33:
                    40:ec:8e:2b:22:d5:be:f0:1a:16:9b:e2:20:19:89:
                    34:d7:50:49:db:48:2f:28:60:fa:e6:5b:42:65:3d:
                    fe:56:d0:d2:8b:72:e6:08:d9:a3:ce:13:85:1b:23:
                    8e:87:12:35:5c:da:fe:5e:b8:6f:5c:05:0a:3b:b5:
                    9d:aa:d2:85:ac:56:24:99:54:5e:aa:a6:69:4d:c3:
                    76:31:10:46:6a:fd:16:7f:5e:28:70:d0:75:df:b0:
                    4a:c9:11:7b:b0:64:0c:40:7f:0b:75:b9:27:e2:da:
                    47:05:58:0f:89:09:10:3e:b8:00:3c:5d:44:c4:71:
                    47:2b:13:fa:88:b4:1a:86:14:26:f4:51:8d:56:38:
                    48:fe:d6:63:fe:6e:a0:1c:69:a2:7d:ce:84:71:3f:
                    b9:e6:9b:bc:80:04:55:ce:e1:dc:db:4f:5e:cc:18:
                    4d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CF:F1:FD:9B:03:CB:1C:FE:2A:92:36:26:57:44:B7:3D:B5:FE:C3
            X509v3 Authority Key Identifier:
                keyid:4F:DF:D0:3F:FB:CE:1D:FA:F2:19:1C:EF:81:B3:47:72:34:BA:24:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9_QP_vOHfryGRzvgbNHcjS6JGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4a7b95-0592-4fc5-b9f7-42db12797dbc/1/xs_x_ZsDyxz-KpI2JldEtz21_sM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4a7b95-0592-4fc5-b9f7-42db12797dbc/1/T9_QP_vOHfryGRzvgbNHcjS6JGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:58:88:12:f6:2f:a9:d2:10:51:09:0b:b8:98:83:49:95:30:
         a6:2d:bf:3a:07:c8:8e:56:92:aa:1c:cd:71:c0:df:50:23:fe:
         b3:49:61:73:f1:8d:aa:9e:e4:b2:bf:85:0d:1e:c0:fb:e2:62:
         fd:12:6a:16:0a:99:1b:09:29:df:00:83:ed:33:05:74:29:b2:
         8c:78:0a:59:4c:6c:ba:a2:19:08:58:98:de:90:06:d6:0b:aa:
         2a:25:2f:a8:be:c0:1b:4d:ec:d8:41:99:08:c5:74:ad:e6:d3:
         06:e1:24:8b:6d:fb:80:c8:ad:22:a1:89:be:74:cd:da:ae:7c:
         0b:33:ab:bf:39:f6:92:1a:8d:30:0d:00:fc:6b:fa:be:4f:4d:
         74:82:fb:bd:12:5a:b4:b9:d0:62:e6:b8:20:de:ec:37:ec:ba:
         4a:0d:3f:2b:0c:ca:5b:aa:59:4a:b3:08:32:64:15:2c:18:f7:
         da:6c:89:28:11:aa:04:33:ca:d2:3b:2b:26:4e:84:60:2b:7b:
         80:e3:97:85:07:c8:c4:1c:2b:69:a6:5b:02:7d:7f:bd:9c:37:
         3b:3c:7f:3c:50:07:60:2c:7b:4f:eb:0e:e7:35:b8:36:84:8f:
         ce:f6:42:bb:0b:a4:01:19:a8:17:97:f7:10:54:11:93:5c:6a:
         16:88:c9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:25 2024 by rpki-client on console-fra.rpki-client.org