Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3d95e5-f9dc-4ece-b5aa-5b9100803ab7/1/Oly33Je95_o-KlVhJOafv-_Zs3Y.roa
File:                     Oly33Je95_o-KlVhJOafv-_Zs3Y.roa (raw, json)
Hash identifier:          rNa1lSv4kJJN4MkiK1sqmCxHL3jcrTjNq0NfPC9z5Rs=
Subject key identifier:   3A:5C:B7:DC:97:BD:E7:FA:3E:2A:55:61:24:E6:9F:BF:EF:D9:B3:76
Certificate issuer:       /CN=b2a7f9ae107f60ae4225cc4d1e301a6e383d3560
Certificate serial:       044BD830
Authority key identifier: B2:A7:F9:AE:10:7F:60:AE:42:25:CC:4D:1E:30:1A:6E:38:3D:35:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sqf5rhB_YK5CJcxNHjAabjg9NWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/3d95e5-f9dc-4ece-b5aa-5b9100803ab7/1/Oly33Je95_o-KlVhJOafv-_Zs3Y.roa
Signing time:             Sat 01 Jan 2022 02:01:26 +0000
ROA not before:           Sat 01 Jan 2022 02:01:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43581
IP address blocks:        45.155.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72079408 (0x44bd830)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2a7f9ae107f60ae4225cc4d1e301a6e383d3560
        Validity
            Not Before: Jan  1 02:01:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3a5cb7dc97bde7fa3e2a556124e69fbfefd9b376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:52:e2:e3:56:0b:e0:8c:1e:6f:c6:97:30:
                    68:55:0a:6b:60:5f:f7:8d:90:b1:96:17:56:c4:ce:
                    3f:55:7d:59:6d:49:ef:e4:99:77:97:63:df:ae:2e:
                    bc:f0:56:87:f3:06:39:89:36:fe:3b:20:39:2d:8e:
                    50:9d:9f:24:4d:39:b3:8a:cb:b8:33:a8:fd:2a:c1:
                    04:9f:a8:49:01:e1:2c:2f:cc:19:a3:c5:2d:27:68:
                    ba:6e:ba:70:df:2f:ea:f3:ca:45:57:0b:ab:3e:ef:
                    50:75:8d:6d:7c:97:f7:f8:7f:25:b9:03:ae:1c:60:
                    00:7a:83:84:b6:69:ef:48:9b:a3:70:f5:ac:57:12:
                    60:70:11:ec:c2:f1:ac:e4:03:66:5a:c2:f9:f6:90:
                    c2:74:18:dd:5c:c5:93:1f:3e:ba:94:00:9b:14:87:
                    e9:e5:b9:d3:25:aa:e5:05:7f:b3:db:fb:35:06:3c:
                    a1:ec:76:50:e3:8c:f1:7e:f9:17:de:30:b5:84:9d:
                    d7:64:22:21:39:3a:b2:82:04:30:8b:de:ca:25:d5:
                    31:a8:c3:d0:05:5b:d7:49:77:4d:1b:de:1c:8b:e0:
                    f1:d2:19:6d:5e:50:30:b9:5a:7d:7a:62:5e:29:48:
                    ea:74:db:f2:1c:ae:a1:58:0f:b6:5d:d4:8d:dd:fa:
                    47:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5C:B7:DC:97:BD:E7:FA:3E:2A:55:61:24:E6:9F:BF:EF:D9:B3:76
            X509v3 Authority Key Identifier:
                keyid:B2:A7:F9:AE:10:7F:60:AE:42:25:CC:4D:1E:30:1A:6E:38:3D:35:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqf5rhB_YK5CJcxNHjAabjg9NWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3d95e5-f9dc-4ece-b5aa-5b9100803ab7/1/Oly33Je95_o-KlVhJOafv-_Zs3Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3d95e5-f9dc-4ece-b5aa-5b9100803ab7/1/sqf5rhB_YK5CJcxNHjAabjg9NWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:b1:3e:ea:ac:1e:db:f5:3d:c5:e6:86:90:50:68:af:f9:4d:
         9c:14:09:b6:06:f1:f2:f9:26:67:46:2d:b0:d3:b1:aa:b2:29:
         be:b8:19:2b:86:e6:3b:0b:92:f9:83:13:d1:a0:a8:a0:7b:40:
         45:da:4d:ad:97:bc:b4:88:a9:1c:c9:dc:4a:e2:0d:ce:a6:79:
         9a:81:81:6f:48:a3:1b:f4:21:ba:bf:e5:f7:17:ef:98:38:40:
         8e:72:58:7a:0f:62:4f:e9:3d:1f:6f:02:0f:9b:ff:79:8d:c0:
         51:c5:c0:1e:0f:9c:62:d8:1c:42:b5:42:fe:80:da:b3:eb:5a:
         34:8c:eb:dc:2e:cb:79:78:d1:76:14:09:95:c7:f4:3e:be:43:
         59:52:56:24:89:3d:33:73:54:b2:50:b9:4e:95:fd:28:71:df:
         33:8f:dd:54:a2:35:28:74:b9:a4:dc:95:a4:4d:18:1c:50:67:
         11:ad:a2:e0:87:8a:32:26:45:f9:4a:d4:19:20:2f:d1:2e:42:
         ed:2d:c2:45:cb:41:ff:59:cb:9d:03:64:22:d5:be:93:83:34:
         fd:50:b4:83:db:97:70:76:b4:e9:b2:28:88:11:8e:66:7d:72:
         33:1c:0f:44:fa:ab:61:52:f3:6a:b1:a8:1a:1b:3d:b3:e7:96:
         6f:3d:24:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:49 2024 by rpki-client on console-fra.rpki-client.org