Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/zYe6gFD-Tgb4KLgPZwLSJue4O5k.roa
File:                     zYe6gFD-Tgb4KLgPZwLSJue4O5k.roa (raw, json)
Hash identifier:          0GeEZRYgWcFWEG9CouqM7jiI78Z2UShWHILb4xg6De8=
Subject key identifier:   CD:87:BA:80:50:FE:4E:06:F8:28:B8:0F:67:02:D2:26:E7:B8:3B:99
Certificate issuer:       /CN=0929ba203ac63fa2971e41070f7842c3761529c4
Certificate serial:       049B1B33
Authority key identifier: 09:29:BA:20:3A:C6:3F:A2:97:1E:41:07:0F:78:42:C3:76:15:29:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/zYe6gFD-Tgb4KLgPZwLSJue4O5k.roa
Signing time:             Sat 01 Jan 2022 07:57:35 +0000
ROA not before:           Sat 01 Jan 2022 07:57:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        45.154.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77273907 (0x49b1b33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0929ba203ac63fa2971e41070f7842c3761529c4
        Validity
            Not Before: Jan  1 07:57:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cd87ba8050fe4e06f828b80f6702d226e7b83b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7b:52:23:42:92:a9:b5:81:ba:6d:28:3b:43:
                    ee:ce:1d:6a:42:10:6a:8a:0a:90:92:97:e9:1e:39:
                    4d:cb:ff:2a:35:41:1a:ef:a5:25:4e:6c:81:d3:8a:
                    56:0c:60:16:45:b4:be:46:70:0c:5e:d1:1d:0a:15:
                    d6:c6:01:e5:d0:de:62:02:f3:5c:3c:b5:39:de:bf:
                    f5:df:3d:c6:c0:8a:f8:d3:30:cc:42:80:0a:ee:24:
                    83:2e:8a:9d:f6:63:79:fc:30:06:de:b8:74:06:db:
                    1c:f1:be:9d:b5:c9:2c:05:04:d5:2f:11:a3:94:3f:
                    99:93:10:56:ce:36:6b:88:f8:50:81:56:c2:ef:ef:
                    6c:c9:23:c0:d5:49:63:90:6c:d9:b7:59:8e:01:95:
                    2d:23:2f:87:6e:3e:6d:36:65:87:17:0d:b7:24:db:
                    4f:bc:4b:92:d4:06:de:a0:45:09:2e:98:aa:24:9d:
                    8c:fd:f1:db:15:ba:6f:d5:24:41:22:63:26:61:44:
                    b9:a8:c8:f0:f8:a8:2b:85:71:79:ee:83:3b:5a:58:
                    2c:12:f6:b0:b6:39:46:20:ad:48:ab:64:44:27:a7:
                    25:41:3d:95:97:7f:58:31:f8:09:31:a0:81:ff:62:
                    19:62:91:4f:cb:78:3d:54:9f:b2:75:48:76:8f:f8:
                    c3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:87:BA:80:50:FE:4E:06:F8:28:B8:0F:67:02:D2:26:E7:B8:3B:99
            X509v3 Authority Key Identifier:
                keyid:09:29:BA:20:3A:C6:3F:A2:97:1E:41:07:0F:78:42:C3:76:15:29:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/zYe6gFD-Tgb4KLgPZwLSJue4O5k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:b1:fd:8d:d2:5c:86:d4:00:b1:7e:da:7d:38:51:28:a3:59:
         53:d6:33:3b:b7:1f:12:76:7e:c1:e9:65:47:5c:62:51:ec:db:
         fe:2c:c0:21:d6:21:34:56:89:c4:db:67:49:28:f8:51:7d:e0:
         a7:8e:41:c3:aa:d0:e4:ae:d9:09:fa:ff:05:78:4f:68:1a:2f:
         b3:eb:48:bc:15:16:a0:c1:65:56:96:27:a5:17:9a:54:ea:d7:
         e4:dd:0a:dd:f7:6d:19:4c:d0:d8:dc:e3:b7:bf:bd:82:8f:c3:
         4b:b7:81:dc:2f:5d:08:2d:27:e2:f3:64:c0:fe:de:e5:ee:66:
         b5:f7:56:ba:48:15:90:9e:5c:2e:cd:a2:3b:c9:88:bf:f8:23:
         38:0d:3c:b1:3f:98:5f:45:c2:ff:f1:39:b8:4a:82:86:fb:e8:
         da:89:a7:d8:01:ed:da:d7:99:76:22:06:66:38:d0:08:79:e1:
         ee:fa:66:12:fa:16:c3:57:3b:d9:8f:0b:15:54:94:35:71:0a:
         1e:0f:fa:97:91:d1:e7:0e:c4:49:ad:56:b8:aa:37:b1:86:7d:
         04:98:f3:d8:0d:c7:c9:85:66:3b:e8:21:77:d1:92:ed:05:eb:
         a2:43:ff:32:9e:8e:19:6f:d2:9d:3a:df:58:2b:ac:69:37:db:
         ed:72:62:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:52 2024 by rpki-client on console-fra.rpki-client.org