Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/p9rVvc15gdaX3b0ZjRt__kmnlE4.roa
File:                     p9rVvc15gdaX3b0ZjRt__kmnlE4.roa (raw, json)
Hash identifier:          Co4cJvDCEkWGl1SZlZHzrkg+QAJ7g4tF3ZvYoT8WH/M=
Subject key identifier:   A7:DA:D5:BD:CD:79:81:D6:97:DD:BD:19:8D:1B:7F:FE:49:A7:94:4E
Certificate issuer:       /CN=718ab66ee3a8c1b35accddba57c0c7d148cbe55f
Certificate serial:       01823F68681567955E87327877F12AB9EEFA
Authority key identifier: 71:8A:B6:6E:E3:A8:C1:B3:5A:CC:DD:BA:57:C0:C7:D1:48:CB:E5:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cYq2buOowbNazN26V8DH0UjL5V8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/p9rVvc15gdaX3b0ZjRt__kmnlE4.roa
Signing time:             Wed 27 Jul 2022 11:26:23 +0000
ROA not before:           Wed 27 Jul 2022 11:26:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209371
IP address blocks:        45.81.38.0/24 maxlen: 24
                          45.81.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:3f:68:68:15:67:95:5e:87:32:78:77:f1:2a:b9:ee:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718ab66ee3a8c1b35accddba57c0c7d148cbe55f
        Validity
            Not Before: Jul 27 11:26:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a7dad5bdcd7981d697ddbd198d1b7ffe49a7944e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5d:91:b3:5e:ad:f9:54:6a:bf:5a:dd:91:45:
                    02:64:c8:68:0e:9e:03:90:63:17:64:63:0d:8f:35:
                    8f:e6:b1:88:b7:67:be:39:a2:7c:af:5f:d4:50:65:
                    ea:f2:cc:dd:6d:4b:91:d8:5d:8a:80:2f:c9:c9:e3:
                    34:1b:7d:86:02:0d:b2:be:bc:ef:b5:87:76:89:bf:
                    40:a1:c5:50:a0:da:67:91:48:4b:ab:52:df:8a:3c:
                    ea:c2:83:28:63:86:52:59:5e:eb:34:8b:50:62:61:
                    0f:3b:53:08:22:4a:7b:0b:8d:02:2a:fc:9d:86:c9:
                    bb:03:f8:22:4b:d4:63:ff:e4:fc:65:b0:88:b6:33:
                    11:0c:a6:5d:f0:a8:64:85:bc:f9:bd:00:6d:ab:68:
                    57:45:1b:8a:5f:98:13:48:a5:62:cd:f8:73:3f:be:
                    48:07:21:66:7b:ed:3a:43:75:e8:7b:a2:2f:6d:1a:
                    3b:f2:f4:0a:ac:00:94:9f:db:ef:66:48:b7:f9:f3:
                    47:cd:a2:17:8e:f7:32:0b:00:20:e5:47:46:fa:14:
                    96:8d:aa:85:ef:a2:81:37:14:3e:e9:ff:b5:1c:2b:
                    98:3c:ba:30:27:2e:35:26:53:d1:87:f8:c3:3a:3f:
                    9a:2f:9f:c5:2d:d9:13:25:8f:dd:85:30:5c:78:4c:
                    e5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DA:D5:BD:CD:79:81:D6:97:DD:BD:19:8D:1B:7F:FE:49:A7:94:4E
            X509v3 Authority Key Identifier:
                keyid:71:8A:B6:6E:E3:A8:C1:B3:5A:CC:DD:BA:57:C0:C7:D1:48:CB:E5:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYq2buOowbNazN26V8DH0UjL5V8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/p9rVvc15gdaX3b0ZjRt__kmnlE4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e93f8b-9631-4a16-b22a-00a02a44f1da/1/cYq2buOowbNazN26V8DH0UjL5V8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:ef:69:61:01:c3:cb:dc:57:50:81:f0:37:95:46:ce:ee:1d:
         e9:29:4d:d7:c8:8c:67:8b:3a:78:39:30:05:69:f6:38:8b:d1:
         9a:3b:21:ce:4e:95:dd:41:2a:43:a9:39:74:cf:8e:c8:36:e5:
         2d:73:7c:96:d1:fd:4c:33:e1:7b:32:3e:98:8d:69:9e:3c:0e:
         27:a4:9f:96:f1:a6:06:28:a5:69:59:46:65:0f:e5:69:ca:38:
         83:05:72:86:fe:dd:6b:b6:29:2c:97:fe:a8:0b:e2:c2:9e:2e:
         69:f9:31:66:43:f7:d7:72:43:c8:8a:37:1b:a2:c8:f0:17:eb:
         3e:31:1a:4b:3e:54:b7:31:29:ff:1b:31:67:48:8a:79:45:be:
         cb:9c:2a:83:14:32:c8:85:3e:66:7d:4a:48:b1:c7:80:2b:63:
         9e:52:91:69:02:dd:8f:d3:13:23:96:c8:17:19:f5:e7:89:49:
         b1:f2:1f:65:86:1b:4a:51:4a:0c:e8:e3:47:c6:82:fd:56:bc:
         5e:40:3d:a7:f3:f5:9e:1c:1a:d6:b4:7b:53:c2:98:d9:53:5b:
         81:59:d7:a5:3f:b7:0e:57:ca:b4:ec:05:0c:e2:73:9b:ea:01:
         23:3a:77:f2:e5:de:d4:bd:63:d3:be:f6:42:25:70:b7:ed:b5:
         fc:1a:b4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:07 2024 by rpki-client on console-fra.rpki-client.org