Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/fZMbB7rEH_J5eFRjHaNggrzJY6Y.roa
File:                     fZMbB7rEH_J5eFRjHaNggrzJY6Y.roa (raw, json)
Hash identifier:          ErI39V4db8wdwciuNneJbEjDh1F3QQ3U/DLhJW0QAaI=
Subject key identifier:   7D:93:1B:07:BA:C4:1F:F2:79:78:54:63:1D:A3:60:82:BC:C9:63:A6
Certificate issuer:       /CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
Certificate serial:       0185362D3FBFA59CE3F87A6D5FB0E4427F1E
Authority key identifier: 61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/fZMbB7rEH_J5eFRjHaNggrzJY6Y.roa
Signing time:             Wed 21 Dec 2022 19:33:33 +0000
ROA not before:           Wed 21 Dec 2022 19:33:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212477
IP address blocks:        45.144.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:36:2d:3f:bf:a5:9c:e3:f8:7a:6d:5f:b0:e4:42:7f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
        Validity
            Not Before: Dec 21 19:33:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7d931b07bac41ff2797854631da36082bcc963a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0c:5b:19:55:3a:1d:7b:d4:f0:da:d4:f7:94:
                    1b:ed:d4:8c:f9:fc:2b:ed:7a:d0:09:ce:d2:5d:ac:
                    2f:5c:5b:ee:7f:11:8c:16:8c:f5:a0:91:26:dc:d9:
                    b5:61:5a:93:49:be:da:d0:e0:94:24:c2:f6:80:bb:
                    70:e9:c6:1d:90:26:0f:31:80:0c:7d:6d:fb:91:fa:
                    9c:09:f4:cd:54:f8:73:03:22:ae:83:a1:a9:ac:35:
                    0d:31:d2:e7:ab:2f:e2:b2:ce:5b:2a:d7:69:07:24:
                    98:38:3e:75:b9:3f:83:f7:28:ef:3a:3c:41:ad:1d:
                    49:c9:65:be:3c:d9:ff:e2:3d:cd:6d:91:39:b5:1e:
                    b1:d1:82:04:5c:79:1a:5e:7f:28:12:62:6a:88:d9:
                    0e:db:04:54:f9:cd:3d:79:8c:79:f7:45:fa:d3:d9:
                    78:8e:ea:54:7e:a8:9c:90:81:13:81:17:32:5a:27:
                    10:db:06:1f:f2:03:1a:bc:15:b8:fb:9f:73:8d:b7:
                    6a:e5:c5:09:24:b5:6c:8c:0d:04:25:8a:c7:53:75:
                    5d:4a:7c:75:d8:52:8e:c7:01:33:2f:ae:40:8d:b4:
                    5f:49:5d:11:5d:6c:cc:ad:5f:56:c1:5a:33:c4:52:
                    30:e5:3f:d9:8f:ee:0e:31:28:99:87:64:c0:ee:f7:
                    ce:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:93:1B:07:BA:C4:1F:F2:79:78:54:63:1D:A3:60:82:BC:C9:63:A6
            X509v3 Authority Key Identifier:
                keyid:61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/fZMbB7rEH_J5eFRjHaNggrzJY6Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/YYL6MljC0s6hWExW8CYlwD_ysNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.144.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:45:f7:b6:95:0d:49:58:6f:28:62:45:05:6d:69:3b:6d:96:
         10:23:06:4b:8a:f6:51:53:b0:94:8b:4a:73:9b:87:5d:29:38:
         71:6d:6d:75:f8:1f:df:59:72:07:ed:5d:d7:4e:7f:70:5e:1d:
         8a:72:9e:74:7f:27:cd:88:13:53:fd:74:b5:b2:86:77:c8:a2:
         64:4a:60:53:79:63:8c:bc:07:41:e7:3f:ba:bb:58:83:2f:6c:
         25:6e:34:e9:c3:22:59:86:7f:a4:43:00:46:ff:59:f3:de:ca:
         ab:67:42:34:2d:ec:f4:0c:98:6c:cc:b9:61:80:d7:d1:47:02:
         b3:5d:c7:72:5d:85:5d:9b:1f:dc:b8:c9:00:2f:76:69:4b:9c:
         42:68:cc:06:d1:4c:7c:b5:e1:f5:41:39:d6:78:db:a2:16:d8:
         e9:0e:b8:2a:0a:c4:ba:d3:cb:71:29:ad:b6:bb:6c:72:0f:09:
         c9:29:06:55:0d:9d:2d:54:06:d7:7d:4d:98:04:4f:ae:6f:36:
         ab:35:13:7b:66:2b:c9:b2:8c:8e:66:a2:92:c9:7f:c4:4e:06:
         c4:c2:18:bf:32:11:8b:2c:83:f6:3a:ce:96:08:40:6f:32:25:
         be:7c:3a:5d:19:0c:75:dd:53:26:e0:6d:f6:ce:b8:21:ac:2d:
         a5:81:46:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:29 2024 by rpki-client on console-ams.rpki-client.org