Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/B7F7CmAjCBQjIS6xxTqZDvGYIDU.roa
File:                     B7F7CmAjCBQjIS6xxTqZDvGYIDU.roa (raw, json)
Hash identifier:          Z8v/7crmCXPuSvmbqrc8hbYqBSLvD84rGBCg2jXpz2I=
Subject key identifier:   07:B1:7B:0A:60:23:08:14:23:21:2E:B1:C5:3A:99:0E:F1:98:20:35
Certificate issuer:       /CN=10c06ca931cb67464e76fbefb3db68f3f12acd41
Certificate serial:       01843743A17322BDDB7B4A258D73A32A9D2E
Authority key identifier: 10:C0:6C:A9:31:CB:67:46:4E:76:FB:EF:B3:DB:68:F3:F1:2A:CD:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMBsqTHLZ0ZOdvvvs9to8_EqzUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/B7F7CmAjCBQjIS6xxTqZDvGYIDU.roa
Signing time:             Wed 02 Nov 2022 07:34:49 +0000
ROA not before:           Wed 02 Nov 2022 07:34:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20454
IP address blocks:        45.149.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:37:43:a1:73:22:bd:db:7b:4a:25:8d:73:a3:2a:9d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c06ca931cb67464e76fbefb3db68f3f12acd41
        Validity
            Not Before: Nov  2 07:34:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=07b17b0a6023081423212eb1c53a990ef1982035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:57:37:bd:e5:8e:a5:f8:97:cc:4d:ef:07:10:
                    0b:ff:c1:c1:6f:0c:c6:eb:a5:75:7c:8b:ea:45:41:
                    2e:ba:11:33:f6:7d:fa:62:65:3f:19:62:f8:c1:2c:
                    f2:c7:ce:61:06:53:05:c9:d9:d7:e5:5d:59:bd:3b:
                    fb:18:4a:c8:fb:a5:9b:b1:2f:de:78:ea:0b:9c:a0:
                    b8:36:e8:88:40:69:4d:a8:e7:5f:08:56:66:58:c2:
                    3d:21:88:bb:e2:8f:c9:c8:25:48:18:a7:e3:43:de:
                    29:27:5c:fc:fa:d7:98:6d:00:10:29:09:da:dd:3a:
                    1f:02:a6:81:a8:df:f1:c2:f7:cd:05:32:1d:95:d1:
                    8c:67:df:d1:f9:1d:ea:06:e5:1c:d9:16:34:ea:dd:
                    5c:c3:30:e1:a8:73:b7:de:01:38:0f:88:19:39:91:
                    28:98:6a:1d:5d:f4:7a:0e:c4:a0:47:82:d9:ae:26:
                    d6:d1:72:82:f2:12:12:1c:58:59:00:74:ec:37:b7:
                    f7:b0:a2:15:27:d1:8a:66:f2:dd:01:02:6a:83:7d:
                    45:82:77:6d:4d:a4:62:6a:fc:e6:52:77:f9:d5:50:
                    3c:b2:d5:ef:38:70:21:18:51:a8:b9:fd:64:b5:ed:
                    de:85:19:ba:2d:f6:5d:ad:ba:9c:b9:8b:e4:a3:1f:
                    c9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B1:7B:0A:60:23:08:14:23:21:2E:B1:C5:3A:99:0E:F1:98:20:35
            X509v3 Authority Key Identifier:
                keyid:10:C0:6C:A9:31:CB:67:46:4E:76:FB:EF:B3:DB:68:F3:F1:2A:CD:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMBsqTHLZ0ZOdvvvs9to8_EqzUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/B7F7CmAjCBQjIS6xxTqZDvGYIDU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/EMBsqTHLZ0ZOdvvvs9to8_EqzUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:06:0c:ee:00:50:78:a5:77:0a:b3:d9:6c:3b:0e:55:de:8e:
         39:40:d5:f5:01:46:67:db:77:9a:ac:41:44:64:87:41:aa:9e:
         2f:18:ee:b2:30:9e:5b:df:11:f5:c6:de:e1:ee:cc:89:4c:22:
         41:f1:2e:cf:49:52:87:17:e2:2f:8a:e2:c2:26:80:4d:8b:8e:
         90:65:e3:b5:b3:4f:cb:97:ae:24:89:13:a0:71:fd:50:6a:8d:
         36:70:28:5c:34:fe:72:2a:c9:56:29:f9:0c:fc:dd:41:3d:1c:
         d8:bf:84:10:43:ef:c9:60:79:03:2a:d9:48:d5:e7:07:1a:a7:
         58:63:c1:1c:5a:17:ba:4a:fa:1b:a5:6f:17:9c:8a:0a:2b:39:
         1c:3d:17:59:a0:83:43:0c:96:33:07:ba:c2:5b:77:9b:06:5b:
         77:67:25:83:a6:ec:c6:33:ea:95:fd:68:e0:25:7a:9c:40:f3:
         b2:6f:ad:a8:da:64:c1:ad:e8:db:39:b8:76:7b:66:71:01:08:
         73:7e:e6:87:eb:10:52:5f:84:2e:fe:eb:0d:56:d3:44:11:9e:
         ef:45:f7:19:9e:b2:6e:5d:0d:10:5d:fc:29:86:65:3e:66:3a:
         8a:3a:a1:56:22:b9:04:20:34:3b:51:53:a9:f4:81:71:f0:19:
         0c:38:63:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQ3Q6FzIr3be0oljXOjKp0uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYzA2Y2E5MzFjYjY3NDY0ZTc2ZmJlZmIzZGI2OGYzZjEy
YWNkNDEwHhcNMjIxMTAyMDczNDQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2IxN2IwYTYwMjMwODE0MjMyMTJlYjFjNTNhOTkwZWYxOTgyMDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1c3veWOpfiXzE3vBxAL/8HBbwzG
66V1fIvqRUEuuhEz9n36YmU/GWL4wSzyx85hBlMFydnX5V1ZvTv7GErI+6WbsS/e
eOoLnKC4NuiIQGlNqOdfCFZmWMI9IYi74o/JyCVIGKfjQ94pJ1z8+teYbQAQKQna
3TofAqaBqN/xwvfNBTIdldGMZ9/R+R3qBuUc2RY06t1cwzDhqHO33gE4D4gZOZEo
mGodXfR6DsSgR4LZribW0XKC8hISHFhZAHTsN7f3sKIVJ9GKZvLdAQJqg31Fgndt
TaRiavzmUnf51VA8stXvOHAhGFGouf1kte3ehRm6LfZdrbqcuYvkox/JFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAexewpgIwgUIyEuscU6mQ7xmCA1MB8GA1UdIwQY
MBaAFBDAbKkxy2dGTnb777PbaPPxKs1BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU1Cc3FUSExaMFpPZHZ2dnM5dG84X0VxelVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9jZTdmNmMtMDZhNi00ODFmLTg3Zjkt
NjAyMWFhMzM0ZmE1LzEvQjdGN0NtQWpDQlFqSVM2eHhUcVpEdkdZSURVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9jZTdmNmMtMDZhNi00ODFmLTg3ZjktNjAyMWFhMzM0ZmE1
LzEvRU1Cc3FUSExaMFpPZHZ2dnM5dG84X0VxelVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZXqMA0G
CSqGSIb3DQEBCwUAA4IBAQAoBgzuAFB4pXcKs9lsOw5V3o45QNX1AUZn23earEFE
ZIdBqp4vGO6yMJ5b3xH1xt7h7syJTCJB8S7PSVKHF+IviuLCJoBNi46QZeO1s0/L
l64kiROgcf1Qao02cChcNP5yKslWKfkM/N1BPRzYv4QQQ+/JYHkDKtlI1ecHGqdY
Y8EcWhe6SvobpW8XnIoKKzkcPRdZoINDDJYzB7rCW3ebBlt3ZyWDpuzGM+qV/Wjg
JXqcQPOyb62o2mTBrejbObh2e2ZxAQhzfuaH6xBSX4Qu/usNVtNEEZ7vRfcZnrJu
XQ0QXfwphmU+ZjqKOqFWIrkEIDQ7UVOp9IFx8BkMOGON
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:26 2024 by rpki-client on console-fra.rpki-client.org