Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/4ZyYY7Rk01nuNQIR8VMLEPPWqfw.roa
File:                     4ZyYY7Rk01nuNQIR8VMLEPPWqfw.roa (raw, json)
Hash identifier:          2LnOlCV/co2uJ/sqXaTh3N8vf4OKQaF+mC8oZcNpnDk=
Subject key identifier:   E1:9C:98:63:B4:64:D3:59:EE:35:02:11:F1:53:0B:10:F3:D6:A9:FC
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       0185714C138309706530E30AAB35DA53A236
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/4ZyYY7Rk01nuNQIR8VMLEPPWqfw.roa
Signing time:             Mon 02 Jan 2023 07:04:49 +0000
ROA not before:           Mon 02 Jan 2023 07:04:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42093
IP address blocks:        45.148.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:4c:13:83:09:70:65:30:e3:0a:ab:35:da:53:a2:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Jan  2 07:04:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e19c9863b464d359ee350211f1530b10f3d6a9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a1:35:c6:59:4b:5a:ee:de:c9:ed:24:c3:16:
                    61:cf:dd:9a:31:75:73:b9:dc:98:59:d6:db:df:fc:
                    a6:9d:f0:f2:4b:19:fb:dc:6f:e2:6c:91:53:9e:3a:
                    1d:1a:cf:cb:9a:6d:44:58:08:f2:a8:37:d4:3b:4a:
                    8a:98:5d:76:26:02:1c:8d:ab:df:cd:93:41:fb:df:
                    89:ae:35:cc:ed:4e:c0:8f:2a:77:23:5e:a3:3e:13:
                    7e:0f:a4:7f:47:99:4f:e9:f4:90:5b:fb:50:c4:38:
                    a9:ed:08:8a:70:d5:0f:41:68:25:15:c3:2d:e5:80:
                    fc:9e:67:07:c6:4e:2d:4e:eb:f2:57:0e:78:42:77:
                    86:a7:ec:cb:eb:71:ea:2b:37:aa:46:88:e4:96:fd:
                    98:53:17:0a:94:64:67:d1:49:24:c2:ff:90:e9:d5:
                    cc:03:5f:7c:0f:b2:11:f7:8a:58:a2:db:76:f4:e5:
                    0b:f3:fb:2b:b4:b7:0a:6c:23:7c:b9:86:7f:41:8a:
                    c4:c2:f9:f2:13:8a:d3:03:17:4a:f9:0f:09:8b:ae:
                    8f:f4:34:da:af:8d:a6:c6:43:9b:13:fd:d2:5a:bb:
                    dd:dc:b8:b1:fc:95:26:16:4e:68:73:eb:23:bf:4f:
                    da:f4:47:5c:68:ff:05:1b:17:f0:1b:07:9d:9d:16:
                    74:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9C:98:63:B4:64:D3:59:EE:35:02:11:F1:53:0B:10:F3:D6:A9:FC
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/4ZyYY7Rk01nuNQIR8VMLEPPWqfw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:47:af:ff:b9:1f:2b:ca:a8:49:b1:d9:9a:b9:3b:6b:65:45:
         48:d9:22:4c:93:f4:1e:ad:27:55:fc:62:a7:54:60:ec:25:02:
         1d:57:21:c7:05:1f:65:81:41:00:49:a9:1a:12:a6:e6:6c:39:
         ad:5c:34:ac:45:a8:62:b5:ae:e3:ea:ab:7f:66:a0:23:76:78:
         c0:da:cf:9f:d8:99:79:b1:34:42:67:44:bb:f1:a6:5b:ab:cb:
         d1:ed:92:c9:27:45:2f:89:08:c7:e2:77:e5:fc:94:be:8b:1e:
         88:96:ca:2b:6c:cb:c1:33:3c:e1:0d:21:ee:e0:7b:88:dd:00:
         99:c6:9a:a6:44:f7:91:f3:79:d1:10:3c:a1:77:89:f4:37:f2:
         34:50:02:00:f7:28:7c:43:6e:51:71:69:4f:f9:8b:82:23:e1:
         e1:09:08:9e:44:5d:9a:83:bc:de:35:38:0f:f2:ee:ad:6a:9e:
         9b:be:39:67:3e:f8:d5:e3:50:f6:2b:cb:bd:75:0d:d1:1a:e2:
         37:16:f4:39:26:cb:d7:42:43:f0:7b:db:44:c6:c4:94:90:ba:
         05:c6:7a:0f:3b:09:60:cd:bb:81:bd:61:12:4d:48:ad:60:97:
         5c:61:5a:d7:87:29:01:7a:e1:57:14:19:f4:0e:9a:5f:75:a1:
         58:70:c7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:16 2024 by rpki-client on console-fra.rpki-client.org