Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ce38df-f0a7-4e34-9704-a45a6317a13d/1/cCQjOVtwYKZSUq_TgsSVIozHjnc.roa
File:                     cCQjOVtwYKZSUq_TgsSVIozHjnc.roa (raw, json)
Hash identifier:          XnpYabkmgP6OoZ08DfLCSdfFh+rJOqHyFGmmrLSJEt4=
Subject key identifier:   70:24:23:39:5B:70:60:A6:52:52:AF:D3:82:C4:95:22:8C:C7:8E:77
Certificate issuer:       /CN=6deeca7b9858c2de6ccb41e5d35de0795c79ed96
Certificate serial:       07AA2B49
Authority key identifier: 6D:EE:CA:7B:98:58:C2:DE:6C:CB:41:E5:D3:5D:E0:79:5C:79:ED:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/be7Ke5hYwt5sy0Hl013geVx57ZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/ce38df-f0a7-4e34-9704-a45a6317a13d/1/cCQjOVtwYKZSUq_TgsSVIozHjnc.roa
Signing time:             Sat 01 Jan 2022 09:01:43 +0000
ROA not before:           Sat 01 Jan 2022 09:01:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34927
IP address blocks:        45.134.88.0/24 maxlen: 24
                          45.134.91.0/24 maxlen: 24
                          45.134.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128592713 (0x7aa2b49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6deeca7b9858c2de6ccb41e5d35de0795c79ed96
        Validity
            Not Before: Jan  1 09:01:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=702423395b7060a65252afd382c495228cc78e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8d:94:de:d1:1c:be:81:7d:05:96:da:90:54:
                    76:51:fd:4d:a5:cf:fc:59:61:96:85:79:c8:d1:16:
                    41:7f:10:09:55:38:74:72:fa:e1:fe:c2:31:b3:ee:
                    19:63:97:b7:44:46:91:6d:79:ba:c3:5c:30:25:e0:
                    ce:90:01:00:4b:98:6b:b3:d3:26:b1:08:04:c2:02:
                    ff:56:fe:0c:17:30:ed:73:8d:56:50:da:51:ac:5e:
                    74:2a:c1:84:27:32:31:8c:95:06:4f:46:c7:cd:f2:
                    87:a3:f4:33:79:29:9f:09:7b:d9:c4:90:33:ac:a5:
                    6e:57:e7:3f:48:d2:68:0d:a8:08:08:fb:1e:41:33:
                    a3:23:a2:cf:00:da:ce:23:e6:84:c5:4b:26:96:54:
                    7c:c9:1c:c1:c0:df:b2:93:81:9a:dd:2a:57:f7:a9:
                    9e:90:3d:57:37:97:63:d3:c6:5b:e5:d7:d2:f5:d1:
                    11:9b:f9:8a:08:c4:1e:4f:40:e1:2f:45:70:ab:13:
                    e4:14:ae:45:3e:49:1c:81:62:f2:cd:bf:3f:ae:07:
                    11:99:56:78:c2:4a:02:4e:43:5b:17:4f:5a:6b:2a:
                    82:4c:8b:14:3e:ae:86:04:f9:9a:6f:31:82:cf:4e:
                    5d:df:4a:79:f7:0f:37:06:1b:81:ab:ab:ce:2f:89:
                    af:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:24:23:39:5B:70:60:A6:52:52:AF:D3:82:C4:95:22:8C:C7:8E:77
            X509v3 Authority Key Identifier:
                keyid:6D:EE:CA:7B:98:58:C2:DE:6C:CB:41:E5:D3:5D:E0:79:5C:79:ED:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/be7Ke5hYwt5sy0Hl013geVx57ZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ce38df-f0a7-4e34-9704-a45a6317a13d/1/cCQjOVtwYKZSUq_TgsSVIozHjnc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ce38df-f0a7-4e34-9704-a45a6317a13d/1/be7Ke5hYwt5sy0Hl013geVx57ZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.88.0/23
                  45.134.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:a8:48:6c:6a:a8:99:65:03:07:06:d3:ac:31:d4:31:b1:0f:
         55:57:89:c1:38:03:46:54:39:ab:2d:7d:02:eb:89:ca:1b:07:
         c6:bd:64:af:bd:e3:a6:0a:45:e5:fe:05:73:37:e9:fc:dc:f4:
         c0:a8:74:fe:c7:68:35:f1:5c:c9:7c:ea:32:55:5d:aa:0e:d2:
         0a:16:98:b7:be:8d:16:85:42:a7:fc:7a:d4:de:cf:5c:7b:70:
         eb:ca:ed:83:01:2b:93:f3:cd:cc:b3:ea:ad:3b:f5:aa:22:68:
         dc:0e:3b:2a:b2:91:63:44:10:28:90:89:6c:06:a5:a1:de:20:
         a8:ad:27:d1:82:c4:dc:1e:6f:18:98:09:10:e4:a0:83:da:f1:
         d5:0f:63:f7:d8:d8:72:66:ff:cd:4e:80:3f:3c:d0:5c:0c:16:
         37:46:d5:3d:88:b3:ff:43:ba:7c:54:82:a6:4c:6c:20:bd:61:
         1e:dd:90:ce:42:18:92:f1:35:1c:31:37:20:98:3b:ff:51:a7:
         a4:89:6b:ba:f4:46:0d:88:70:c0:50:f7:fb:bd:7e:a2:2f:9b:
         0f:62:2a:f0:3d:44:2e:c8:0a:55:eb:99:8a:28:6e:4a:e0:20:
         03:ec:22:10:cf:40:df:75:46:54:d1:2e:9f:1a:61:d6:c2:5a:
         36:db:22:2e
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEB6orSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZGVlY2E3Yjk4NThjMmRlNmNjYjQxZTVkMzVkZTA3OTVjNzllZDk2MB4XDTIyMDEw
MTA5MDE0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzAyNDIzMzk1Yjcw
NjBhNjUyNTJhZmQzODJjNDk1MjI4Y2M3OGU3NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALSNlN7RHL6BfQWW2pBUdlH9TaXP/FlhloV5yNEWQX8QCVU4
dHL64f7CMbPuGWOXt0RGkW15usNcMCXgzpABAEuYa7PTJrEIBMIC/1b+DBcw7XON
VlDaUaxedCrBhCcyMYyVBk9Gx83yh6P0M3kpnwl72cSQM6ylblfnP0jSaA2oCAj7
HkEzoyOizwDaziPmhMVLJpZUfMkcwcDfspOBmt0qV/epnpA9VzeXY9PGW+XX0vXR
EZv5igjEHk9A4S9FcKsT5BSuRT5JHIFi8s2/P64HEZlWeMJKAk5DWxdPWmsqgkyL
FD6uhgT5mm8xgs9OXd9KefcPNwYbgaurzi+Jr3ECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRwJCM5W3BgplJSr9OCxJUijMeOdzAfBgNVHSMEGDAWgBRt7sp7mFjC3mzL
QeXTXeB5XHntljAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JlN0tlNWhZd3Q1c3kwSGwwMTNnZVZ4NTdaWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvY2UzOGRmLWYwYTctNGUzNC05NzA0LWE0NWE2MzE3YTEzZC8x
L2NDUWpPVnR3WUtaU1VxX1Rnc1NWSW96SGpuYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
Y2UzOGRmLWYwYTctNGUzNC05NzA0LWE0NWE2MzE3YTEzZC8xL2JlN0tlNWhZd3Q1
c3kwSGwwMTNnZVZ4NTdaWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAS2GWAMEAC2GWzANBgkqhkiG9w0B
AQsFAAOCAQEAHKhIbGqomWUDBwbTrDHUMbEPVVeJwTgDRlQ5qy19AuuJyhsHxr1k
r73jpgpF5f4Fczfp/Nz0wKh0/sdoNfFcyXzqMlVdqg7SChaYt76NFoVCp/x61N7P
XHtw68rtgwErk/PNzLPqrTv1qiJo3A47KrKRY0QQKJCJbAalod4gqK0n0YLE3B5v
GJgJEOSgg9rx1Q9j99jYcmb/zU6APzzQXAwWN0bVPYiz/0O6fFSCpkxsIL1hHt2Q
zkIYkvE1HDE3IJg7/1GnpIlruvRGDYhwwFD3+71+oi+bD2Iq8D1ELsgKVeuZiihu
SuAgA+wiEM9A33VGVNEunxph1sJaNtsiLg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:41 2024 by rpki-client on console-fra.rpki-client.org