Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/AMoFK_t1ofowLtSK4qV80ua7yGI.roa
File:                     AMoFK_t1ofowLtSK4qV80ua7yGI.roa (raw, json)
Hash identifier:          4zHPlhO5nf4a/7kz37WunTLSHKVS70XKoSeFqaS20FA=
Subject key identifier:   00:CA:05:2B:FB:75:A1:FA:30:2E:D4:8A:E2:A5:7C:D2:E6:BB:C8:62
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       018260E8CC05AC62C6EEBA84C3247DB43C8D
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/AMoFK_t1ofowLtSK4qV80ua7yGI.roa
Signing time:             Tue 02 Aug 2022 23:34:05 +0000
ROA not before:           Tue 02 Aug 2022 23:34:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        45.87.175.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:60:e8:cc:05:ac:62:c6:ee:ba:84:c3:24:7d:b4:3c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Aug  2 23:34:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=00ca052bfb75a1fa302ed48ae2a57cd2e6bbc862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:93:e9:da:20:de:eb:33:e6:72:00:6f:b6:52:
                    92:34:b1:30:51:29:34:b7:c6:f5:61:49:aa:53:5e:
                    86:28:fe:25:01:d4:71:94:ee:d2:ca:e3:ba:85:5a:
                    77:df:65:2a:d2:00:4e:f1:e0:8d:1f:de:9b:2d:11:
                    03:ea:88:49:15:51:e5:f3:01:7b:17:53:98:69:e6:
                    e1:f5:d4:a7:f1:86:94:55:bd:75:2d:d1:b5:83:69:
                    02:fb:28:15:97:7a:8e:71:94:58:ef:73:5b:9e:83:
                    d8:06:3d:84:e0:5d:e9:17:ab:86:6e:65:90:55:8d:
                    94:15:e5:6d:31:2e:bf:61:c3:a7:4c:36:53:e7:57:
                    85:88:ce:41:be:09:18:a0:ea:70:19:a4:4b:55:95:
                    ad:16:cb:23:4c:a5:67:47:6a:ad:62:f4:d0:8d:02:
                    f2:ad:d2:a5:fd:50:1d:6c:15:02:36:67:77:0e:53:
                    c2:28:dc:a7:9a:c6:ae:aa:ab:8b:c7:9a:cb:70:d1:
                    70:72:f1:c7:70:3b:f9:25:f4:01:4a:09:4d:81:ce:
                    cb:29:d9:35:1e:be:22:db:75:07:ff:88:e7:59:62:
                    2d:ab:f4:ee:60:63:b1:9d:78:30:9b:3c:21:6c:6f:
                    25:f7:e8:40:08:13:b5:03:df:2f:95:91:21:3a:41:
                    a2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CA:05:2B:FB:75:A1:FA:30:2E:D4:8A:E2:A5:7C:D2:E6:BB:C8:62
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/AMoFK_t1ofowLtSK4qV80ua7yGI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:05:3b:64:e4:71:b4:e5:7e:7d:3b:fa:7d:07:2c:03:5d:27:
         6f:8b:e0:7b:6d:87:8f:66:8a:ed:84:28:45:d5:5e:29:72:d2:
         40:fc:18:6d:e4:d7:0f:64:f6:b5:60:35:e7:ef:46:1d:7d:7a:
         b7:48:9b:08:51:3f:4d:75:f2:29:cb:15:3e:9f:3d:5d:05:9d:
         cd:3b:ad:99:a5:cf:dc:c8:2b:0c:5a:40:b5:8b:96:1e:66:df:
         9c:a6:b6:ab:04:e4:c3:17:5f:18:bc:56:5c:49:61:ee:e5:16:
         64:30:4b:5e:2b:8f:34:e7:7b:0a:ad:e3:01:b5:cd:38:f3:b5:
         d9:eb:72:20:38:61:c3:21:c8:78:86:be:a5:e8:df:de:41:ac:
         01:24:87:5e:1e:a1:6b:b3:b6:ce:04:31:9d:f3:41:44:b0:e5:
         78:12:41:b3:90:cb:3d:80:7c:ad:bb:17:3b:41:8d:6e:05:1d:
         ce:dd:b0:1e:5c:04:29:52:9a:23:e5:b4:d1:2a:3b:33:6c:db:
         64:6e:3c:6f:15:a6:64:bf:b2:f6:fd:fe:8f:3a:23:ba:65:c5:
         de:ce:26:10:b0:12:f0:c0:37:4d:69:58:91:8d:e1:0d:c4:c3:
         ee:ac:50:1e:0e:1a:8b:49:20:81:f5:2f:c0:9f:85:93:6f:52:
         ea:96:45:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJg6MwFrGLG7rqEwyR9tDyNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NGMyNjdmYTc1NGNkNjUwOWU5ZjgwNzI3MzEyM2JlZTk2
YzUyNWQwHhcNMjIwODAyMjMzNDA1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGNhMDUyYmZiNzVhMWZhMzAyZWQ0OGFlMmE1N2NkMmU2YmJjODYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJPp2iDe6zPmcgBvtlKSNLEwUSk0
t8b1YUmqU16GKP4lAdRxlO7SyuO6hVp332Uq0gBO8eCNH96bLRED6ohJFVHl8wF7
F1OYaebh9dSn8YaUVb11LdG1g2kC+ygVl3qOcZRY73NbnoPYBj2E4F3pF6uGbmWQ
VY2UFeVtMS6/YcOnTDZT51eFiM5BvgkYoOpwGaRLVZWtFssjTKVnR2qtYvTQjQLy
rdKl/VAdbBUCNmd3DlPCKNynmsauqquLx5rLcNFwcvHHcDv5JfQBSglNgc7LKdk1
Hr4i23UH/4jnWWItq/TuYGOxnXgwmzwhbG8l9+hACBO1A98vlZEhOkGieQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFADKBSv7daH6MC7UiuKlfNLmu8hiMB8GA1UdIwQY
MBaAFKRMJn+nVM1lCen4BycxI77pbFJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWIt
NDhhZjA4MDA0YjVmLzEvQU1vRktfdDFvZm93THRTSzRxVjgwdWE3eUdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWItNDhhZjA4MDA0YjVm
LzEvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVevMA0G
CSqGSIb3DQEBCwUAA4IBAQBRBTtk5HG05X59O/p9BywDXSdvi+B7bYePZorthChF
1V4pctJA/Bht5NcPZPa1YDXn70YdfXq3SJsIUT9NdfIpyxU+nz1dBZ3NO62Zpc/c
yCsMWkC1i5YeZt+cprarBOTDF18YvFZcSWHu5RZkMEteK48053sKreMBtc0487XZ
63IgOGHDIch4hr6l6N/eQawBJIdeHqFrs7bOBDGd80FEsOV4EkGzkMs9gHytuxc7
QY1uBR3O3bAeXAQpUpoj5bTRKjszbNtkbjxvFaZkv7L2/f6POiO6ZcXeziYQsBLw
wDdNaViRjeENxMPurFAeDhqLSSCB9S/An4WTb1LqlkXP
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:52 2025 by rpki-client