Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/X0uVK5BbE96xzpgiSCVBhKXhM50.roa
File:                     X0uVK5BbE96xzpgiSCVBhKXhM50.roa (raw, json)
Hash identifier:          ZzlavBgv83fOagr+dWrE8HuMGyU9lv2rKd1bnltg7HU=
Subject key identifier:   5F:4B:95:2B:90:5B:13:DE:B1:CE:98:22:48:25:41:84:A5:E1:33:9D
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       099C67AF
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/X0uVK5BbE96xzpgiSCVBhKXhM50.roa
Signing time:             Tue 01 Feb 2022 11:08:23 +0000
ROA not before:           Tue 01 Feb 2022 11:08:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     63023
IP address blocks:        45.137.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161245103 (0x99c67af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Feb  1 11:08:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5f4b952b905b13deb1ce982248254184a5e1339d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:82:12:e0:34:80:18:f7:4f:d3:4e:78:4a:fe:
                    58:9f:eb:c6:a5:17:a0:01:1b:e3:28:31:ab:3f:41:
                    75:d8:82:19:a2:b4:cd:dc:ac:f8:53:70:38:cf:01:
                    b7:87:a7:66:bd:e0:2f:e6:b2:9e:c5:03:ce:bb:1a:
                    a8:c1:82:e9:05:5c:1f:05:48:55:09:e5:a4:4e:ce:
                    b4:b0:77:e1:b7:0d:a7:7f:06:c9:19:23:45:fe:15:
                    1c:23:05:15:65:18:f0:08:45:34:80:11:8b:4f:40:
                    30:52:a4:f9:10:d9:da:52:5c:4a:b5:b4:21:26:7b:
                    5c:44:ec:c1:4e:99:71:cf:24:39:16:25:f4:28:15:
                    b6:f9:42:d3:db:43:52:ac:e1:56:4e:19:bc:c3:3d:
                    b8:84:16:2a:25:f0:fa:82:91:26:1b:f4:7a:7d:1e:
                    32:50:d7:b0:ce:e6:19:74:4a:7f:81:b2:c3:9d:fd:
                    bc:30:2c:6a:59:71:7b:2a:d4:14:07:3e:7b:bb:fb:
                    d1:a3:f3:d2:8c:61:40:ec:69:70:36:52:dc:3f:9a:
                    0c:03:74:33:76:62:5f:1a:02:95:50:d4:fa:08:d1:
                    07:24:8a:2d:11:ea:4d:e9:06:52:f7:e4:8e:75:50:
                    8e:7a:c4:a6:96:f5:65:a8:2f:a1:14:2f:7c:39:c3:
                    e1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4B:95:2B:90:5B:13:DE:B1:CE:98:22:48:25:41:84:A5:E1:33:9D
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/X0uVK5BbE96xzpgiSCVBhKXhM50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:e3:f9:dc:83:28:1f:39:93:c7:ed:8a:5b:c7:ed:c1:7e:31:
         34:3d:06:2b:3b:dc:a4:d7:d4:dd:66:37:b0:c0:67:f4:51:b8:
         8c:ac:4d:2c:14:48:74:ad:7c:6b:b6:f5:e7:17:e2:03:ff:b9:
         18:94:10:9a:db:33:c5:2e:04:f4:92:91:3c:1d:35:d9:47:6d:
         88:02:26:ff:c3:11:23:d6:ec:a3:04:71:6f:f8:a8:98:c2:d1:
         6a:8c:a6:a0:ae:61:40:5e:d1:f2:62:ee:e2:48:75:22:4f:ff:
         52:b0:e1:bf:e3:f0:db:4e:73:a4:22:7e:35:ac:d9:e9:c4:ad:
         e7:1c:2f:2f:e3:02:54:9b:08:09:44:74:dc:ed:d5:68:93:e4:
         c4:10:73:bf:44:9b:23:b9:8d:b7:00:b1:a6:5b:3f:a8:4a:bd:
         55:25:b9:fb:f1:7d:fe:ed:f3:4a:d4:2a:89:bd:45:4e:d9:c1:
         18:3b:e8:46:e2:1b:37:76:86:12:98:e5:97:2f:17:8d:99:c5:
         21:ab:2d:63:f7:ce:22:be:4b:5a:7f:14:61:76:0c:61:34:0c:
         54:d0:8d:40:36:24:56:1d:2a:87:22:08:78:01:de:89:5d:cb:
         91:a3:50:a4:a8:64:ce:49:ce:50:67:b5:6e:29:7b:07:91:49:
         af:0b:5f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:04 2024 by rpki-client on console-fra.rpki-client.org