Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/glXmM3YcmMuE67g7WMtqdjbbZ_g.roa
File:                     glXmM3YcmMuE67g7WMtqdjbbZ_g.roa (raw, json)
Hash identifier:          vrDpNqia+xsxtUyWlOTeFPMoXc+lZq6bRKE/mUK20ew=
Subject key identifier:   82:55:E6:33:76:1C:98:CB:84:EB:B8:3B:58:CB:6A:76:36:DB:67:F8
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       0184116E0109059C883253771B837DB99DEA
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/glXmM3YcmMuE67g7WMtqdjbbZ_g.roa
Signing time:             Tue 25 Oct 2022 23:15:32 +0000
ROA not before:           Tue 25 Oct 2022 23:15:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207279
IP address blocks:        45.91.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:11:6e:01:09:05:9c:88:32:53:77:1b:83:7d:b9:9d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Oct 25 23:15:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8255e633761c98cb84ebb83b58cb6a7636db67f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fe:77:de:95:f5:3a:a2:e6:95:e5:e9:a2:1c:
                    ed:f6:94:d2:c0:78:c1:ec:75:fc:5c:57:3f:e2:f8:
                    6d:a4:87:32:35:72:06:a9:37:db:75:96:16:f0:ec:
                    7e:62:9d:ae:1e:91:e8:92:cf:0e:19:83:17:00:6b:
                    3a:26:aa:3a:c9:11:66:7e:6e:a0:06:7a:0c:35:08:
                    a6:7f:85:2f:82:4a:4f:b6:08:8f:c2:10:22:04:7b:
                    4b:22:24:85:20:b3:9f:b9:26:6d:9e:ae:4e:34:76:
                    78:7d:46:16:e1:34:af:eb:d0:e5:89:4a:4c:ee:a5:
                    d9:ad:1f:63:9d:06:e0:4d:fb:ec:f0:91:84:c6:dd:
                    61:8f:41:7a:1a:e2:d5:61:bf:46:51:92:6e:49:75:
                    d2:3c:8c:fe:10:53:23:d8:34:97:fc:e3:9a:af:ba:
                    66:b8:66:0e:95:e5:1b:bd:f1:16:4d:03:fd:04:c3:
                    03:d0:fd:4b:13:e0:ac:85:f5:6f:ed:ff:b0:cf:79:
                    9e:5f:22:1c:be:ce:28:db:ae:b8:06:e0:63:8a:89:
                    b6:63:c6:29:96:7e:08:5c:72:69:68:3d:25:40:33:
                    c7:db:0f:95:9e:d7:fb:2e:03:83:85:51:b4:84:a5:
                    67:7b:ca:ee:fb:58:02:fe:47:1f:59:f3:46:af:16:
                    c7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:55:E6:33:76:1C:98:CB:84:EB:B8:3B:58:CB:6A:76:36:DB:67:F8
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/glXmM3YcmMuE67g7WMtqdjbbZ_g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:cb:9f:0b:76:71:b2:60:08:db:f4:5d:7c:88:0f:1e:9b:aa:
         92:ce:01:0d:48:04:20:5d:34:f6:d9:83:01:8e:f0:aa:10:4c:
         ac:56:f0:91:e5:59:62:e4:f2:40:a7:50:9e:87:7b:48:18:f2:
         fb:cd:d1:74:2d:86:da:af:80:1d:9b:a6:d4:74:40:10:fc:03:
         6a:e7:ce:49:d7:41:0a:2d:66:87:a0:97:96:35:ce:2c:73:c8:
         96:ea:7a:d2:f1:bb:99:c2:81:62:6d:06:ab:f4:4a:d1:35:9e:
         9f:c2:f6:39:52:70:d3:98:82:ea:27:44:8b:5a:96:d3:64:e9:
         15:99:5d:3b:8b:fe:80:d4:5c:af:04:12:a8:9c:92:15:f9:cc:
         40:b4:c0:6a:7a:6d:c2:28:ff:52:c1:78:8a:9b:ea:4e:25:69:
         ec:d0:4d:75:b5:8a:2f:fc:0c:be:da:4d:26:1c:89:bb:77:ce:
         17:d0:09:81:94:1c:43:25:72:d7:51:ad:1e:3f:5e:e8:5e:19:
         c1:a0:84:e0:d8:db:e4:a8:0c:86:14:63:0d:33:66:53:91:d2:
         59:e9:0c:0f:68:a2:0e:2a:d1:bb:b3:44:44:39:ba:d2:54:41:
         56:5b:2d:28:23:03:28:9c:0d:5e:2a:22:e1:ee:c5:2f:f6:af:
         91:ee:a1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:04 2024 by rpki-client on console-fra.rpki-client.org