Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/RjZxuS_EDM_y3v3i3WFNs4X4Sr8.roa
File:                     RjZxuS_EDM_y3v3i3WFNs4X4Sr8.roa (raw, json)
Hash identifier:          NdSGxBEM+mk+GlhAuGKDBlRVGsRsskA06+ODsOcitYw=
Subject key identifier:   46:36:71:B9:2F:C4:0C:CF:F2:DE:FD:E2:DD:61:4D:B3:85:F8:4A:BF
Certificate issuer:       /CN=9893cc6db87d69cf5d01a9f96cf6bc3c8397ad80
Certificate serial:       0181D25053A03012FCF385A9993DB148130A
Authority key identifier: 98:93:CC:6D:B8:7D:69:CF:5D:01:A9:F9:6C:F6:BC:3C:83:97:AD:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJPMbbh9ac9dAan5bPa8PIOXrYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/RjZxuS_EDM_y3v3i3WFNs4X4Sr8.roa
Signing time:             Wed 06 Jul 2022 07:01:28 +0000
ROA not before:           Wed 06 Jul 2022 07:01:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22653
IP address blocks:        45.81.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d2:50:53:a0:30:12:fc:f3:85:a9:99:3d:b1:48:13:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9893cc6db87d69cf5d01a9f96cf6bc3c8397ad80
        Validity
            Not Before: Jul  6 07:01:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=463671b92fc40ccff2defde2dd614db385f84abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:67:d3:0e:6a:04:80:92:8c:ac:33:21:2a:e9:
                    51:d1:12:91:87:45:d0:67:c8:d6:cf:90:ae:11:af:
                    fa:25:f8:20:83:51:37:e5:1d:fc:56:50:88:3a:6d:
                    3d:47:a8:5c:3c:b7:e0:a1:72:d1:19:95:d8:53:e4:
                    b0:8b:37:74:63:8e:d3:6a:c1:f3:f8:01:58:06:c7:
                    7f:ac:4b:70:a0:5d:76:7e:92:d1:6c:c0:29:6e:b2:
                    e6:e5:4c:01:91:81:11:a8:05:49:68:01:59:84:d3:
                    e5:10:f7:d7:b4:b3:5a:fa:70:df:cf:fb:26:36:35:
                    af:f9:4a:8a:b7:71:b4:75:a6:d4:e7:b8:62:49:a7:
                    37:75:7b:53:b8:ae:8d:2a:57:4e:3d:7f:18:04:df:
                    6a:9e:a7:ce:63:e8:20:2d:60:97:da:81:ec:1c:4c:
                    bb:00:ed:1f:fc:4a:68:5e:39:69:81:ed:19:81:e5:
                    45:f8:85:04:11:32:2b:e2:18:0c:7e:94:f6:1d:e5:
                    aa:4d:0c:81:d1:60:b2:80:55:5f:ff:43:e1:f1:e0:
                    c1:96:3a:43:f1:6f:4c:e6:50:20:33:bf:c4:20:d2:
                    13:d1:d1:b5:94:2f:6f:18:00:82:71:4b:aa:ff:d5:
                    6f:96:ac:6a:6d:e6:53:13:ea:30:91:48:f1:13:c7:
                    53:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:36:71:B9:2F:C4:0C:CF:F2:DE:FD:E2:DD:61:4D:B3:85:F8:4A:BF
            X509v3 Authority Key Identifier:
                keyid:98:93:CC:6D:B8:7D:69:CF:5D:01:A9:F9:6C:F6:BC:3C:83:97:AD:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJPMbbh9ac9dAan5bPa8PIOXrYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/RjZxuS_EDM_y3v3i3WFNs4X4Sr8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/mJPMbbh9ac9dAan5bPa8PIOXrYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:8f:56:6a:cf:b9:5e:fb:4a:24:fb:fe:40:32:14:08:6d:e8:
         3c:02:ca:e2:8b:c4:98:0c:0b:61:7a:c8:69:67:8a:c3:7c:4f:
         07:1d:c1:94:0c:97:84:1f:4c:63:45:a1:ed:0a:bb:2b:97:04:
         68:24:f3:ea:00:84:1b:ce:25:e5:48:50:ba:e5:9f:71:26:10:
         0f:b3:a2:63:ab:ae:80:98:04:2f:44:df:15:43:b8:cf:15:8e:
         08:14:d4:b2:fd:88:05:04:df:c0:d0:4a:71:7f:6c:22:47:f5:
         53:32:f4:10:63:1f:a0:50:4f:b2:68:30:c7:a0:53:0f:d2:c3:
         c2:63:49:08:08:94:b5:7a:36:c8:15:36:08:b8:57:ee:a3:4d:
         97:78:f7:a8:09:ca:38:95:a2:6a:22:30:a5:ef:05:b2:50:2c:
         e2:2d:f7:be:aa:f0:bd:61:06:59:79:9d:ea:56:73:56:d7:92:
         4e:dd:15:9f:56:70:fa:44:50:f7:4d:95:f0:cf:ae:89:ed:5c:
         2f:aa:82:05:53:40:8e:04:be:ae:fd:04:ce:72:1d:44:fb:11:
         af:c6:eb:21:cd:14:96:66:f5:71:fc:ba:79:fa:9c:60:9c:e7:
         4c:0c:6b:9d:44:0c:78:2a:b8:9a:0c:56:2b:42:5d:43:98:c3:
         04:07:b9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:01 2024 by rpki-client on console-fra.rpki-client.org