Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/WEgI57kbsu11ChON0T-rbf0WRiQ.roa
File:                     WEgI57kbsu11ChON0T-rbf0WRiQ.roa (raw, json)
Hash identifier:          5MeRGQY26t7/piJklyXMOf4KSBeyD7hmtsCMzfdjASY=
Subject key identifier:   58:48:08:E7:B9:1B:B2:ED:75:0A:13:8D:D1:3F:AB:6D:FD:16:46:24
Certificate issuer:       /CN=9893cc6db87d69cf5d01a9f96cf6bc3c8397ad80
Certificate serial:       0164E967
Authority key identifier: 98:93:CC:6D:B8:7D:69:CF:5D:01:A9:F9:6C:F6:BC:3C:83:97:AD:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJPMbbh9ac9dAan5bPa8PIOXrYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/WEgI57kbsu11ChON0T-rbf0WRiQ.roa
Signing time:             Mon 04 Apr 2022 13:02:29 +0000
ROA not before:           Mon 04 Apr 2022 13:02:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209371
IP address blocks:        45.81.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23390567 (0x164e967)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9893cc6db87d69cf5d01a9f96cf6bc3c8397ad80
        Validity
            Not Before: Apr  4 13:02:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=584808e7b91bb2ed750a138dd13fab6dfd164624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7c:e8:78:46:bb:ef:c7:00:13:36:4d:73:ea:
                    64:05:b8:3e:3f:c3:f1:e1:1c:2f:d0:b3:eb:dd:b0:
                    27:00:73:cd:88:6c:e8:d4:e9:b4:35:ba:f4:20:ce:
                    96:4d:8f:94:81:ce:4a:87:8a:58:60:71:da:95:f0:
                    f9:db:7b:bb:7e:a2:20:8c:76:8f:60:e9:1b:f0:6a:
                    c3:d9:16:55:1e:e4:53:99:f4:f0:2a:5c:14:c9:8e:
                    a4:bd:76:7c:f0:70:7c:4d:0b:30:5c:1e:9b:28:90:
                    e3:3c:16:52:34:a4:ef:e2:9e:b6:a6:c7:4a:a0:19:
                    c5:1c:24:25:5c:65:4e:36:de:04:10:24:bf:d3:ae:
                    1b:68:46:1c:51:8e:b5:38:a9:cd:76:70:7a:7f:70:
                    d7:01:d2:2b:46:4c:14:22:cb:7e:19:a2:0f:32:74:
                    88:4c:91:13:07:e3:f4:64:79:9a:80:4f:a3:1c:db:
                    85:32:a4:bd:82:5f:c2:57:68:6d:25:49:75:fe:db:
                    2e:dd:7d:09:f8:66:11:99:ff:cd:fa:47:1d:73:3c:
                    77:88:b2:2d:9a:dd:fa:a5:76:4d:6e:55:ee:8e:d7:
                    ca:a3:29:80:d4:8c:a8:4c:b5:fa:e4:9a:4d:b7:97:
                    05:65:1e:bd:79:51:c7:fb:6b:40:8f:cb:d9:41:20:
                    df:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:48:08:E7:B9:1B:B2:ED:75:0A:13:8D:D1:3F:AB:6D:FD:16:46:24
            X509v3 Authority Key Identifier:
                keyid:98:93:CC:6D:B8:7D:69:CF:5D:01:A9:F9:6C:F6:BC:3C:83:97:AD:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJPMbbh9ac9dAan5bPa8PIOXrYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/WEgI57kbsu11ChON0T-rbf0WRiQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/mJPMbbh9ac9dAan5bPa8PIOXrYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:72:07:85:9f:e7:5e:17:26:82:76:55:5a:08:5a:18:62:9d:
         52:f8:d8:0b:dd:29:65:d6:69:28:09:70:56:95:09:3e:8f:f7:
         11:f2:db:4e:7a:59:c0:b2:4b:15:a1:62:3a:54:f2:72:72:b7:
         41:82:bf:8c:29:d0:4c:a2:13:6a:ef:26:01:41:96:42:5f:21:
         bc:85:06:89:20:a7:3f:24:df:35:0e:bf:6a:f8:b6:99:bb:12:
         ad:20:74:0a:46:f5:83:23:cb:18:d6:29:fe:fd:13:8b:fb:01:
         a5:2f:10:4a:ee:1d:4f:8a:a5:d5:61:5e:09:18:e5:f6:9b:83:
         52:ce:8a:ac:49:39:64:a4:6d:ff:0e:ce:c0:54:bc:3d:8a:9b:
         ee:59:f7:92:67:03:2a:df:0c:f5:e2:09:4d:a6:f8:c8:06:59:
         32:b8:ee:9c:a3:dd:3a:23:05:29:7a:a1:ca:01:fb:2e:4e:83:
         08:7c:01:78:eb:78:d6:7c:c8:cf:43:4e:e0:6c:ae:c0:4d:aa:
         90:27:62:97:05:36:a9:83:dd:ee:e2:81:3b:a7:01:00:e7:22:
         af:cb:2a:63:13:55:a9:04:9c:35:bd:5e:68:0b:81:f2:d1:5a:
         2d:0f:5f:f1:12:08:a1:ef:64:27:04:df:48:85:de:61:b9:bb:
         a0:90:af:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:05 2024 by rpki-client on console-ams.rpki-client.org