Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/Yy3jF58--ItDEyx0wdBNfTDlWCM.roa
File:                     Yy3jF58--ItDEyx0wdBNfTDlWCM.roa (raw, json)
Hash identifier:          QGV1jeICf0FBCjIsn3XLcDigUPUw62JRTyLTW4JU5Wg=
Subject key identifier:   63:2D:E3:17:9F:3E:F8:8B:43:13:2C:74:C1:D0:4D:7D:30:E5:58:23
Certificate issuer:       /CN=9893cc6db87d69cf5d01a9f96cf6bc3c8397ad80
Certificate serial:       018387EFE740AEFDBBCC23228CA281F39CB4
Authority key identifier: 98:93:CC:6D:B8:7D:69:CF:5D:01:A9:F9:6C:F6:BC:3C:83:97:AD:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJPMbbh9ac9dAan5bPa8PIOXrYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/Yy3jF58--ItDEyx0wdBNfTDlWCM.roa
Signing time:             Thu 29 Sep 2022 06:29:49 +0000
ROA not before:           Thu 29 Sep 2022 06:29:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204843
IP address blocks:        45.81.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:87:ef:e7:40:ae:fd:bb:cc:23:22:8c:a2:81:f3:9c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9893cc6db87d69cf5d01a9f96cf6bc3c8397ad80
        Validity
            Not Before: Sep 29 06:29:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=632de3179f3ef88b43132c74c1d04d7d30e55823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:72:34:9b:fc:cd:e5:c2:b2:58:34:06:68:9f:
                    48:60:f5:26:18:e5:b6:30:7b:aa:0f:b7:03:85:12:
                    08:01:71:18:a9:76:5c:1f:59:28:f9:cd:db:46:83:
                    8f:1c:1b:32:3d:c5:a9:02:55:ba:34:6c:14:05:c9:
                    04:3d:23:f2:a1:a0:fa:c1:2b:c8:b9:4f:a5:6c:7c:
                    8e:44:74:c2:a4:ea:88:4a:3a:bd:6d:25:17:10:b7:
                    d4:68:a2:a3:7d:c9:e1:01:44:2b:65:f7:7a:f2:5e:
                    ea:00:9e:89:9f:f9:9e:14:65:d8:04:e4:1b:cf:d4:
                    bb:67:82:59:39:86:80:9e:95:59:9f:31:3f:ff:0c:
                    2b:2c:7a:db:fb:40:ad:44:ac:0e:99:d9:13:e9:eb:
                    ce:3d:14:2a:a5:0b:e8:3b:20:95:2f:03:27:11:87:
                    a8:f7:bf:43:cc:00:5f:96:09:96:9c:cd:8f:5b:52:
                    54:2d:b1:c1:32:32:6d:78:88:dd:cf:26:5d:bc:4f:
                    1a:3e:e8:15:31:6b:6a:03:45:18:70:8f:88:5a:25:
                    14:7d:4a:6c:ad:71:ab:ba:21:26:c0:4c:ce:c1:95:
                    68:87:1b:c5:e3:58:fc:11:b5:58:e7:42:14:69:7b:
                    f9:be:f4:c2:32:f3:1a:4d:0b:6c:6d:3f:9a:21:19:
                    72:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2D:E3:17:9F:3E:F8:8B:43:13:2C:74:C1:D0:4D:7D:30:E5:58:23
            X509v3 Authority Key Identifier:
                keyid:98:93:CC:6D:B8:7D:69:CF:5D:01:A9:F9:6C:F6:BC:3C:83:97:AD:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJPMbbh9ac9dAan5bPa8PIOXrYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/Yy3jF58--ItDEyx0wdBNfTDlWCM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/mJPMbbh9ac9dAan5bPa8PIOXrYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:f4:81:24:6f:b1:31:2d:80:38:37:f3:b5:5f:73:ba:47:c0:
         d5:48:30:58:24:30:0a:b8:cf:fe:9d:65:f1:a1:10:25:8d:f9:
         66:53:82:a4:e9:28:2d:5f:df:09:26:1c:de:ae:07:57:d0:6e:
         9d:39:3e:84:f1:10:91:74:2c:d4:a5:fc:f3:99:3d:6f:e2:3f:
         66:ea:d5:78:3c:d9:b5:40:7c:15:44:19:fe:d4:26:3c:ee:17:
         9d:7b:67:cb:3b:15:5d:f3:d7:fa:43:7f:6a:3f:3c:7d:6c:e8:
         14:e1:57:3f:a6:9b:13:d0:a8:2d:8e:68:8c:be:ee:5e:73:88:
         bd:de:cc:69:93:83:d7:7b:d3:a0:0a:ef:c6:b9:2e:a5:c5:1d:
         08:04:53:6e:3a:a4:0d:21:fe:90:e4:45:75:c7:59:05:98:a1:
         45:28:25:c8:14:75:1e:e6:65:25:4a:f9:e0:99:94:09:1d:8d:
         0c:10:37:60:d9:48:f8:d6:ef:c6:5e:63:e4:71:df:94:99:ee:
         db:4e:2d:20:df:d8:1b:2b:aa:c3:10:ca:8b:0b:63:f4:20:05:
         ef:e4:f7:1b:d3:c1:b1:58:d0:cb:3e:cd:42:2a:ae:96:a1:8b:
         bf:bc:78:74:b1:a4:da:61:a6:19:0e:49:a7:42:36:18:1f:ce:
         d7:95:6e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:01 2024 by rpki-client on console-fra.rpki-client.org