Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/fH4HIAtExYngjxCTdxYo07kwbLQ.roa
File:                     fH4HIAtExYngjxCTdxYo07kwbLQ.roa (raw, json)
Hash identifier:          BwJS97VFJkkcT0OEQxHmS30IhISGq9mrDyTwquYYLu8=
Subject key identifier:   7C:7E:07:20:0B:44:C5:89:E0:8F:10:93:77:16:28:D3:B9:30:6C:B4
Certificate issuer:       /CN=9893cc6db87d69cf5d01a9f96cf6bc3c8397ad80
Certificate serial:       018345BE1058F0441FDCC7F39C8B99E962D3
Authority key identifier: 98:93:CC:6D:B8:7D:69:CF:5D:01:A9:F9:6C:F6:BC:3C:83:97:AD:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJPMbbh9ac9dAan5bPa8PIOXrYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/fH4HIAtExYngjxCTdxYo07kwbLQ.roa
Signing time:             Fri 16 Sep 2022 10:00:27 +0000
ROA not before:           Fri 16 Sep 2022 10:00:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     397423
IP address blocks:        45.81.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:45:be:10:58:f0:44:1f:dc:c7:f3:9c:8b:99:e9:62:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9893cc6db87d69cf5d01a9f96cf6bc3c8397ad80
        Validity
            Not Before: Sep 16 10:00:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7c7e07200b44c589e08f1093771628d3b9306cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fc:0c:16:d9:64:27:14:a9:a0:b1:4e:a0:46:
                    81:cf:3c:51:88:d5:ad:29:0a:bc:f8:20:4c:d0:cf:
                    6c:4e:c5:fa:62:d5:23:33:2a:9b:09:91:1b:9f:b3:
                    40:3d:c2:c3:ac:33:21:87:ca:7f:dd:69:e7:32:04:
                    13:28:3e:cd:0a:33:ce:2a:93:03:48:80:1b:ec:de:
                    5f:0d:97:5d:9e:57:bc:70:ec:ce:5b:95:85:69:40:
                    14:f6:d2:47:2d:61:3b:51:b8:e8:d1:50:14:c4:06:
                    f4:ec:93:db:82:56:1c:dd:57:22:5d:52:71:30:27:
                    eb:29:9d:52:56:4b:2b:6b:a9:9c:78:eb:af:89:5a:
                    d2:bb:8f:88:3c:e5:b1:ad:30:08:3e:ec:5c:be:5d:
                    d2:23:6f:23:f1:2e:22:a1:06:0c:ac:bc:e2:c9:c8:
                    79:cc:39:d6:ec:04:e0:29:15:c1:8b:2d:f4:b6:0e:
                    76:fe:ef:bb:82:9c:d0:9a:63:44:14:1c:0f:d0:c1:
                    06:7b:87:b2:ba:61:f0:fe:54:df:d2:5b:76:0e:36:
                    b4:56:15:bd:45:80:9b:43:ce:2f:85:a3:2b:75:af:
                    6a:80:97:ef:c0:f9:fa:9c:29:d7:d5:1c:f9:81:19:
                    33:89:36:02:8d:7b:14:8c:a5:e6:5c:91:b9:17:52:
                    50:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7E:07:20:0B:44:C5:89:E0:8F:10:93:77:16:28:D3:B9:30:6C:B4
            X509v3 Authority Key Identifier:
                keyid:98:93:CC:6D:B8:7D:69:CF:5D:01:A9:F9:6C:F6:BC:3C:83:97:AD:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJPMbbh9ac9dAan5bPa8PIOXrYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/fH4HIAtExYngjxCTdxYo07kwbLQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/mJPMbbh9ac9dAan5bPa8PIOXrYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:bf:8b:04:02:4a:96:a1:e1:b5:ac:6e:52:28:74:0a:b8:06:
         52:5a:bf:47:5d:36:f4:52:fb:5c:9b:89:d0:a8:76:97:5b:80:
         26:d2:e7:a6:57:d9:3a:62:cd:07:55:22:3a:ed:6f:de:35:87:
         75:f3:52:78:63:12:ff:2d:f9:9a:39:e5:99:73:b4:0c:b6:ea:
         fe:c5:a1:62:63:72:f4:e0:53:12:bc:d3:1e:1c:b3:0b:59:d4:
         63:08:1e:b7:60:70:d4:a0:19:61:d8:a3:67:e4:ac:87:9b:2a:
         7f:03:ee:54:5f:b1:5e:29:ed:6e:28:4b:17:b8:b7:fe:3d:5e:
         18:56:60:08:e7:e8:3f:29:14:3c:ee:7f:91:39:8a:63:bb:b6:
         89:bd:30:ad:52:b6:48:bf:2c:cc:85:63:d8:c4:18:43:15:97:
         6a:61:df:d6:37:f7:56:56:c8:a9:ff:6e:bc:ae:06:7c:b7:a1:
         e2:08:9e:5f:13:5e:81:25:cc:80:e3:e6:53:0a:5c:cf:42:87:
         3b:0d:8a:47:c9:a6:8d:66:e3:6f:bc:d4:a1:07:80:c9:ef:28:
         a9:72:13:ba:53:b1:de:36:72:e7:14:40:84:2a:8a:88:58:e1:
         b4:7e:f1:bd:d4:fc:d0:62:fc:01:82:de:26:43:ae:13:08:9d:
         58:9a:91:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:05 2024 by rpki-client on console-ams.rpki-client.org