Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/msnV9VL9FWioD88fjUKd2bJofW4.roa
File:                     msnV9VL9FWioD88fjUKd2bJofW4.roa (raw, json)
Hash identifier:          Vnv8UDOyNOi/IZEBDtu8kuA/6Z+FHlRXf+bdQUH6tSQ=
Subject key identifier:   9A:C9:D5:F5:52:FD:15:68:A8:0F:CF:1F:8D:42:9D:D9:B2:68:7D:6E
Certificate issuer:       /CN=9893cc6db87d69cf5d01a9f96cf6bc3c8397ad80
Certificate serial:       021BEFF5
Authority key identifier: 98:93:CC:6D:B8:7D:69:CF:5D:01:A9:F9:6C:F6:BC:3C:83:97:AD:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJPMbbh9ac9dAan5bPa8PIOXrYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/msnV9VL9FWioD88fjUKd2bJofW4.roa
Signing time:             Fri 24 Jun 2022 14:02:31 +0000
ROA not before:           Fri 24 Jun 2022 14:02:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209371
IP address blocks:        45.81.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35385333 (0x21beff5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9893cc6db87d69cf5d01a9f96cf6bc3c8397ad80
        Validity
            Not Before: Jun 24 14:02:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9ac9d5f552fd1568a80fcf1f8d429dd9b2687d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:70:25:c7:3d:f1:01:7f:70:cd:f4:c8:c6:b6:
                    31:d9:a0:9d:ef:4e:b5:61:38:66:9a:6d:c2:10:cb:
                    d4:00:16:eb:6b:1c:5e:fe:39:b5:1c:cb:dc:eb:06:
                    85:cb:02:07:e1:05:45:55:c5:67:74:18:59:ed:85:
                    50:c0:6a:d9:d7:a8:a6:30:fa:ee:ff:6b:e3:3a:fa:
                    67:cc:77:dc:4a:88:3b:c8:28:f0:a3:39:8d:b7:aa:
                    c6:9f:09:a4:86:cf:7a:d1:93:53:e7:e2:f0:de:bb:
                    f0:31:86:f7:f9:eb:ca:c5:57:77:52:82:40:b4:bb:
                    0e:66:60:7a:1d:ed:fd:4c:5e:75:47:d3:6a:cd:dd:
                    db:bf:e6:55:54:8b:f6:1b:2c:16:d8:2d:dd:d6:f2:
                    86:a0:c9:c7:ad:58:a9:8b:f7:5d:ad:a7:07:0c:20:
                    ce:ee:ed:49:93:7d:19:02:4b:fb:3c:13:e2:e3:50:
                    f4:e9:1a:28:37:81:8a:87:26:d1:d1:b3:8f:24:4e:
                    2b:5d:b3:52:2f:04:5e:e5:f9:f0:6c:76:93:35:25:
                    3a:36:cf:2b:af:60:d7:cc:fa:87:54:22:a5:9e:90:
                    78:f7:f3:96:e3:5e:e4:54:73:21:03:7e:7b:4f:de:
                    6e:b3:eb:60:7e:3c:b7:38:ea:4b:2c:3a:51:9f:c4:
                    ed:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C9:D5:F5:52:FD:15:68:A8:0F:CF:1F:8D:42:9D:D9:B2:68:7D:6E
            X509v3 Authority Key Identifier:
                keyid:98:93:CC:6D:B8:7D:69:CF:5D:01:A9:F9:6C:F6:BC:3C:83:97:AD:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJPMbbh9ac9dAan5bPa8PIOXrYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/msnV9VL9FWioD88fjUKd2bJofW4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/mJPMbbh9ac9dAan5bPa8PIOXrYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:90:42:c2:b7:c1:49:08:a8:d4:ab:c0:32:b5:d4:64:85:dc:
         ad:7a:45:44:5e:11:44:b9:b1:36:db:0a:5e:d5:27:16:cf:3c:
         a4:14:7d:25:22:d5:06:ef:6b:5d:5b:a7:0b:7c:4c:72:be:cb:
         73:20:2d:c6:08:2a:90:a2:24:4b:b2:27:a0:d8:b4:0b:5a:f4:
         33:ba:5f:f0:99:b6:d4:e1:57:e3:e0:37:70:f2:4a:5b:f7:16:
         74:9a:46:18:74:62:61:89:c3:0e:ad:35:ad:e6:97:9f:02:c4:
         6b:f2:9e:98:37:bb:96:69:49:87:69:56:c0:75:2f:f8:2a:e6:
         82:e7:b6:fb:9d:9a:c4:04:6d:6a:d4:4f:89:37:82:04:0e:98:
         b5:f0:7d:35:7e:95:14:11:28:af:a2:53:e6:3a:b1:31:7c:59:
         50:9f:6f:a7:2b:a0:f5:4d:e3:c7:dc:aa:cb:37:1a:f2:51:99:
         c7:5f:07:10:8b:46:59:3a:8c:d3:95:39:7c:81:fd:59:8f:8b:
         e9:2a:a2:78:0b:b5:26:75:3c:f4:26:5d:49:38:78:22:84:f8:
         99:26:27:a6:45:19:ea:fe:8c:3f:41:4c:3b:b5:a8:89:1a:bc:
         65:70:41:21:17:34:5e:2a:26:5c:51:af:68:ad:a3:d8:7e:17:
         61:cf:7d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:01 2024 by rpki-client on console-fra.rpki-client.org