Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/AyEFlFS2dghyX_2uxcqJdz2WsQc.roa
File:                     AyEFlFS2dghyX_2uxcqJdz2WsQc.roa (raw, json)
Hash identifier:          JMJjuTxVm9JC8VIXkVJ9xu6aXkfJ6e0r1+MPeoE6GcE=
Subject key identifier:   03:21:05:94:54:B6:76:08:72:5F:FD:AE:C5:CA:89:77:3D:96:B1:07
Certificate issuer:       /CN=b06c430b61be7a380191cd5dfd105c3af21482fc
Certificate serial:       15ABBB
Authority key identifier: B0:6C:43:0B:61:BE:7A:38:01:91:CD:5D:FD:10:5C:3A:F2:14:82:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sGxDC2G-ejgBkc1d_RBcOvIUgvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/AyEFlFS2dghyX_2uxcqJdz2WsQc.roa
Signing time:             Sat 01 Jan 2022 01:56:02 +0000
ROA not before:           Sat 01 Jan 2022 01:56:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61591
IP address blocks:        45.156.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1420219 (0x15abbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b06c430b61be7a380191cd5dfd105c3af21482fc
        Validity
            Not Before: Jan  1 01:56:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0321059454b67608725ffdaec5ca89773d96b107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:eb:32:d5:4d:27:c7:d0:66:d0:98:9d:43:1a:
                    6f:eb:cd:f2:39:8d:69:1c:bf:a9:e4:45:c4:93:1a:
                    7e:97:82:07:c2:70:aa:46:b5:4d:3e:00:7c:b9:51:
                    4b:86:a0:a1:5e:f9:81:09:74:7f:22:d5:ad:ee:3c:
                    b8:87:63:e8:20:56:6e:3e:39:09:f9:a4:14:8b:bb:
                    0f:09:2e:09:28:1c:7f:84:90:e6:47:85:53:b0:18:
                    96:fd:b0:fb:86:3f:a2:6f:af:74:7c:78:bc:c9:1e:
                    02:26:6c:81:ae:e8:b7:de:9b:6d:76:23:d9:a7:ca:
                    e1:34:09:6d:e0:cc:6b:79:a4:88:dd:b2:0c:39:fa:
                    dd:d2:a7:c2:fd:c2:b1:38:bd:93:0d:1e:ab:5e:fc:
                    db:07:c0:22:e0:65:61:3a:9a:94:af:aa:af:16:40:
                    7d:a9:3b:f9:b2:45:6c:da:ef:f0:96:1c:9a:0b:0e:
                    70:fe:24:95:78:52:1d:3b:2b:64:a1:07:60:6d:df:
                    1a:73:0d:cf:64:aa:02:c0:9f:65:93:ee:36:00:4e:
                    5f:47:a3:9c:76:71:6f:e9:d9:da:8c:16:7e:95:8a:
                    e4:3d:a3:58:69:9f:71:c7:7d:36:02:cd:a1:0a:29:
                    b8:d5:c7:9b:51:87:4f:dc:ae:69:18:ed:d1:b6:bd:
                    74:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:21:05:94:54:B6:76:08:72:5F:FD:AE:C5:CA:89:77:3D:96:B1:07
            X509v3 Authority Key Identifier:
                keyid:B0:6C:43:0B:61:BE:7A:38:01:91:CD:5D:FD:10:5C:3A:F2:14:82:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGxDC2G-ejgBkc1d_RBcOvIUgvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/AyEFlFS2dghyX_2uxcqJdz2WsQc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/sGxDC2G-ejgBkc1d_RBcOvIUgvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.156.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:54:08:fc:3e:c1:22:ea:0f:d8:23:fd:58:c5:b9:99:99:ce:
         59:8e:62:63:28:08:8f:f4:91:63:76:9f:06:75:54:78:be:b5:
         69:e6:60:23:ed:c3:77:d6:73:3c:c2:a7:89:f9:95:a2:4a:4c:
         23:ae:38:87:b8:9d:28:19:e2:31:b7:82:71:76:e5:1a:72:7e:
         d4:55:17:95:0d:92:d7:9d:94:8d:7e:89:d4:1f:1f:48:e7:9a:
         89:73:d4:ec:9d:7e:bc:c7:cf:87:a5:f6:18:54:8e:e0:c3:60:
         85:6f:af:7e:dd:d2:1e:e5:eb:10:ad:f8:ea:13:c5:b8:4e:0c:
         4e:e2:8c:a3:6d:c0:18:b1:d2:63:16:c9:25:88:80:0b:22:d3:
         da:9c:13:b8:a4:25:7a:a0:77:89:66:a2:bd:69:f5:c1:9e:8a:
         68:72:e8:95:01:40:1b:bb:df:c9:81:ea:ab:42:43:e6:c5:51:
         a7:55:78:cf:a2:6b:f5:05:c4:38:e2:be:d1:26:fa:ca:12:11:
         8a:23:2a:c7:5f:d2:33:b4:c6:c5:06:dd:e2:4f:e8:40:f2:26:
         34:35:5d:43:7c:60:dc:29:45:f4:cc:87:4c:81:31:88:a1:76:
         16:9f:9d:6e:cb:ff:fa:1d:70:db:d9:39:cd:b3:2c:0f:e1:5c:
         f1:b1:13:56
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDFau7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIw
NmM0MzBiNjFiZTdhMzgwMTkxY2Q1ZGZkMTA1YzNhZjIxNDgyZmMwHhcNMjIwMTAx
MDE1NjAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygwMzIxMDU5NDU0YjY3
NjA4NzI1ZmZkYWVjNWNhODk3NzNkOTZiMTA3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0Osy1U0nx9Bm0JidQxpv683yOY1pHL+p5EXEkxp+l4IHwnCq
RrVNPgB8uVFLhqChXvmBCXR/ItWt7jy4h2PoIFZuPjkJ+aQUi7sPCS4JKBx/hJDm
R4VTsBiW/bD7hj+ib690fHi8yR4CJmyBrui33pttdiPZp8rhNAlt4MxreaSI3bIM
Ofrd0qfC/cKxOL2TDR6rXvzbB8Ai4GVhOpqUr6qvFkB9qTv5skVs2u/wlhyaCw5w
/iSVeFIdOytkoQdgbd8acw3PZKoCwJ9lk+42AE5fR6OcdnFv6dnajBZ+lYrkPaNY
aZ9xx302As2hCim41cebUYdP3K5pGO3Rtr10hwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFAMhBZRUtnYIcl/9rsXKiXc9lrEHMB8GA1UdIwQYMBaAFLBsQwthvno4AZHN
Xf0QXDryFIL8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
c0d4REMyRy1lamdCa2MxZF9SQmNPdklVZ3Z3LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC83NS80ZGE1ZmMtMzE3NC00ZjE3LWE5ZDUtZjU4MzEwN2M4OThmLzEv
QXlFRmxGUzJkZ2h5WF8ydXhjcUpkejJXc1FjLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS80
ZGE1ZmMtMzE3NC00ZjE3LWE5ZDUtZjU4MzEwN2M4OThmLzEvc0d4REMyRy1lamdC
a2MxZF9SQmNPdklVZ3Z3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZx2MA0GCSqGSIb3DQEBCwUAA4IB
AQBPVAj8PsEi6g/YI/1YxbmZmc5ZjmJjKAiP9JFjdp8GdVR4vrVp5mAj7cN31nM8
wqeJ+ZWiSkwjrjiHuJ0oGeIxt4JxduUacn7UVReVDZLXnZSNfonUHx9I55qJc9Ts
nX68x8+HpfYYVI7gw2CFb69+3dIe5esQrfjqE8W4TgxO4oyjbcAYsdJjFskliIAL
ItPanBO4pCV6oHeJZqK9afXBnopocuiVAUAbu9/JgeqrQkPmxVGnVXjPomv1BcQ4
4r7RJvrKEhGKIyrHX9IztMbFBt3iT+hA8iY0NV1DfGDcKUX0zIdMgTGIoXYWn51u
y//6HXDb2TnNsywP4VzxsRNW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:12 2024 by rpki-client on console-fra.rpki-client.org