Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e53a73-586c-423c-9feb-7ad3c6f362eb/1/lKEy2I5RzffWEvGDyf3KYL7H_Po.roa
File:                     lKEy2I5RzffWEvGDyf3KYL7H_Po.roa (raw, json)
Hash identifier:          uRX/FeqZhFnrI5GLIwgbWlQlpGV9e+45AAyINnKuMV0=
Subject key identifier:   94:A1:32:D8:8E:51:CD:F7:D6:12:F1:83:C9:FD:CA:60:BE:C7:FC:FA
Certificate issuer:       /CN=7bf4ab8fe3f45bf4c985ee1616c2c134cd81f823
Certificate serial:       02D95A00
Authority key identifier: 7B:F4:AB:8F:E3:F4:5B:F4:C9:85:EE:16:16:C2:C1:34:CD:81:F8:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e_Srj-P0W_TJhe4WFsLBNM2B-CM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/e53a73-586c-423c-9feb-7ad3c6f362eb/1/lKEy2I5RzffWEvGDyf3KYL7H_Po.roa
Signing time:             Sat 01 Jan 2022 03:54:56 +0000
ROA not before:           Sat 01 Jan 2022 03:54:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42263
IP address blocks:        45.94.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47798784 (0x2d95a00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bf4ab8fe3f45bf4c985ee1616c2c134cd81f823
        Validity
            Not Before: Jan  1 03:54:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=94a132d88e51cdf7d612f183c9fdca60bec7fcfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:00:3f:38:75:2a:f9:66:55:c6:96:23:87:00:
                    54:ba:18:bc:29:69:32:d2:4f:7d:72:72:f1:cc:b5:
                    b5:10:d7:56:f0:23:0e:55:71:45:4b:91:d4:06:b7:
                    e2:77:1a:8f:6a:33:9c:96:7a:f6:5a:99:81:b3:00:
                    a2:8d:a1:46:c1:da:ee:96:be:63:d0:1c:c1:af:34:
                    78:62:d4:07:b5:70:90:9c:23:f1:c1:cf:7a:49:1e:
                    3b:7d:1b:10:ec:29:ad:f5:68:72:f4:3e:5b:ca:7b:
                    81:63:4a:1f:98:a0:c0:4e:f8:66:a7:c6:2f:15:c6:
                    04:67:43:11:45:6d:0f:96:32:92:91:a8:e0:f4:44:
                    e1:d1:05:d3:f8:fd:a0:05:6b:54:b6:43:ac:99:b2:
                    dc:e4:81:86:0b:f1:7a:22:c0:d4:68:6e:ed:e2:0d:
                    80:75:08:1f:a9:14:11:37:ea:b0:4c:f5:b4:16:b1:
                    44:32:b6:75:01:e4:53:76:18:20:75:19:8b:02:70:
                    05:73:f7:a8:01:dd:e6:89:99:03:94:b4:56:08:04:
                    be:1b:7f:f0:db:63:8a:14:90:31:21:b1:c8:66:5a:
                    e3:7a:9c:8e:ab:ed:7f:89:0f:53:a8:b0:a1:55:9d:
                    19:49:fd:58:77:32:0d:71:af:b8:dd:54:26:b2:62:
                    ae:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A1:32:D8:8E:51:CD:F7:D6:12:F1:83:C9:FD:CA:60:BE:C7:FC:FA
            X509v3 Authority Key Identifier:
                keyid:7B:F4:AB:8F:E3:F4:5B:F4:C9:85:EE:16:16:C2:C1:34:CD:81:F8:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_Srj-P0W_TJhe4WFsLBNM2B-CM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e53a73-586c-423c-9feb-7ad3c6f362eb/1/lKEy2I5RzffWEvGDyf3KYL7H_Po.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e53a73-586c-423c-9feb-7ad3c6f362eb/1/e_Srj-P0W_TJhe4WFsLBNM2B-CM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:46:96:4a:8d:95:64:ab:55:9f:f1:fc:80:d0:25:65:89:62:
         61:5d:63:f8:b8:7d:ce:7e:6a:9e:6b:64:cf:10:47:6f:81:72:
         e7:0a:bf:2d:07:1f:b1:75:5b:9c:56:86:c2:fa:5b:48:77:74:
         b1:6e:47:4b:1e:5a:f5:90:35:f9:5d:44:46:76:61:1b:ad:b9:
         d9:d3:55:e7:ac:62:8f:fc:b6:8a:30:f1:8a:c5:1f:0e:83:ad:
         f0:cf:60:a8:74:8b:b5:0f:78:10:4a:62:92:aa:fd:95:ee:1b:
         ec:ab:59:23:cb:9c:82:5b:fd:48:4a:fb:89:73:5d:21:4b:0d:
         1b:bf:f4:cc:4b:e0:6b:65:8b:b0:19:e3:57:df:20:3b:a6:1a:
         5c:a9:11:0b:0d:a0:11:e6:32:8c:ca:0c:85:22:de:be:51:0e:
         a5:e7:00:41:18:d9:98:07:20:2b:d2:33:f5:ca:41:7e:12:48:
         42:62:18:5f:7b:44:5f:19:e1:f9:6a:18:95:78:51:e9:3b:dd:
         a6:30:1d:a7:df:7d:f2:62:7e:eb:85:0d:bc:ca:4d:86:af:d5:
         01:2d:09:ed:9f:34:6b:94:69:41:ab:10:4c:ca:cf:5c:2e:47:
         72:01:90:2e:93:7d:e8:2c:1e:0d:03:31:52:2e:b0:6b:4e:ac:
         b4:b8:9b:fb
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAtlaADANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
YmY0YWI4ZmUzZjQ1YmY0Yzk4NWVlMTYxNmMyYzEzNGNkODFmODIzMB4XDTIyMDEw
MTAzNTQ1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTRhMTMyZDg4ZTUx
Y2RmN2Q2MTJmMTgzYzlmZGNhNjBiZWM3ZmNmYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ0APzh1KvlmVcaWI4cAVLoYvClpMtJPfXJy8cy1tRDXVvAj
DlVxRUuR1Aa34ncaj2oznJZ69lqZgbMAoo2hRsHa7pa+Y9Acwa80eGLUB7VwkJwj
8cHPekkeO30bEOwprfVocvQ+W8p7gWNKH5igwE74ZqfGLxXGBGdDEUVtD5YykpGo
4PRE4dEF0/j9oAVrVLZDrJmy3OSBhgvxeiLA1Ghu7eINgHUIH6kUETfqsEz1tBax
RDK2dQHkU3YYIHUZiwJwBXP3qAHd5omZA5S0VggEvht/8NtjihSQMSGxyGZa43qc
jqvtf4kPU6iwoVWdGUn9WHcyDXGvuN1UJrJirjUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSUoTLYjlHN99YS8YPJ/cpgvsf8+jAfBgNVHSMEGDAWgBR79KuP4/Rb9MmF
7hYWwsE0zYH4IzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2VfU3JqLVAwV19USmhlNFdGc0xCTk0yQi1DTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzkvZTUzYTczLTU4NmMtNDIzYy05ZmViLTdhZDNjNmYzNjJlYi8x
L2xLRXkySTVSemZmV0V2R0R5ZjNLWUw3SF9Qby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkv
ZTUzYTczLTU4NmMtNDIzYy05ZmViLTdhZDNjNmYzNjJlYi8xL2VfU3JqLVAwV19U
SmhlNFdGc0xCTk0yQi1DTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1ebDANBgkqhkiG9w0BAQsFAAOC
AQEAs0aWSo2VZKtVn/H8gNAlZYliYV1j+Lh9zn5qnmtkzxBHb4Fy5wq/LQcfsXVb
nFaGwvpbSHd0sW5HSx5a9ZA1+V1ERnZhG6252dNV56xij/y2ijDxisUfDoOt8M9g
qHSLtQ94EEpikqr9le4b7KtZI8ucglv9SEr7iXNdIUsNG7/0zEvga2WLsBnjV98g
O6YaXKkRCw2gEeYyjMoMhSLevlEOpecAQRjZmAcgK9Iz9cpBfhJIQmIYX3tEXxnh
+WoYlXhR6TvdpjAdp9998mJ+64UNvMpNhq/VAS0J7Z80a5RpQasQTMrPXC5HcgGQ
LpN96CweDQMxUi6wa06stLib+w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:49 2024 by rpki-client on console-fra.rpki-client.org