Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/775_jDuHAPBlTgesl5TJo7BAzwQ.roa
File:                     775_jDuHAPBlTgesl5TJo7BAzwQ.roa (raw, json)
Hash identifier:          Ex1MyAtgwjKaiYVQkUv/kN79hcvbw6QVoXLjunOiroM=
Subject key identifier:   EF:BE:7F:8C:3B:87:00:F0:65:4E:07:AC:97:94:C9:A3:B0:40:CF:04
Certificate issuer:       /CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Certificate serial:       018795ED2DCFDAAA4F9F7BC86CE5B52BE6BC
Authority key identifier: 80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/775_jDuHAPBlTgesl5TJo7BAzwQ.roa
Signing time:             Tue 18 Apr 2023 19:52:41 +0000
ROA not before:           Tue 18 Apr 2023 19:52:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     63023
IP address blocks:        46.254.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:95:ed:2d:cf:da:aa:4f:9f:7b:c8:6c:e5:b5:2b:e6:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
        Validity
            Not Before: Apr 18 19:52:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=efbe7f8c3b8700f0654e07ac9794c9a3b040cf04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:20:fc:d3:55:4b:ea:39:a8:90:06:f1:7a:0b:
                    da:89:8a:64:cc:a7:68:58:aa:fb:37:35:77:b3:2a:
                    46:26:c7:d5:ea:b0:44:5e:c7:58:06:70:9c:df:f5:
                    cb:4a:fc:04:f7:42:21:2c:4e:20:38:7f:73:71:cd:
                    c2:6a:32:ba:70:c6:4c:51:e0:82:c0:58:a6:48:db:
                    71:da:9f:c7:3a:75:ab:43:77:e5:90:11:3d:35:90:
                    27:3c:d5:45:e8:ee:a9:25:e1:09:4d:cb:92:e9:38:
                    d6:b7:21:dd:92:ee:71:4d:ee:37:bc:2b:73:1e:f2:
                    c5:a5:c3:60:ca:ac:34:77:42:52:32:4b:c2:4a:db:
                    f7:eb:98:c3:8c:71:49:9c:3a:5b:5f:1b:0b:a6:11:
                    a8:f6:a8:23:20:1b:1d:8a:57:37:86:56:47:50:30:
                    c1:70:0f:6c:64:bb:29:47:82:a6:7b:f4:1e:0b:38:
                    a1:b8:47:07:e7:1e:99:39:06:8a:d0:52:61:6e:62:
                    02:51:de:b6:09:27:22:ad:09:8d:b4:cb:a5:17:8f:
                    21:f2:c6:03:40:e8:51:36:35:17:d5:9d:6b:95:50:
                    db:18:c3:e0:ac:dd:5d:33:e9:7c:94:c9:73:1d:44:
                    27:f5:0e:61:8c:7b:a3:7e:d7:73:96:92:a0:5b:02:
                    fd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BE:7F:8C:3B:87:00:F0:65:4E:07:AC:97:94:C9:A3:B0:40:CF:04
            X509v3 Authority Key Identifier:
                keyid:80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/775_jDuHAPBlTgesl5TJo7BAzwQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.254.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:7a:43:7e:e1:d9:5a:50:62:2c:25:7f:7c:4e:7f:c9:b2:a0:
         73:96:54:5e:ba:28:08:de:d2:e4:3b:84:bc:1c:9c:46:88:de:
         78:41:7c:b4:05:ee:c5:4d:34:e1:4b:15:8a:61:59:b3:fc:41:
         09:a2:a7:64:8c:87:28:c3:8c:36:d1:73:ec:dc:30:91:66:c6:
         02:90:8a:51:88:4e:1c:fb:18:40:68:c8:4a:24:82:f0:32:89:
         34:ae:8e:0b:62:90:3e:60:2f:40:14:f7:b7:3f:59:28:3c:c9:
         1b:a1:89:51:a7:c8:5e:95:9e:2d:61:64:24:e7:c3:39:76:a3:
         64:d4:d3:8b:1a:b7:c5:69:30:d4:38:12:ff:4c:b7:1b:ef:49:
         a2:42:6f:52:e0:7d:88:06:50:3a:e2:80:81:70:98:40:5e:06:
         5a:1c:bd:ed:20:d8:12:59:32:c0:ee:00:da:ad:07:c2:be:af:
         26:bf:19:8a:67:37:cc:7b:48:78:1d:4d:4b:13:7c:5c:6c:51:
         6c:2e:84:43:c6:95:a3:e3:05:f3:ba:3a:f4:60:de:2f:0a:28:
         ac:64:2a:56:8a:cc:56:fc:e0:46:1a:09:8a:26:91:44:c6:e4:
         61:e2:3b:70:b4:73:1f:22:03:8e:b0:19:fe:23:f8:af:34:b3:
         f7:cf:26:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeV7S3P2qpPn3vIbOW1K+a8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZTQ4NDg1Y2U5YjBlNDI1NjQwODA0ZWRjMGVkMmJhNmI4
ZjRiOGYwHhcNMjMwNDE4MTk1MjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmJlN2Y4YzNiODcwMGYwNjU0ZTA3YWM5Nzk0YzlhM2IwNDBjZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCD801VL6jmokAbxegvaiYpkzKdo
WKr7NzV3sypGJsfV6rBEXsdYBnCc3/XLSvwE90IhLE4gOH9zcc3CajK6cMZMUeCC
wFimSNtx2p/HOnWrQ3flkBE9NZAnPNVF6O6pJeEJTcuS6TjWtyHdku5xTe43vCtz
HvLFpcNgyqw0d0JSMkvCStv365jDjHFJnDpbXxsLphGo9qgjIBsdilc3hlZHUDDB
cA9sZLspR4Kme/QeCzihuEcH5x6ZOQaK0FJhbmICUd62CScirQmNtMulF48h8sYD
QOhRNjUX1Z1rlVDbGMPgrN1dM+l8lMlzHUQn9Q5hjHujftdzlpKgWwL9iQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO++f4w7hwDwZU4HrJeUyaOwQM8EMB8GA1UdIwQY
MBaAFIDkhIXOmw5CVkCATtwO0rprj0uPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ09TRWhjNmJEa0pXUUlCTzNBN1N1bXVQUzQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82ZGM5NzgtYmZkNi00MWVjLThhM2Et
YzAzMDE3ZTk4YzUzLzEvNzc1X2pEdUhBUEJsVGdlc2w1VEpvN0JBendRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS82ZGM5NzgtYmZkNi00MWVjLThhM2EtYzAzMDE3ZTk4YzUz
LzEvZ09TRWhjNmJEa0pXUUlCTzNBN1N1bXVQUzQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALv5qMA0G
CSqGSIb3DQEBCwUAA4IBAQBdekN+4dlaUGIsJX98Tn/JsqBzllReuigI3tLkO4S8
HJxGiN54QXy0Be7FTTThSxWKYVmz/EEJoqdkjIcow4w20XPs3DCRZsYCkIpRiE4c
+xhAaMhKJILwMok0ro4LYpA+YC9AFPe3P1koPMkboYlRp8helZ4tYWQk58M5dqNk
1NOLGrfFaTDUOBL/TLcb70miQm9S4H2IBlA64oCBcJhAXgZaHL3tINgSWTLA7gDa
rQfCvq8mvxmKZzfMe0h4HU1LE3xcbFFsLoRDxpWj4wXzujr0YN4vCiisZCpWisxW
/OBGGgmKJpFExuRh4jtwtHMfIgOOsBn+I/ivNLP3zyaD
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org