Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/c78f12-2d14-4276-8c8e-8bdc8fbbd40d/1/45-WFciXZWbu0YnD4oStwTdbfME.roa
File:                     45-WFciXZWbu0YnD4oStwTdbfME.roa (raw, json)
Hash identifier:          3fMrQICwJYmvRoj39YIB976BkWxIG6j8I1SmvuILYoI=
Subject key identifier:   E3:9F:96:15:C8:97:65:66:EE:D1:89:C3:E2:84:AD:C1:37:5B:7C:C1
Certificate issuer:       /CN=e9fb6dd5a5cbfd84da82e2759f6955622c1ee932
Certificate serial:       B1B248
Authority key identifier: E9:FB:6D:D5:A5:CB:FD:84:DA:82:E2:75:9F:69:55:62:2C:1E:E9:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ftt1aXL_YTaguJ1n2lVYiwe6TI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/c78f12-2d14-4276-8c8e-8bdc8fbbd40d/1/45-WFciXZWbu0YnD4oStwTdbfME.roa
Signing time:             Sat 01 Jan 2022 13:06:37 +0000
ROA not before:           Sat 01 Jan 2022 13:06:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49392
IP address blocks:        62.233.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11645512 (0xb1b248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fb6dd5a5cbfd84da82e2759f6955622c1ee932
        Validity
            Not Before: Jan  1 13:06:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e39f9615c8976566eed189c3e284adc1375b7cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3e:00:b5:d6:11:9d:37:45:23:1f:ff:ff:34:
                    6b:a7:8a:2e:c3:6b:7c:8d:25:4a:40:73:da:52:4a:
                    3d:dc:68:52:7c:98:5c:d0:15:81:39:1a:b7:d0:d4:
                    d0:82:e5:16:2b:83:dd:b8:15:d1:f2:fe:e7:b7:de:
                    8a:2e:37:5e:92:90:ae:6b:65:a0:65:c6:25:f2:86:
                    6a:76:34:a8:f8:dd:a7:d0:7f:cd:8f:72:df:e5:76:
                    51:04:0d:6e:ba:67:9d:d0:ff:da:f7:21:8b:85:32:
                    dd:be:53:8a:55:d7:fe:3c:2e:26:69:53:53:77:54:
                    dd:b4:69:ec:ab:53:7b:b7:de:91:71:b1:9d:3e:d5:
                    45:d7:70:f3:f6:45:a3:f8:29:0a:c4:14:06:17:18:
                    a1:86:e1:11:6b:2b:d6:8f:08:a5:05:5c:e0:75:8b:
                    68:ac:be:df:24:88:b6:ef:cf:71:12:48:75:28:45:
                    d1:75:da:9d:52:ba:ac:ae:b5:51:e7:ef:d3:91:de:
                    fb:0e:2a:09:52:86:da:01:35:37:b7:73:76:55:62:
                    3d:07:53:88:ff:eb:ba:b5:8f:a8:00:c0:ba:2d:88:
                    bb:d5:a6:5f:39:8d:0b:22:8d:cc:e2:eb:9a:16:86:
                    f5:9f:65:cc:91:ef:57:1f:bc:45:29:3d:36:1d:e2:
                    3a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9F:96:15:C8:97:65:66:EE:D1:89:C3:E2:84:AD:C1:37:5B:7C:C1
            X509v3 Authority Key Identifier:
                keyid:E9:FB:6D:D5:A5:CB:FD:84:DA:82:E2:75:9F:69:55:62:2C:1E:E9:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ftt1aXL_YTaguJ1n2lVYiwe6TI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c78f12-2d14-4276-8c8e-8bdc8fbbd40d/1/45-WFciXZWbu0YnD4oStwTdbfME.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c78f12-2d14-4276-8c8e-8bdc8fbbd40d/1/6ftt1aXL_YTaguJ1n2lVYiwe6TI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:9b:8a:81:8a:77:0b:31:d0:3c:40:91:e5:34:8d:bb:36:da:
         86:96:1b:78:59:83:3d:f6:e7:c6:92:5c:13:3a:a6:2c:f5:59:
         b9:bf:4e:00:38:dc:ab:65:61:50:28:7f:3d:a9:dd:e5:c6:05:
         6d:be:21:91:98:04:04:d7:c8:2c:bd:2f:98:66:88:9d:e1:9d:
         0b:a6:b4:ce:53:48:c8:42:b7:10:f3:25:9b:e4:09:52:8c:7d:
         5d:9c:7b:d4:a6:96:b3:13:43:10:95:72:7d:b8:55:05:db:5d:
         b0:60:39:0f:45:3d:a2:f0:d0:03:76:1a:9b:b2:06:a9:2e:24:
         4c:d6:d3:67:f6:80:15:83:15:a2:78:62:f3:c6:80:8c:59:71:
         4d:0b:3c:72:b3:1b:a4:e9:74:49:87:a8:f2:10:03:bf:27:e5:
         aa:2a:9d:19:71:3e:0f:1b:21:01:eb:72:97:c3:e7:7d:fa:37:
         38:19:aa:8f:bb:ff:a3:03:80:19:60:de:bc:5c:74:14:5c:05:
         fd:64:bb:44:9f:cc:71:0a:6b:54:94:aa:19:fb:64:86:81:03:
         bd:2f:0f:9b:67:69:ed:0e:06:79:41:2a:09:ef:56:4c:02:f4:
         50:c8:20:67:9e:c2:2f:10:fa:1a:0f:4d:79:17:86:ef:2e:1d:
         02:13:2f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-fra.rpki-client.org