Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/01b4f3-3f37-4931-a6fb-15f7b9e56e79/1/V-m5lnumNTbZEs60SADo0FOJM4U.roa
File:                     V-m5lnumNTbZEs60SADo0FOJM4U.roa (raw, json)
Hash identifier:          lP0tKg40a8BR/YgDN3Wdh2yrcMiNeysmiT+awQV7Yyw=
Subject key identifier:   57:E9:B9:96:7B:A6:35:36:D9:12:CE:B4:48:00:E8:D0:53:89:33:85
Certificate issuer:       /CN=c74d33ac39f7c1540c5cb614ff93aaa6ba6249ef
Certificate serial:       02E62195
Authority key identifier: C7:4D:33:AC:39:F7:C1:54:0C:5C:B6:14:FF:93:AA:A6:BA:62:49:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x00zrDn3wVQMXLYU_5OqprpiSe8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/01b4f3-3f37-4931-a6fb-15f7b9e56e79/1/V-m5lnumNTbZEs60SADo0FOJM4U.roa
Signing time:             Sat 01 Jan 2022 08:59:27 +0000
ROA not before:           Sat 01 Jan 2022 08:59:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207614
IP address blocks:        45.90.45.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48636309 (0x2e62195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74d33ac39f7c1540c5cb614ff93aaa6ba6249ef
        Validity
            Not Before: Jan  1 08:59:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=57e9b9967ba63536d912ceb44800e8d053893385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:71:06:b2:45:61:2f:46:bd:ec:e8:67:a1:75:
                    20:ff:9d:59:b5:6d:61:34:a6:ad:fc:1b:56:7d:a0:
                    ed:3e:8f:b5:b7:d4:ca:8c:12:28:21:0b:ac:c5:b6:
                    56:5a:f7:49:52:70:dc:e3:d9:97:96:03:ed:59:7d:
                    c7:27:2f:0c:4e:04:56:f3:0c:fc:5b:ce:96:a7:61:
                    c8:f9:d1:92:f9:9a:a7:53:27:d1:1f:c2:b0:66:02:
                    54:2e:50:40:3d:7d:cd:5f:be:a6:8a:24:72:84:27:
                    dc:50:cb:d9:b6:f0:a8:cd:eb:ef:84:1d:72:fd:73:
                    37:cc:7e:df:d9:18:32:34:4e:15:7b:5b:52:43:d4:
                    76:d2:40:ea:24:ca:b6:65:de:e8:92:5b:38:80:d8:
                    fc:b2:21:92:81:5b:3c:35:5b:44:ce:5e:29:91:ab:
                    14:00:a5:aa:90:25:85:74:dc:33:c0:c5:12:fd:90:
                    b7:76:05:8b:46:ad:50:b5:c8:18:3f:59:14:95:39:
                    23:b9:77:b1:e0:1b:94:39:24:9e:f9:12:f1:aa:a5:
                    d7:58:cc:ce:0a:cb:90:09:b4:f2:5a:93:9b:7d:a1:
                    9d:98:db:62:5c:62:f9:6b:70:27:e7:6f:06:78:52:
                    d8:8a:99:03:51:6c:7a:81:d6:7e:c4:84:b6:6b:29:
                    a7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E9:B9:96:7B:A6:35:36:D9:12:CE:B4:48:00:E8:D0:53:89:33:85
            X509v3 Authority Key Identifier:
                keyid:C7:4D:33:AC:39:F7:C1:54:0C:5C:B6:14:FF:93:AA:A6:BA:62:49:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x00zrDn3wVQMXLYU_5OqprpiSe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/01b4f3-3f37-4931-a6fb-15f7b9e56e79/1/V-m5lnumNTbZEs60SADo0FOJM4U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/01b4f3-3f37-4931-a6fb-15f7b9e56e79/1/x00zrDn3wVQMXLYU_5OqprpiSe8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:e0:4b:9c:58:a6:07:97:35:e6:31:a8:5a:3a:a4:68:96:6d:
         cd:0d:f8:b7:74:60:79:7b:13:b7:68:15:3a:4d:ff:fd:b5:75:
         be:57:0d:32:93:3e:1c:98:35:bd:c5:6b:5d:2d:58:59:1d:22:
         40:69:55:71:a8:ec:e8:d5:67:76:b8:76:12:30:bf:a2:2e:aa:
         33:d9:66:bb:9a:d2:10:cb:28:b7:32:27:a0:32:80:ed:5f:92:
         ef:c1:b5:75:cf:62:13:93:83:e2:79:28:9d:82:35:9c:00:92:
         1f:1b:4e:61:6b:03:f7:f5:73:3f:83:9e:9e:b1:f8:da:9e:f8:
         7b:92:5d:4d:1e:24:e8:37:9f:bb:89:57:67:33:be:ea:43:33:
         d4:a6:78:ed:52:ae:d1:af:62:5f:3e:46:28:29:c2:ae:9c:c7:
         9f:d5:66:a6:a9:5f:5d:81:d8:55:2e:0f:de:6f:9c:46:2c:2a:
         6e:ba:19:18:4d:bb:c7:00:ec:b8:af:14:d2:2c:34:33:e8:6c:
         5e:4d:cc:dd:87:6f:e8:58:96:39:c6:26:6e:05:06:16:c3:d1:
         40:5f:f0:30:ad:9c:90:ac:d3:49:20:91:99:ed:a1:b1:4e:d9:
         a7:bc:88:74:6b:d4:ea:b2:aa:9d:e8:cd:eb:79:15:53:eb:fc:
         c0:34:06:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:24 2025 by rpki-client