Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/4409b8-a81e-429a-97a2-46c391508436/1/G62hqCXNk8PSHUcSvbDD26Ep7pk.roa
File:                     G62hqCXNk8PSHUcSvbDD26Ep7pk.roa (raw, json)
Hash identifier:          9D4QCeL/H4zBRx6/ycNwcM+k64DXWXZ9rlAIfU2a+jo=
Subject key identifier:   1B:AD:A1:A8:25:CD:93:C3:D2:1D:47:12:BD:B0:C3:DB:A1:29:EE:99
Certificate issuer:       /CN=0795d47b63a0fe19d3f001845bcfe201c8e60aa3
Certificate serial:       02C94A45
Authority key identifier: 07:95:D4:7B:63:A0:FE:19:D3:F0:01:84:5B:CF:E2:01:C8:E6:0A:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B5XUe2Og_hnT8AGEW8_iAcjmCqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/4409b8-a81e-429a-97a2-46c391508436/1/G62hqCXNk8PSHUcSvbDD26Ep7pk.roa
Signing time:             Tue 17 May 2022 08:04:29 +0000
ROA not before:           Tue 17 May 2022 08:04:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205175
IP address blocks:        45.91.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46746181 (0x2c94a45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0795d47b63a0fe19d3f001845bcfe201c8e60aa3
        Validity
            Not Before: May 17 08:04:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1bada1a825cd93c3d21d4712bdb0c3dba129ee99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:93:f7:98:9a:83:ec:73:6b:c7:22:19:22:cd:
                    2e:f8:df:4a:1c:9b:81:3f:94:20:b1:11:ba:c9:16:
                    72:16:4d:55:a6:0c:55:99:09:40:92:d9:ab:f8:5c:
                    2a:0d:0a:2e:cd:34:27:86:28:fb:01:51:3b:ba:dc:
                    56:54:94:77:a9:8a:10:08:73:53:d3:b2:ac:b8:ba:
                    0b:77:63:ea:bc:14:3e:8b:17:0f:6a:ed:a3:d4:e0:
                    bd:c9:51:f0:6f:df:c3:cf:85:44:ac:f4:c7:1e:a7:
                    1a:06:2b:24:67:c9:5a:ec:52:da:ba:cd:7b:78:5b:
                    69:62:b4:ab:57:7b:e7:54:16:27:fe:fd:41:3f:76:
                    78:d9:f1:3b:14:43:77:13:f1:ca:68:07:70:d4:e3:
                    39:3d:4e:d3:4c:f3:a6:94:7b:ec:dd:72:6e:a3:a1:
                    6c:6c:ed:92:a0:30:1d:e7:7f:7a:4f:21:bf:5d:83:
                    00:1e:23:2f:bb:87:9b:4f:4b:30:a0:82:85:e9:93:
                    75:ac:ad:1b:bb:1e:d4:bc:50:bf:f5:eb:90:a3:f6:
                    38:ed:03:f3:1f:06:98:c3:c9:5a:3d:af:8f:1e:aa:
                    2c:97:69:4c:f0:62:61:6b:87:c4:09:27:6d:08:2a:
                    88:35:45:5f:ae:c5:51:de:a4:d5:04:5d:b3:83:62:
                    8b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AD:A1:A8:25:CD:93:C3:D2:1D:47:12:BD:B0:C3:DB:A1:29:EE:99
            X509v3 Authority Key Identifier:
                keyid:07:95:D4:7B:63:A0:FE:19:D3:F0:01:84:5B:CF:E2:01:C8:E6:0A:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5XUe2Og_hnT8AGEW8_iAcjmCqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4409b8-a81e-429a-97a2-46c391508436/1/G62hqCXNk8PSHUcSvbDD26Ep7pk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4409b8-a81e-429a-97a2-46c391508436/1/B5XUe2Og_hnT8AGEW8_iAcjmCqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:27:cf:fd:a7:79:04:67:7c:50:a2:2e:5d:eb:af:2b:fe:a1:
         cf:c6:8d:02:4a:ba:4c:4d:bf:4a:f3:36:ef:74:63:39:2a:d4:
         05:ac:93:51:a8:bc:c8:d8:94:f0:45:7f:81:f3:8a:44:b0:1b:
         a3:fd:3b:d6:cd:2f:7b:f3:5f:b2:a7:47:9b:af:c8:05:b4:4c:
         c9:4e:4c:4c:6a:fa:c0:f8:7f:24:f4:ab:16:e1:95:bb:e1:5e:
         70:9b:0c:16:f1:c0:0c:be:30:d9:7b:33:01:38:54:03:b3:30:
         7a:b5:f6:7b:fd:f8:f1:52:ff:e1:65:36:30:91:da:d6:32:c8:
         23:28:1e:40:1c:48:a9:cb:95:d9:18:35:4c:d1:6d:a0:a1:6a:
         ce:f3:40:d6:5b:e7:2e:21:c0:40:4e:6b:3a:3a:d2:ac:b5:8f:
         be:d0:4a:99:ad:72:d8:8d:68:32:36:db:41:33:de:ef:2c:e5:
         0b:20:d6:f2:cf:18:f8:c2:52:4d:f1:cf:21:a8:21:89:8d:50:
         81:9f:2d:31:66:1e:dc:cc:3c:0f:1e:f4:2a:b7:26:eb:64:a5:
         f5:3d:2e:09:44:74:22:d1:e8:e3:0a:b0:7e:0c:3b:32:a6:b4:
         1a:83:9b:e1:26:3d:72:a9:4f:3b:0a:c5:3d:7b:5b:a6:a0:a5:
         50:b9:e6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-fra.rpki-client.org