Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/gXnPN6RDYky9jvaAd8cddqhwHw8.roa
File:                     gXnPN6RDYky9jvaAd8cddqhwHw8.roa (raw, json)
Hash identifier:          iy+eraRDx1nlT0faZaQFD87jdaSHpjQ3i/ajZH0110Y=
Subject key identifier:   81:79:CF:37:A4:43:62:4C:BD:8E:F6:80:77:C7:1D:76:A8:70:1F:0F
Certificate issuer:       /CN=fecfcbb67d339aad7418608c595e74f542b75353
Certificate serial:       0184A6F4DEA46BB831CFD09A91C44AD651D8
Authority key identifier: FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/gXnPN6RDYky9jvaAd8cddqhwHw8.roa
Signing time:             Thu 24 Nov 2022 00:06:16 +0000
ROA not before:           Thu 24 Nov 2022 00:06:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212384
IP address blocks:        45.149.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:a6:f4:de:a4:6b:b8:31:cf:d0:9a:91:c4:4a:d6:51:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfcbb67d339aad7418608c595e74f542b75353
        Validity
            Not Before: Nov 24 00:06:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8179cf37a443624cbd8ef68077c71d76a8701f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cf:bc:65:1e:7e:12:e7:1e:ca:e9:70:db:e1:
                    9d:a3:7f:83:27:27:91:00:cf:31:c0:0b:5e:2e:0d:
                    d5:2c:e5:71:16:48:d4:4d:73:2f:f1:0d:a5:be:23:
                    a5:0f:23:ed:89:da:95:a6:d1:d3:39:da:0a:33:28:
                    82:68:1a:d9:9c:53:59:4f:43:dd:58:24:ad:77:0d:
                    11:ae:6d:d5:a5:22:4a:6d:6d:c3:3d:50:2d:07:57:
                    62:70:d7:90:7f:8b:b1:97:fa:24:95:69:c3:81:ae:
                    4b:9e:fe:a5:82:08:1b:df:a4:26:ab:af:28:8c:fc:
                    a6:ec:f4:24:c2:51:d2:e7:21:b2:eb:7b:d7:53:ef:
                    7e:57:86:ba:c8:1a:20:53:d5:43:12:83:51:bc:1a:
                    3e:c8:da:31:e4:e8:f1:e8:8b:7a:da:28:4d:12:d9:
                    ac:59:10:97:b7:2d:e2:b8:b6:2b:41:07:30:e3:15:
                    5b:af:3a:3b:4e:5d:b5:e2:6c:d0:3b:0b:51:b0:b8:
                    df:2c:7f:92:c5:0b:08:4d:f5:a7:cf:69:ad:7c:52:
                    c9:7c:8a:72:00:7a:d5:88:00:a7:dd:59:be:37:d9:
                    ff:16:ca:b3:d0:e1:db:84:de:87:ea:d9:49:5e:c0:
                    d2:9d:12:67:b1:6d:66:f6:ac:f0:fd:c6:53:47:75:
                    4c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:79:CF:37:A4:43:62:4C:BD:8E:F6:80:77:C7:1D:76:A8:70:1F:0F
            X509v3 Authority Key Identifier:
                keyid:FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/gXnPN6RDYky9jvaAd8cddqhwHw8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/_s_Ltn0zmq10GGCMWV509UK3U1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:15:58:83:56:5c:b0:ba:75:ef:47:b4:b5:7c:0c:55:1e:03:
         4b:40:20:2d:02:52:f8:a3:8c:b6:42:5a:f1:0e:a6:18:0e:84:
         1c:4d:e0:b4:33:11:8a:13:7c:9c:cf:5b:b6:04:27:59:c0:9a:
         a0:23:e4:bc:b1:ce:c3:52:64:70:51:f3:e3:f2:2e:56:cc:6b:
         f4:f4:16:9a:cb:d2:6e:e2:32:dd:fa:69:ec:64:b0:9b:ba:86:
         39:ee:0f:26:0f:22:93:4f:5c:02:c0:26:d6:fa:d9:1b:28:32:
         e4:91:46:2e:09:ad:b1:cd:0c:c6:d9:ea:b9:39:6b:d9:d1:f7:
         86:35:70:f5:38:7f:cd:01:c6:2b:10:90:49:6c:42:fb:f4:ef:
         0c:a7:ea:62:99:b1:d5:4d:9e:7d:23:ab:dc:de:10:0a:45:39:
         f5:16:67:93:38:eb:ee:4c:9a:ee:9a:7a:e5:3e:67:55:18:4b:
         82:82:96:f0:03:19:ed:6d:38:b3:29:63:fd:a8:fb:a9:ea:83:
         48:0e:0b:32:79:5f:34:f0:cc:96:21:62:55:a8:3e:e8:87:a1:
         7f:ab:ce:7a:7a:23:0b:18:09:25:3a:5a:57:05:c2:83:6b:d5:
         c1:a1:c0:b5:df:06:1b:04:15:44:89:38:2e:e4:6e:48:20:67:
         d6:f9:55:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:35 2024 by rpki-client on console-fra.rpki-client.org