Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/If8gXr9EYe0iYVKxx6njX0k3nDE.roa
File:                     If8gXr9EYe0iYVKxx6njX0k3nDE.roa (raw, json)
Hash identifier:          cg9B6PoatkzkhSitsPYDPbJi5T8yUPg0HUplTE/ccMA=
Subject key identifier:   21:FF:20:5E:BF:44:61:ED:22:61:52:B1:C7:A9:E3:5F:49:37:9C:31
Certificate issuer:       /CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Certificate serial:       0188FA96F59CDDD98284D6A6B22010F6D5C1
Authority key identifier: 60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/If8gXr9EYe0iYVKxx6njX0k3nDE.roa
Signing time:             Tue 27 Jun 2023 02:02:57 +0000
ROA not before:           Tue 27 Jun 2023 02:02:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61368
IP address blocks:        45.156.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:fa:96:f5:9c:dd:d9:82:84:d6:a6:b2:20:10:f6:d5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
        Validity
            Not Before: Jun 27 02:02:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=21ff205ebf4461ed226152b1c7a9e35f49379c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:82:c1:94:40:94:51:41:63:bb:34:11:62:4b:
                    ca:2c:62:02:b9:28:2d:ae:e4:f0:19:59:73:3d:05:
                    84:49:04:09:e2:76:83:f5:6f:58:51:54:4a:fd:1b:
                    c0:c6:4b:59:05:28:77:23:c4:02:55:10:71:51:8e:
                    f7:f6:39:7f:14:3b:17:d7:d0:cb:10:f1:b1:9f:79:
                    09:93:30:7f:2b:dc:75:bb:6c:77:59:9d:fc:97:91:
                    21:5e:9f:d3:ab:40:8a:ef:19:9e:f1:5e:17:48:f7:
                    9d:9a:76:70:dd:28:5f:8a:e6:29:a2:60:91:a9:e2:
                    f1:05:b3:7c:7f:d6:35:30:59:2b:e4:0c:97:7e:a9:
                    90:04:7d:be:97:ce:49:02:aa:8d:4b:0c:22:29:ee:
                    b9:ef:1a:7e:c7:72:5c:ad:4b:a1:0f:e3:f1:9b:f6:
                    2e:d8:bb:9b:39:1a:65:b4:34:d6:81:de:fe:f2:27:
                    11:74:69:b0:e6:40:09:b4:a5:c0:fb:51:b1:07:32:
                    2d:0b:e9:d1:67:f9:98:6e:4f:e9:7a:cf:ce:a8:eb:
                    0d:ac:a6:6d:f7:39:95:28:f3:29:4b:cc:3b:ef:89:
                    42:82:0f:82:55:71:07:d0:88:8a:a7:2c:fe:3c:c3:
                    58:af:df:b4:d9:ff:86:33:f1:5c:e7:63:72:e2:56:
                    77:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FF:20:5E:BF:44:61:ED:22:61:52:B1:C7:A9:E3:5F:49:37:9C:31
            X509v3 Authority Key Identifier:
                keyid:60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/If8gXr9EYe0iYVKxx6njX0k3nDE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.156.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:9d:b5:f8:d8:c3:c1:2c:f4:eb:23:36:c2:65:44:8d:3c:a6:
         d5:bc:a5:36:e0:36:4f:d3:80:6a:c5:b8:03:69:d2:a8:0a:16:
         06:97:98:9e:39:33:d5:47:bb:ac:43:f6:d9:be:35:ff:c3:47:
         9c:4b:c5:63:ed:b6:41:99:65:88:5a:55:cf:2c:1a:a0:b7:f1:
         a2:2a:86:c3:ac:c9:90:e5:ea:73:d3:75:74:de:c4:51:d5:d5:
         04:49:67:77:9e:1f:bb:48:f4:9b:41:57:ae:9a:bd:ec:27:16:
         55:9b:d1:af:9d:a7:32:75:4a:a5:63:75:82:8f:f3:05:36:70:
         20:69:c6:3e:a6:16:fd:b1:08:ce:e3:8d:7a:a8:d4:52:5f:a7:
         01:df:2f:94:67:e4:51:54:14:70:50:85:2a:c5:f9:f5:4d:ae:
         c4:13:57:82:6b:c2:36:13:4f:8d:e5:08:ae:3e:d2:4d:89:f8:
         dc:ea:9c:60:8b:ab:b5:74:2b:a2:2c:36:4a:e1:8f:8c:e1:f0:
         3d:72:b7:1e:23:d6:64:38:c0:c9:fe:5b:40:4d:3b:2b:c1:b9:
         9c:2a:c7:b0:bd:40:28:a9:48:a3:69:6f:a6:3c:81:24:ae:c4:
         60:33:dc:f5:ce:9f:97:76:a1:1c:ab:56:42:e4:9b:c4:77:60:
         dc:3f:e6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:10 2024 by rpki-client on console-fra.rpki-client.org