Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/PPJVSFKPAIS-FV0XZUtYxXPhsLs.roa
File:                     PPJVSFKPAIS-FV0XZUtYxXPhsLs.roa (raw, json)
Hash identifier:          hixDwm7M8o3XI0Wmf50o7KIFEoAhD6iWNB0qE9yrMi4=
Subject key identifier:   3C:F2:55:48:52:8F:00:84:BE:15:5D:17:65:4B:58:C5:73:E1:B0:BB
Certificate issuer:       /CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Certificate serial:       03F43EC9
Authority key identifier: 60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/PPJVSFKPAIS-FV0XZUtYxXPhsLs.roa
Signing time:             Fri 18 Mar 2022 02:35:25 +0000
ROA not before:           Fri 18 Mar 2022 02:35:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35758
IP address blocks:        45.155.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66338505 (0x3f43ec9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
        Validity
            Not Before: Mar 18 02:35:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3cf25548528f0084be155d17654b58c573e1b0bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9a:0a:31:42:b9:b0:66:3a:74:d4:ec:1f:bf:
                    70:ca:2c:10:ae:a7:64:06:95:20:7d:0c:50:a9:cc:
                    2e:9f:bc:04:ea:68:85:78:cc:17:96:dc:25:d1:25:
                    49:66:c9:e2:da:65:4b:bf:da:7b:26:75:a2:d0:43:
                    04:ee:4c:86:1f:80:31:9b:d5:b0:d9:e7:8a:1e:6b:
                    07:e0:1d:7d:d7:7b:77:ad:65:7c:8a:04:5d:f5:7d:
                    c7:71:b6:5a:bd:df:f7:1b:68:d3:4c:84:1a:bd:7d:
                    67:42:4e:98:4e:81:a9:ef:48:b8:de:76:ee:f9:40:
                    3e:d6:31:07:b7:14:17:03:1d:73:20:51:8f:b8:5d:
                    66:06:1b:28:42:da:35:7b:d7:63:28:3c:e9:28:ae:
                    39:8e:d8:3f:a1:68:2e:6a:c5:0d:e8:64:0b:09:d2:
                    32:b3:c5:83:4c:5d:b7:16:54:53:1d:88:88:0a:5b:
                    ec:f7:04:ff:13:95:26:d3:18:ad:98:f7:12:a7:36:
                    e6:3f:f1:18:c2:66:ea:38:e4:67:4d:02:df:d2:9d:
                    07:e8:d3:ee:98:73:1e:ab:e2:07:fc:5f:e7:05:d1:
                    fa:16:70:c9:b1:f0:18:f9:15:37:a6:ea:34:13:f2:
                    00:d3:83:74:7e:19:31:c4:96:1f:70:e8:6e:19:65:
                    32:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F2:55:48:52:8F:00:84:BE:15:5D:17:65:4B:58:C5:73:E1:B0:BB
            X509v3 Authority Key Identifier:
                keyid:60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/PPJVSFKPAIS-FV0XZUtYxXPhsLs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:84:0d:af:22:16:c6:f4:de:e9:5f:f6:51:c4:e7:c8:79:98:
         e3:20:fe:a5:19:18:fa:3d:f7:5a:c6:55:f0:2f:0d:5d:05:d1:
         1c:cc:c3:01:1e:ec:f3:50:7c:39:f1:3e:d5:8f:0d:cb:ef:35:
         5e:4e:4d:84:2f:c5:96:e6:b1:46:35:76:ac:6a:4e:0a:d1:2a:
         99:e2:b1:a0:8b:62:55:51:e5:63:08:bd:94:82:69:e8:57:15:
         56:ed:55:de:ae:70:2d:f1:74:0f:4e:aa:b7:29:eb:a8:c4:87:
         d7:00:60:b2:c0:58:2b:74:13:15:ba:92:7a:62:15:bd:6e:e1:
         5d:fc:ae:02:8e:37:2a:1b:3c:b2:73:27:25:a0:22:c8:43:92:
         d2:20:55:79:a3:af:d2:ba:a0:0e:4b:13:bd:0f:2a:b3:5c:1e:
         4f:b9:7d:7f:e5:ad:84:20:95:f9:40:c0:23:0c:a7:5c:a6:a2:
         0e:04:fe:be:37:4f:41:0d:02:20:6d:b6:c4:4b:5c:05:df:9a:
         3a:fe:ab:49:ca:97:6b:15:7e:e5:61:02:f0:2e:28:04:50:9e:
         e5:08:17:62:63:16:e6:cd:72:98:e8:8c:63:16:da:53:24:83:
         20:da:67:4d:27:74:b9:c6:11:b7:b9:f4:f1:76:03:2d:06:25:
         f4:3f:3c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:37 2024 by rpki-client on console-ams.rpki-client.org