Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/cYMMQkBZP6eQgxDnnL6viVw12ws.roa
File:                     cYMMQkBZP6eQgxDnnL6viVw12ws.roa (raw, json)
Hash identifier:          SFlMCGuq8sdUtko2jjl/FrIB2MTLieKpu3rv1zDjkzw=
Subject key identifier:   71:83:0C:42:40:59:3F:A7:90:83:10:E7:9C:BE:AF:89:5C:35:DB:0B
Certificate issuer:       /CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Certificate serial:       018BBC4C4F0CBEB1DBA33FE4BE3003B21FAB
Authority key identifier: 60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/cYMMQkBZP6eQgxDnnL6viVw12ws.roa
Signing time:             Sat 11 Nov 2023 02:53:19 +0000
ROA not before:           Sat 11 Nov 2023 02:53:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24875
IP address blocks:        45.155.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:bc:4c:4f:0c:be:b1:db:a3:3f:e4:be:30:03:b2:1f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
        Validity
            Not Before: Nov 11 02:53:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=71830c4240593fa7908310e79cbeaf895c35db0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:43:0c:67:4a:de:e3:db:8a:74:cf:d3:6b:6e:
                    f0:c5:56:c0:7d:5a:d0:13:36:d0:d0:63:2d:97:f0:
                    b9:c1:85:4c:b3:0c:de:8a:74:ea:16:c9:34:3d:04:
                    f1:58:a3:4a:09:67:36:c5:da:5d:86:1a:99:b1:0c:
                    33:8f:97:05:75:f1:37:f4:89:41:87:5d:7f:da:0d:
                    f2:7a:ab:a3:4f:d3:3a:2d:f3:09:3f:e0:c4:36:90:
                    4f:a0:54:d2:4e:72:f0:01:87:cb:24:cc:34:0b:66:
                    d9:1d:fb:d9:49:93:a6:e2:b6:c9:a2:c9:ae:54:05:
                    0e:94:89:35:01:5a:25:be:f8:70:54:8c:97:4d:35:
                    b8:41:51:a2:24:37:0c:90:66:44:d4:ee:b0:5d:6a:
                    c1:14:16:54:0c:d4:01:9e:71:53:2c:d8:1f:c9:ba:
                    08:66:3c:3b:23:34:a4:0d:da:c7:57:97:6f:65:04:
                    2b:8d:5e:ec:e4:de:0b:d8:93:7c:c9:a8:bf:b5:19:
                    09:3b:f5:00:cc:91:3d:42:a6:b8:d2:0d:24:c9:29:
                    19:fe:62:76:dd:dc:19:6d:62:66:a1:2c:42:96:e1:
                    4c:90:7c:b9:77:11:ce:e5:43:7e:31:30:59:54:24:
                    d5:fc:82:a7:be:2b:92:c1:b0:fc:29:f8:69:52:87:
                    e2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:83:0C:42:40:59:3F:A7:90:83:10:E7:9C:BE:AF:89:5C:35:DB:0B
            X509v3 Authority Key Identifier:
                keyid:60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/cYMMQkBZP6eQgxDnnL6viVw12ws.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:dd:56:54:93:38:85:72:74:2f:3e:1f:f2:c5:b5:74:04:58:
         d2:56:24:4c:de:34:41:69:13:3d:af:0e:65:6f:b6:1d:28:b7:
         71:29:79:1e:97:5f:97:75:4d:44:e3:94:47:d5:68:df:fa:41:
         c8:3a:52:6e:47:f0:56:60:91:e7:6a:1a:96:9a:0e:9f:8c:cc:
         95:34:33:3f:6c:24:a8:9a:35:40:86:70:df:6c:91:a6:dc:f0:
         be:da:53:4e:78:14:64:c6:d8:48:1c:16:57:a0:f7:32:8a:1f:
         13:6a:45:95:52:09:5f:15:9d:53:11:7a:d4:e5:7d:41:9e:b1:
         aa:64:ea:37:98:f2:d4:7a:fb:bd:5d:02:35:a4:31:73:06:f8:
         e4:bf:6c:c7:68:c1:3f:12:7b:0f:f4:59:f7:07:cf:73:77:a6:
         05:29:83:10:ed:54:23:11:12:1f:27:99:8d:ff:a9:66:bf:80:
         26:d3:8a:ce:a9:39:8a:c4:a8:8c:a9:31:ba:ce:7a:92:f0:ab:
         db:61:3a:e3:75:01:3f:ad:94:9e:4a:b8:8f:a7:22:ca:5b:30:
         02:79:86:11:e8:e9:b9:3b:73:8e:f0:3a:dc:59:94:31:90:17:
         bf:eb:19:6b:29:09:e1:12:e6:fc:04:5f:e8:88:33:0e:1b:39:
         83:bb:4f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:37 2024 by rpki-client on console-ams.rpki-client.org