Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/gDgQwH5IIsaejsX9Rc-uwwKPKfo.roa
File:                     gDgQwH5IIsaejsX9Rc-uwwKPKfo.roa (raw, json)
Hash identifier:          dZT3oSjd26AVZXTd+NFY1WfmtpYVfF6/RB9Ekx5ORZ4=
Subject key identifier:   80:38:10:C0:7E:48:22:C6:9E:8E:C5:FD:45:CF:AE:C3:02:8F:29:FA
Certificate issuer:       /CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Certificate serial:       01856EC1F5C72E1D46D05514C34C719E5A66
Authority key identifier: 60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/gDgQwH5IIsaejsX9Rc-uwwKPKfo.roa
Signing time:             Sun 01 Jan 2023 19:14:43 +0000
ROA not before:           Sun 01 Jan 2023 19:14:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     150179
IP address blocks:        45.155.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:c1:f5:c7:2e:1d:46:d0:55:14:c3:4c:71:9e:5a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
        Validity
            Not Before: Jan  1 19:14:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=803810c07e4822c69e8ec5fd45cfaec3028f29fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d4:91:94:38:2b:04:a4:f2:a3:f0:30:37:62:
                    94:20:8c:54:0d:52:92:78:cb:44:06:33:98:06:78:
                    9d:32:b0:b3:d8:42:24:ea:57:8e:86:a0:ce:4f:df:
                    c2:35:5f:43:bb:28:04:f2:b4:06:ed:8a:a4:df:cc:
                    14:ae:1a:d3:b2:65:78:fa:88:0c:08:90:9f:c3:d5:
                    59:ab:cb:30:4c:04:4e:10:7d:6c:9d:7f:8f:42:c6:
                    a6:df:e4:f5:12:22:33:1f:33:16:e2:4d:58:c5:d7:
                    de:11:40:43:a0:b4:25:f5:25:28:00:24:64:20:c4:
                    aa:e5:cd:35:0b:fa:b7:9f:45:43:85:b1:b1:fe:bf:
                    d9:2c:b3:29:d9:58:e8:f6:45:67:3f:3e:9e:37:d6:
                    af:8a:7f:56:06:62:fd:4a:c1:20:7d:41:d7:eb:c0:
                    5b:94:f8:32:c7:e2:83:6c:0f:11:ab:97:60:94:a9:
                    1e:86:89:90:58:5d:5b:e4:02:c5:f3:4e:63:89:f9:
                    7d:6d:db:40:02:41:51:4c:c5:d3:c2:1c:5c:82:49:
                    48:5b:c4:eb:f8:f7:33:66:82:a6:b5:40:ca:eb:eb:
                    f3:04:8a:d9:2d:0f:35:e0:72:95:83:f2:b6:46:e6:
                    43:ce:f6:de:13:35:cf:aa:f5:6a:c1:64:47:88:f8:
                    31:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:38:10:C0:7E:48:22:C6:9E:8E:C5:FD:45:CF:AE:C3:02:8F:29:FA
            X509v3 Authority Key Identifier:
                keyid:60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/gDgQwH5IIsaejsX9Rc-uwwKPKfo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:6f:44:ff:ac:cd:4b:9c:12:04:84:ba:a6:eb:ca:8d:8c:08:
         39:dc:d2:8f:ff:ce:86:63:66:28:14:13:39:8d:6b:74:dd:24:
         39:d8:22:c0:0b:1e:19:a3:db:12:f3:2a:ff:8f:8f:eb:31:b8:
         90:13:8f:14:f1:99:78:25:43:a8:6b:2c:4e:16:c1:80:45:59:
         fe:3c:78:11:a1:1f:0a:51:c1:ab:13:5f:8b:32:4d:f7:9f:27:
         26:25:01:c7:9e:f0:94:e2:15:51:85:a3:3e:29:1a:14:7a:44:
         20:27:b0:a4:07:06:5b:48:14:ef:03:5f:64:86:cb:a2:67:cf:
         8d:de:23:52:21:ad:3a:bd:2b:a2:34:82:46:a7:6f:4c:98:6a:
         68:5b:b5:97:89:06:b3:b4:46:c7:fd:05:78:2e:f0:ad:8a:60:
         84:3f:5d:ca:4b:0b:dd:54:c7:ae:52:7e:0a:f3:f2:4f:da:01:
         7b:d0:4b:b4:6c:f4:bf:6e:ef:6e:d0:42:bf:21:0c:27:25:d1:
         80:1a:81:e3:0e:00:b1:ce:eb:85:f7:a6:00:fa:ae:a0:61:b8:
         69:8c:8e:36:9e:0a:38:39:8e:aa:c7:15:d1:0a:00:68:31:08:
         5e:08:12:89:79:1a:da:cf:5d:86:80:12:9c:3e:2a:98:c7:73:
         14:9e:ef:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:10 2024 by rpki-client on console-fra.rpki-client.org