Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/g-C_9a3Wb96mDIor9hKjcJhtES0.roa
File:                     g-C_9a3Wb96mDIor9hKjcJhtES0.roa (raw, json)
Hash identifier:          5F+AK82dqRVAsqjbhv6ocqde16Ypzb8WzgvyInjgo2k=
Subject key identifier:   83:E0:BF:F5:AD:D6:6F:DE:A6:0C:8A:2B:F6:12:A3:70:98:6D:11:2D
Certificate issuer:       /CN=1572e24e6b20970823f60e56eeb547b6e08806c4
Certificate serial:       04223ED8
Authority key identifier: 15:72:E2:4E:6B:20:97:08:23:F6:0E:56:EE:B5:47:B6:E0:88:06:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FXLiTmsglwgj9g5W7rVHtuCIBsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/g-C_9a3Wb96mDIor9hKjcJhtES0.roa
Signing time:             Thu 03 Feb 2022 10:22:31 +0000
ROA not before:           Thu 03 Feb 2022 10:22:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209371
IP address blocks:        45.139.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69353176 (0x4223ed8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1572e24e6b20970823f60e56eeb547b6e08806c4
        Validity
            Not Before: Feb  3 10:22:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=83e0bff5add66fdea60c8a2bf612a370986d112d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:00:c4:96:31:cf:e6:b0:b7:54:26:ec:82:85:
                    75:1c:9c:fd:8d:b1:6b:fa:cc:f8:8a:b5:10:f8:52:
                    71:a0:65:98:62:84:38:cd:cb:74:22:98:b3:e1:45:
                    72:f0:8d:5f:48:fd:44:af:ca:d0:b0:dd:3a:4c:a8:
                    0c:1f:93:9d:ad:0e:63:8a:59:b9:d2:75:8e:2f:82:
                    38:b9:01:96:d2:0c:fe:c3:ca:af:69:d2:17:99:c6:
                    b5:11:03:17:7a:55:9e:32:15:6f:bb:1b:2d:18:23:
                    ef:0a:6d:21:81:d9:4a:09:fb:9a:a9:41:6b:01:b4:
                    7f:cd:6d:95:a5:8a:8b:f6:2c:cc:88:9c:6a:64:7c:
                    18:78:e2:17:1a:e6:57:02:9b:69:a2:98:0c:ab:35:
                    d7:2c:88:ae:fa:53:85:07:4b:3b:ac:5d:f7:af:b6:
                    bf:69:b3:ee:27:7f:e5:88:0d:6b:a6:bc:0e:fd:1a:
                    32:98:32:36:50:b9:04:ca:9a:3b:ab:40:9c:6c:f8:
                    36:6d:82:12:35:12:ba:f6:74:35:2d:37:c8:0c:86:
                    24:40:f0:30:22:05:07:fc:fb:a0:b0:38:31:59:67:
                    07:23:69:a2:f8:34:37:1c:eb:48:30:01:a0:a9:f7:
                    f7:4e:d5:3b:26:2f:0c:b3:05:4a:7d:a5:d0:83:db:
                    c3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E0:BF:F5:AD:D6:6F:DE:A6:0C:8A:2B:F6:12:A3:70:98:6D:11:2D
            X509v3 Authority Key Identifier:
                keyid:15:72:E2:4E:6B:20:97:08:23:F6:0E:56:EE:B5:47:B6:E0:88:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXLiTmsglwgj9g5W7rVHtuCIBsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/g-C_9a3Wb96mDIor9hKjcJhtES0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/FXLiTmsglwgj9g5W7rVHtuCIBsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:89:58:2d:e3:72:b0:7f:55:5d:30:13:b8:1a:6a:0f:87:33:
         9c:f2:a0:ed:e0:c0:7b:5d:00:31:9b:2c:99:e5:34:8d:eb:d0:
         19:06:05:92:d5:4a:9e:a1:b4:9b:89:c5:ad:80:99:bb:6b:33:
         a9:c6:78:e3:15:90:8d:67:5f:1f:38:5a:44:54:4f:be:77:3a:
         55:d3:11:de:c5:3c:93:6f:94:70:3e:f5:b1:06:1e:4e:23:7c:
         e2:fe:a3:75:8b:9a:6e:06:49:ea:ac:7a:ae:5a:99:13:e7:d8:
         4b:03:9e:1b:2f:f4:1b:66:01:f8:5b:55:04:a3:6d:5f:3d:41:
         a5:af:e9:d0:b6:15:35:a9:d8:5d:a1:28:37:7e:73:ed:51:2e:
         e1:18:3a:e1:b8:bc:a4:46:fa:ff:a5:9d:4e:99:8f:ee:11:77:
         54:9f:13:cc:3f:28:c6:1c:9d:86:19:22:de:71:7c:cf:f6:72:
         4f:49:8e:d9:bb:0a:61:f9:b5:65:00:9f:ed:ea:63:2b:90:fb:
         e6:7b:6b:ed:bd:95:b5:39:8a:59:65:a6:51:9a:57:16:ac:36:
         8d:0b:82:15:1c:2c:c0:72:a2:d2:18:1e:6b:8d:2d:a3:47:15:
         e3:2c:fb:36:38:f2:7d:d5:a8:3d:95:6a:d9:65:72:72:4c:32:
         4e:a1:89:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:53 2024 by rpki-client on console-fra.rpki-client.org