Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/ShrJPVEy6-9Yrrj0wa11TmM7-kI.roa
File:                     ShrJPVEy6-9Yrrj0wa11TmM7-kI.roa (raw, json)
Hash identifier:          LDVE0d4Cx/9FcxWiXlOhQm8DZkyCOhAfraKWBywIrQE=
Subject key identifier:   4A:1A:C9:3D:51:32:EB:EF:58:AE:B8:F4:C1:AD:75:4E:63:3B:FA:42
Certificate issuer:       /CN=6ef0a587acb330625e21158ec40b710af0e2167a
Certificate serial:       07751B6F
Authority key identifier: 6E:F0:A5:87:AC:B3:30:62:5E:21:15:8E:C4:0B:71:0A:F0:E2:16:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bvClh6yzMGJeIRWOxAtxCvDiFno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/ShrJPVEy6-9Yrrj0wa11TmM7-kI.roa
Signing time:             Sat 01 Jan 2022 13:55:01 +0000
ROA not before:           Sat 01 Jan 2022 13:55:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        45.155.64.0/23 maxlen: 24
                          45.155.66.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125115247 (0x7751b6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ef0a587acb330625e21158ec40b710af0e2167a
        Validity
            Not Before: Jan  1 13:55:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4a1ac93d5132ebef58aeb8f4c1ad754e633bfa42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:21:83:a7:59:b7:7d:ab:42:dd:5a:9e:68:8a:
                    af:03:b5:84:9d:58:9c:ff:f5:d5:22:58:ef:43:ab:
                    1a:51:63:a0:ef:30:6e:1a:5c:d8:b6:9a:ea:b3:1a:
                    46:e0:34:68:41:16:31:48:25:b1:f8:4d:48:87:56:
                    cd:60:ef:64:e4:ce:0a:00:14:28:ad:98:c4:4c:5d:
                    cd:be:fd:1a:a6:79:73:01:a5:1c:a8:fc:6a:9f:f2:
                    7b:63:60:79:d9:9b:22:18:b5:8f:d1:57:4c:c2:61:
                    6c:41:5c:c9:19:96:cd:11:e0:9d:8d:bc:4a:61:bb:
                    c7:9b:8d:79:10:b3:3e:cc:54:8d:bb:1c:e3:a7:88:
                    84:cf:93:67:b9:04:34:4d:81:ee:96:31:e1:d4:99:
                    b3:e4:d8:d9:60:fd:02:7d:23:9b:74:9d:aa:ed:33:
                    64:c4:d0:2e:5a:a8:a3:2d:e3:7c:7e:d7:52:07:3a:
                    15:51:f9:90:9c:ce:2d:a6:cd:79:da:ee:3b:fd:17:
                    36:1c:ee:27:7d:f3:be:a1:50:f6:bc:82:b5:96:5e:
                    70:e7:21:9a:68:40:3a:33:1f:ba:f4:ae:f8:74:a6:
                    3d:e1:ce:ea:41:1d:79:76:a2:d9:61:c3:5f:06:9a:
                    0f:3d:d7:75:50:97:82:71:4d:93:c9:7a:2e:51:c3:
                    fa:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1A:C9:3D:51:32:EB:EF:58:AE:B8:F4:C1:AD:75:4E:63:3B:FA:42
            X509v3 Authority Key Identifier:
                keyid:6E:F0:A5:87:AC:B3:30:62:5E:21:15:8E:C4:0B:71:0A:F0:E2:16:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvClh6yzMGJeIRWOxAtxCvDiFno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/ShrJPVEy6-9Yrrj0wa11TmM7-kI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/bvClh6yzMGJeIRWOxAtxCvDiFno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:51:df:82:99:58:60:8a:3c:48:f4:8d:5a:95:a6:11:55:cf:
         1d:aa:9d:b1:36:2b:54:8e:a7:95:06:74:0c:50:98:76:9e:43:
         22:db:32:fe:fc:0b:b0:28:4e:c2:29:b3:f8:94:5c:2e:8d:7e:
         32:b3:45:84:50:8a:c5:a9:3f:3f:23:1c:4c:c8:56:97:0f:27:
         c9:a6:f1:8c:6f:65:55:ef:9a:54:76:e0:cc:41:33:be:cc:6a:
         b8:0e:e6:1f:ca:b2:c1:81:cb:10:19:be:24:3a:4e:e0:c9:28:
         61:2a:6b:eb:fe:d2:64:b8:08:b6:41:36:e8:36:4e:1b:75:f8:
         63:15:d5:91:bf:22:ec:60:cb:c9:d9:4f:8f:b7:34:dc:25:06:
         6d:43:5c:03:0c:18:cc:6d:3d:7b:56:f3:d4:7c:5f:a1:b2:3c:
         94:3a:2d:32:6e:6d:dd:e5:33:ed:5f:7a:03:98:9b:4e:9b:d9:
         d7:85:36:3a:ad:c3:06:4b:b3:77:8f:ca:d5:37:a8:a1:37:b1:
         44:2b:40:c0:8a:db:06:a9:81:36:ff:a4:de:51:eb:88:e5:fd:
         00:e8:8a:a5:e9:dc:97:ae:a2:63:b9:01:d9:30:29:f2:04:25:
         8f:08:d7:ed:ea:8c:13:e3:d5:3e:58:4e:2b:59:5b:6e:9f:30:
         4d:ca:fa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:06 2024 by rpki-client on console-fra.rpki-client.org