Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/vkI-EXIA-LtdIq9Niua0gCIlXEo.roa
File:                     vkI-EXIA-LtdIq9Niua0gCIlXEo.roa (raw, json)
Hash identifier:          7gle+D35/XQr8G4fHt9eJV1Q41XjXN9GHoVRvBl07e4=
Subject key identifier:   BE:42:3E:11:72:00:F8:BB:5D:22:AF:4D:8A:E6:B4:80:22:25:5C:4A
Certificate issuer:       /CN=6ef0a587acb330625e21158ec40b710af0e2167a
Certificate serial:       0776B4B7
Authority key identifier: 6E:F0:A5:87:AC:B3:30:62:5E:21:15:8E:C4:0B:71:0A:F0:E2:16:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bvClh6yzMGJeIRWOxAtxCvDiFno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/vkI-EXIA-LtdIq9Niua0gCIlXEo.roa
Signing time:             Sat 01 Jan 2022 13:55:02 +0000
ROA not before:           Sat 01 Jan 2022 13:55:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212792
IP address blocks:        45.155.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125220023 (0x776b4b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ef0a587acb330625e21158ec40b710af0e2167a
        Validity
            Not Before: Jan  1 13:55:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=be423e117200f8bb5d22af4d8ae6b48022255c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:95:a3:b4:83:27:24:fc:91:e6:60:c9:07:
                    91:53:03:a1:a2:14:ba:cd:75:9f:a2:74:e8:73:63:
                    eb:c0:00:21:3a:85:31:5a:17:7e:d4:72:52:6b:68:
                    f8:90:eb:c8:5b:f1:61:a9:a6:c6:d3:47:4c:34:fc:
                    01:4d:1c:39:31:f4:77:73:a5:46:89:6e:08:41:2c:
                    f6:c5:d0:e8:a7:b2:1e:5d:b1:f5:f5:ee:c4:39:3a:
                    31:fe:52:e3:10:8c:7f:75:1e:8a:20:18:83:d0:4b:
                    f3:6d:1c:35:75:33:05:b4:a3:59:0d:b9:50:e8:1a:
                    7a:99:04:f1:f7:9a:6c:47:81:b6:be:62:10:c8:21:
                    e8:ce:f5:eb:dc:14:40:77:c7:58:2a:a0:64:fe:a5:
                    e6:99:cc:50:c4:8b:fb:df:4a:f8:a2:52:9c:f9:11:
                    f1:33:1a:b0:0c:7b:c9:c9:5a:24:3b:c1:16:1d:3f:
                    64:32:b2:50:7f:5b:9a:82:71:a0:e7:09:ec:bb:f1:
                    68:1c:d7:94:66:ce:d8:a4:2f:99:42:88:04:13:c3:
                    86:8e:9e:f8:0e:95:24:e2:ac:66:56:ef:83:2e:cb:
                    87:50:8b:89:29:1b:b1:8e:3f:05:82:98:b4:4a:fb:
                    ad:12:7b:18:82:9a:e7:08:97:71:26:76:d1:4a:6f:
                    b7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:42:3E:11:72:00:F8:BB:5D:22:AF:4D:8A:E6:B4:80:22:25:5C:4A
            X509v3 Authority Key Identifier:
                keyid:6E:F0:A5:87:AC:B3:30:62:5E:21:15:8E:C4:0B:71:0A:F0:E2:16:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvClh6yzMGJeIRWOxAtxCvDiFno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/vkI-EXIA-LtdIq9Niua0gCIlXEo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/bvClh6yzMGJeIRWOxAtxCvDiFno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:33:6e:48:65:20:e4:06:97:6a:43:c2:b9:d0:5b:6a:b0:75:
         a9:72:7f:18:0d:1e:64:33:c6:f9:77:73:e4:7b:d7:ae:2c:04:
         82:eb:83:35:80:a0:05:95:ec:38:ed:f0:4d:24:61:fe:21:85:
         57:96:70:20:c8:40:31:bd:af:ec:7b:c9:8e:6a:ce:5f:01:04:
         e6:9c:e6:d8:f3:b3:38:f9:ee:b9:88:50:47:7a:0f:5f:0d:85:
         75:8e:26:fd:ae:8a:b9:ee:ab:a4:61:5e:74:67:88:15:86:bf:
         c2:c5:2e:60:ad:bc:79:be:5a:3d:07:cc:da:2e:49:5c:28:02:
         18:7f:07:94:47:c5:d6:0b:0b:d2:51:d5:6b:11:ba:59:2b:64:
         fc:3a:31:f5:40:2d:87:40:94:dd:3a:50:4e:4c:99:2e:80:90:
         61:7f:4a:16:42:7a:6d:e2:24:9d:74:da:ef:78:e6:62:55:3c:
         77:9c:69:07:4c:22:a6:7b:d8:f2:2b:f3:12:ef:59:f7:3c:3e:
         a1:da:94:81:ae:c4:0c:2b:b9:7d:13:d1:2a:69:3b:22:65:a3:
         37:5b:9f:cd:d8:c9:f1:7e:84:6a:61:6a:68:41:75:cb:22:c3:
         64:58:ca:83:26:f2:8c:49:f3:2e:b1:c5:9f:bb:ad:59:e7:b7:
         b9:34:aa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:06 2024 by rpki-client on console-fra.rpki-client.org