Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/497-M1J79fsECpSeqqzZDDbz0vk.roa
File:                     497-M1J79fsECpSeqqzZDDbz0vk.roa (raw, json)
Hash identifier:          5vGeUXqR9ECP2s74xmDnlOqy/YALRAxcWmbGAj31/1w=
Subject key identifier:   E3:DE:FE:33:52:7B:F5:FB:04:0A:94:9E:AA:AC:D9:0C:36:F3:D2:F9
Certificate issuer:       /CN=4a7209f8b7ed4fa9bfb278880c29f98d6a96b63c
Certificate serial:       08378DF2
Authority key identifier: 4A:72:09:F8:B7:ED:4F:A9:BF:B2:78:88:0C:29:F9:8D:6A:96:B6:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SnIJ-LftT6m_sniIDCn5jWqWtjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/497-M1J79fsECpSeqqzZDDbz0vk.roa
Signing time:             Thu 03 Mar 2022 13:17:31 +0000
ROA not before:           Thu 03 Mar 2022 13:17:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208976
IP address blocks:        185.245.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137858546 (0x8378df2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a7209f8b7ed4fa9bfb278880c29f98d6a96b63c
        Validity
            Not Before: Mar  3 13:17:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e3defe33527bf5fb040a949eaaacd90c36f3d2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:17:40:14:05:9f:4e:b8:da:c7:28:26:71:ce:
                    64:08:80:23:5e:57:01:49:98:88:c3:42:70:28:8b:
                    10:b6:dd:5d:f5:1f:c3:3f:fc:dc:ac:de:1b:21:3a:
                    0d:e6:ce:55:ea:23:b0:16:33:b9:78:f4:12:bf:ce:
                    6d:c6:43:59:d3:a4:de:39:7b:d3:bc:20:79:82:ac:
                    3b:4f:80:13:ac:2a:4e:83:63:28:07:03:cb:77:28:
                    66:c7:c7:1f:e7:84:b9:ec:3e:4e:a6:6f:f2:1d:e2:
                    82:7e:7e:9d:fe:fc:c4:9a:17:d0:1e:0c:9b:3b:2f:
                    08:35:d5:a4:9e:b4:5c:c5:74:8c:af:e1:23:e4:6b:
                    f0:6d:d9:dd:c8:f0:25:f0:d5:73:1d:9f:6e:e4:31:
                    e4:82:0b:47:75:b3:56:3e:77:95:b6:c1:37:f2:07:
                    02:72:66:ae:43:c3:c1:69:02:56:06:f3:7d:a3:1a:
                    fc:27:a5:f8:fa:71:c7:be:1d:65:71:81:6b:4b:46:
                    ba:f4:7a:9b:c2:9f:d6:50:be:c7:9f:04:87:d8:36:
                    a5:c5:0b:ac:17:25:3a:cb:69:33:5c:c6:69:9b:f9:
                    bc:af:75:76:6b:bc:13:56:40:9d:b5:21:54:ad:ed:
                    6c:85:2e:82:ef:f0:98:6c:39:aa:b6:b4:7c:5f:72:
                    e6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DE:FE:33:52:7B:F5:FB:04:0A:94:9E:AA:AC:D9:0C:36:F3:D2:F9
            X509v3 Authority Key Identifier:
                keyid:4A:72:09:F8:B7:ED:4F:A9:BF:B2:78:88:0C:29:F9:8D:6A:96:B6:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnIJ-LftT6m_sniIDCn5jWqWtjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/497-M1J79fsECpSeqqzZDDbz0vk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/SnIJ-LftT6m_sniIDCn5jWqWtjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.245.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:f3:b6:08:4e:e7:e2:88:2e:e6:3d:7c:9b:3b:25:8a:71:af:
         f2:b1:fc:64:8b:74:ed:56:ed:cb:c0:1d:80:66:47:7e:ce:f5:
         bb:06:58:87:bf:44:97:8e:83:53:7d:e0:27:32:f4:89:57:6a:
         fb:18:3c:6c:f9:68:a5:3a:15:bb:99:8a:a9:ca:b5:d4:83:96:
         46:df:b7:a3:e8:e2:8e:02:f4:55:43:cb:79:52:70:68:e7:9e:
         7b:c2:bf:16:a1:0b:6c:94:07:d6:1e:4e:cf:6c:b9:b5:84:1a:
         22:80:f0:97:38:4e:71:db:92:d8:d3:f6:61:b0:d3:56:d6:55:
         84:fb:a2:e5:ee:db:1c:81:97:38:dc:92:74:7c:b3:5f:44:bf:
         3c:aa:62:4c:a3:29:dc:cf:0f:bb:e3:7c:0b:d3:9f:92:8e:69:
         10:dd:5d:2e:6d:40:80:81:70:20:ba:e1:2a:46:cf:09:47:61:
         1b:16:1f:ad:63:03:fc:bc:b6:1d:d7:22:99:78:17:47:ea:bf:
         18:cf:ef:22:2f:9e:dc:f1:3a:46:72:e4:d5:cf:74:fd:9c:0e:
         f2:f0:ca:6d:3c:49:52:5d:6f:08:3f:2d:34:9f:92:86:5d:0a:
         e5:bd:8d:ee:bf:2e:d4:bc:17:ab:ea:a0:8a:39:c4:16:91:e2:
         2a:52:5a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:42 2024 by rpki-client on console-ams.rpki-client.org