Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/729034-0cea-44f8-9f30-0d5eb3d609ea/1/613d62y2QtHVBDlJiU4Oxji38PM.roa
File:                     613d62y2QtHVBDlJiU4Oxji38PM.roa (raw, json)
Hash identifier:          XlTy3DlU5LfNsiAViQ3ihuNv6TWisL+GO6wVUau/WjQ=
Subject key identifier:   EB:5D:DD:EB:6C:B6:42:D1:D5:04:39:49:89:4E:0E:C6:38:B7:F0:F3
Certificate issuer:       /CN=85972a0487d95cc1bfe1da6d1a27b89d1d3576d6
Certificate serial:       046D5807
Authority key identifier: 85:97:2A:04:87:D9:5C:C1:BF:E1:DA:6D:1A:27:B8:9D:1D:35:76:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hZcqBIfZXMG_4dptGie4nR01dtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/729034-0cea-44f8-9f30-0d5eb3d609ea/1/613d62y2QtHVBDlJiU4Oxji38PM.roa
Signing time:             Tue 07 Jun 2022 13:52:02 +0000
ROA not before:           Tue 07 Jun 2022 13:52:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207713
IP address blocks:        45.95.233.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74274823 (0x46d5807)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85972a0487d95cc1bfe1da6d1a27b89d1d3576d6
        Validity
            Not Before: Jun  7 13:52:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eb5dddeb6cb642d1d5043949894e0ec638b7f0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2c:d1:18:3e:0a:f2:7b:de:b8:df:f0:aa:f9:
                    ce:64:09:9b:5f:5a:e5:9f:98:22:e9:61:92:de:b3:
                    3e:ac:e8:72:3b:ec:f9:fa:b7:87:0a:00:ab:77:0a:
                    20:a7:88:a7:8e:5e:db:06:d4:c7:16:24:fa:9a:60:
                    04:c9:5f:f0:71:8f:5f:ee:24:07:c0:bc:10:3a:db:
                    e9:8f:8a:7c:60:d3:28:96:64:b7:9f:cb:77:d6:07:
                    ba:d0:90:17:c3:ce:04:32:6b:ad:db:b1:12:91:a2:
                    1a:8e:ea:cc:29:01:00:79:2c:62:c1:4a:ad:10:a1:
                    7c:6c:ad:f6:73:6f:32:23:54:9b:69:0f:16:73:30:
                    94:29:93:31:c6:e1:f6:62:7e:71:39:f1:34:ec:16:
                    97:a4:b4:2b:8d:a6:34:09:3f:cc:44:de:fb:af:aa:
                    36:bd:06:38:e9:32:76:d5:1f:d4:49:8e:a6:9a:38:
                    59:6b:51:64:11:96:5e:d1:68:91:ca:54:9c:e2:8a:
                    04:82:20:2b:8a:a0:66:64:8e:8f:82:78:62:cc:e7:
                    6a:46:34:b3:31:c2:e2:6b:a4:8b:e0:62:25:7d:9e:
                    64:fa:6e:b7:70:b5:60:27:0b:78:57:10:e9:27:8a:
                    c1:a3:63:71:3d:7d:89:8d:eb:e0:21:d8:02:35:2f:
                    66:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5D:DD:EB:6C:B6:42:D1:D5:04:39:49:89:4E:0E:C6:38:B7:F0:F3
            X509v3 Authority Key Identifier:
                keyid:85:97:2A:04:87:D9:5C:C1:BF:E1:DA:6D:1A:27:B8:9D:1D:35:76:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZcqBIfZXMG_4dptGie4nR01dtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/729034-0cea-44f8-9f30-0d5eb3d609ea/1/613d62y2QtHVBDlJiU4Oxji38PM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/729034-0cea-44f8-9f30-0d5eb3d609ea/1/hZcqBIfZXMG_4dptGie4nR01dtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:1a:75:09:6d:d1:45:22:71:3f:2c:3f:3f:b1:ff:2d:a0:95:
         ab:7b:93:b1:66:93:73:49:64:19:1a:1c:af:b6:41:16:70:87:
         1c:f0:62:3c:90:7b:86:49:79:36:c4:ba:ef:18:58:67:ce:4f:
         6d:78:e9:af:ee:0e:83:64:f2:03:de:a1:0d:7f:aa:c4:fa:e9:
         bc:9b:bc:77:6d:a6:b2:f2:a5:b6:7e:ed:a1:42:ca:30:35:81:
         70:10:4e:6a:30:99:0f:93:b9:5b:ac:22:9e:9d:2c:dd:5a:7f:
         f7:a5:85:79:58:26:96:5c:e2:34:9c:25:9f:5d:7e:4c:26:3f:
         78:b3:94:dc:5e:c4:15:2f:0f:83:8d:eb:f2:17:09:f7:4d:51:
         ff:53:af:cf:b1:c4:e7:78:1b:6b:f2:b1:61:39:60:dd:ec:be:
         92:a5:0a:9e:13:93:b9:d1:0a:d5:53:b3:25:9d:3e:f6:46:ab:
         57:50:23:89:97:ec:5f:0e:da:2b:e2:9e:60:2c:c1:b6:32:06:
         78:b2:17:d8:ca:aa:c1:34:13:f1:db:2d:bf:cb:f6:3f:2c:a3:
         4e:c5:89:f5:6d:33:22:8c:a3:d5:b8:dd:7b:ab:f6:82:20:41:
         2e:70:9e:4c:a7:94:72:0c:1b:66:d4:ca:0b:be:f0:b1:99:92:
         06:bd:ee:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:18 2024 by rpki-client on console-ams.rpki-client.org