Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/4q-PpQtC0kE-VNaJ-xEETJlnybg.roa
File:                     4q-PpQtC0kE-VNaJ-xEETJlnybg.roa (raw, json)
Hash identifier:          be/XD8vFCNtIAHWVDD48fnrdnHyTNh7X2zO6SmH2sEM=
Subject key identifier:   E2:AF:8F:A5:0B:42:D2:41:3E:54:D6:89:FB:11:04:4C:99:67:C9:B8
Certificate issuer:       /CN=c0d1b3287b9d9db1af7059da10b46b61187969c4
Certificate serial:       050624D1
Authority key identifier: C0:D1:B3:28:7B:9D:9D:B1:AF:70:59:DA:10:B4:6B:61:18:79:69:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wNGzKHudnbGvcFnaELRrYRh5acQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/4q-PpQtC0kE-VNaJ-xEETJlnybg.roa
Signing time:             Mon 24 Jan 2022 08:25:22 +0000
ROA not before:           Mon 24 Jan 2022 08:25:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61173
IP address blocks:        5.182.45.0/24 maxlen: 24
                          85.208.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84288721 (0x50624d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d1b3287b9d9db1af7059da10b46b61187969c4
        Validity
            Not Before: Jan 24 08:25:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e2af8fa50b42d2413e54d689fb11044c9967c9b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d4:34:80:e3:9b:54:37:d9:7d:48:d5:19:07:
                    4f:e6:dd:4d:b0:32:1e:c8:b0:ec:2a:f2:75:78:05:
                    3b:2e:37:b7:2e:c8:84:7b:e1:74:ba:90:9a:ed:cd:
                    83:33:1c:45:cb:34:f5:4f:e1:3f:c1:a2:57:82:c2:
                    5b:4b:17:98:44:70:b2:af:ad:27:f2:bc:36:84:b2:
                    36:57:85:6a:7f:d9:b0:7f:1a:d9:97:24:49:c5:66:
                    2c:49:f0:c3:73:e4:4c:a9:b0:b6:13:a7:aa:b1:97:
                    ac:94:ae:3d:4d:27:89:61:cd:53:c8:5e:de:26:a7:
                    21:35:24:bd:c6:e0:89:b6:e7:54:77:68:a4:7d:77:
                    f6:64:00:71:13:1f:48:ae:1d:d1:c6:e3:ed:74:e3:
                    25:89:37:8e:df:24:5f:e4:4e:62:40:fc:7b:ab:c5:
                    01:4c:24:17:19:01:ea:b7:85:e6:46:cd:91:b0:02:
                    b4:f7:47:a6:46:b9:f2:8c:ee:39:50:b7:78:f4:7d:
                    42:a2:df:7a:67:bf:7d:ff:14:9f:99:a5:5b:33:90:
                    53:2f:10:c2:b1:8b:2e:93:3c:d9:5c:52:53:f5:82:
                    3c:83:4d:e5:4d:92:5e:25:71:91:1f:e6:86:ed:37:
                    00:6c:f0:0c:ff:cf:a0:28:10:c9:56:90:13:17:d0:
                    d8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AF:8F:A5:0B:42:D2:41:3E:54:D6:89:FB:11:04:4C:99:67:C9:B8
            X509v3 Authority Key Identifier:
                keyid:C0:D1:B3:28:7B:9D:9D:B1:AF:70:59:DA:10:B4:6B:61:18:79:69:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNGzKHudnbGvcFnaELRrYRh5acQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/4q-PpQtC0kE-VNaJ-xEETJlnybg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/wNGzKHudnbGvcFnaELRrYRh5acQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.45.0/24
                  85.208.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:fa:fd:4f:52:ac:2e:1b:8d:90:81:c9:29:ef:3a:ee:88:5c:
         a1:82:cd:62:3b:90:13:70:bd:4c:12:07:4c:b9:90:6e:27:97:
         8b:07:13:80:42:c7:49:dc:28:68:29:c5:10:a1:83:fa:b6:9a:
         16:2d:23:b2:f5:87:0d:56:6b:3d:cc:78:85:32:61:66:38:45:
         75:8d:03:ff:bc:a5:48:25:47:0f:88:d8:45:60:3f:e6:95:5d:
         24:d4:4d:8b:a4:31:f3:28:c8:48:e7:22:5c:a0:cd:2e:19:f6:
         95:9a:3d:27:b1:e3:62:62:9e:7f:3a:e2:a2:ec:a7:b6:c1:48:
         1c:85:22:4a:d8:67:43:ae:83:0e:ae:6b:d8:20:69:40:1b:55:
         72:04:83:3c:aa:d6:d8:66:21:27:87:b9:3d:b3:da:e7:14:ff:
         3d:be:6d:6c:cb:a0:44:4f:f2:0f:67:95:9d:57:92:b4:85:0e:
         75:3b:4c:9c:ed:fd:1d:fa:ea:e8:23:d6:01:5d:c2:65:6b:48:
         47:81:3f:c9:dc:80:e7:6e:ba:ef:3f:4d:9c:a3:15:01:7a:d4:
         0b:f7:9b:69:14:ab:52:0c:e2:49:ed:4c:a7:31:8c:fe:ae:00:
         e1:e2:00:96:fa:ec:98:6a:61:f2:4a:11:64:00:3c:2b:fa:a6:
         1d:0c:5e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:08 2024 by rpki-client on console-fra.rpki-client.org