Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/3MIl4jLomMChnapWb-bH1amAsLE.roa
File:                     3MIl4jLomMChnapWb-bH1amAsLE.roa (raw, json)
Hash identifier:          nW3dtmZCbZOsejSd6TDYI7R2gl5/lSaynTEC3IpnUJg=
Subject key identifier:   DC:C2:25:E2:32:E8:98:C0:A1:9D:AA:56:6F:E6:C7:D5:A9:80:B0:B1
Certificate issuer:       /CN=b30bf5d9085fe5afe5e201d7c236cef9be9235af
Certificate serial:       05BFCDC9
Authority key identifier: B3:0B:F5:D9:08:5F:E5:AF:E5:E2:01:D7:C2:36:CE:F9:BE:92:35:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swv12Qhf5a_l4gHXwjbO-b6SNa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/3MIl4jLomMChnapWb-bH1amAsLE.roa
Signing time:             Sat 01 Jan 2022 00:55:33 +0000
ROA not before:           Sat 01 Jan 2022 00:55:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212517
IP address blocks:        45.154.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96456137 (0x5bfcdc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30bf5d9085fe5afe5e201d7c236cef9be9235af
        Validity
            Not Before: Jan  1 00:55:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dcc225e232e898c0a19daa566fe6c7d5a980b0b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:32:50:70:44:78:59:7f:0f:6c:a0:2f:fa:80:
                    11:ab:e1:79:03:b3:1b:8d:08:65:2a:33:2b:40:67:
                    53:b7:e9:80:8f:82:9e:d5:9f:c1:4b:b6:a6:eb:51:
                    bb:44:d7:ec:e7:ee:90:61:3b:3a:09:bd:0f:42:3b:
                    58:09:df:5b:10:b6:b5:61:57:b9:d9:55:68:0a:ae:
                    83:b5:48:51:b4:80:9e:0f:7d:d2:1a:94:2d:38:31:
                    42:c2:d9:a3:5e:67:1b:0e:07:cd:b8:e2:a7:b7:d3:
                    2a:6b:01:65:91:cb:dd:4f:95:66:9e:09:81:3a:cd:
                    b2:e0:ac:75:c1:45:4f:85:60:f0:d0:81:b0:b4:58:
                    cc:98:47:4a:27:8c:3e:fe:58:3d:79:87:d1:a3:94:
                    03:48:cd:47:e6:5d:73:97:b6:02:e1:a5:3d:f9:b0:
                    b9:fd:26:30:d5:d1:d5:a9:a5:e9:00:00:f4:91:c2:
                    b0:2d:4b:c5:33:5b:2e:67:40:e6:be:ca:00:8a:15:
                    96:08:f3:79:13:1b:03:1e:c1:a0:dc:ff:8f:7b:5b:
                    c1:ca:fa:95:0f:fc:73:f9:90:5b:08:a6:16:c8:7a:
                    22:0e:d1:86:34:5b:bf:50:0e:27:8d:9b:ab:51:16:
                    41:c9:4b:68:76:30:fb:2d:e9:29:69:01:38:50:53:
                    53:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C2:25:E2:32:E8:98:C0:A1:9D:AA:56:6F:E6:C7:D5:A9:80:B0:B1
            X509v3 Authority Key Identifier:
                keyid:B3:0B:F5:D9:08:5F:E5:AF:E5:E2:01:D7:C2:36:CE:F9:BE:92:35:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swv12Qhf5a_l4gHXwjbO-b6SNa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/3MIl4jLomMChnapWb-bH1amAsLE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/swv12Qhf5a_l4gHXwjbO-b6SNa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:48:82:a6:86:ed:ae:7d:aa:26:05:6e:86:75:f3:4d:b4:a7:
         8b:4a:44:ce:5f:22:b1:b0:e9:d7:66:d6:ff:55:58:4d:18:ab:
         00:78:89:2e:a3:25:81:3e:af:73:b8:34:1c:eb:a8:a5:85:b1:
         55:ba:91:12:43:fb:2f:03:6e:53:a2:5c:99:f8:54:6b:79:20:
         5c:46:51:9d:8e:bf:89:18:c2:2e:bd:bc:e2:1a:2e:8e:2d:57:
         4e:85:88:e1:9e:aa:fd:59:af:a0:41:a8:bc:a3:30:3d:a3:73:
         af:63:45:a4:73:f4:8c:45:ad:b8:5c:34:23:1f:7c:a5:0d:51:
         2d:20:c0:72:ce:40:e5:45:94:68:80:73:4a:e2:98:ab:34:c2:
         73:d2:af:8e:e2:be:67:1d:9a:cc:e4:aa:35:78:1c:a7:89:6f:
         1e:2d:f7:85:f2:b5:f6:0b:bb:2e:56:29:9d:d2:9c:b2:88:d0:
         ee:35:32:72:6d:41:06:8c:7d:5e:f4:d0:f8:dc:a4:03:84:df:
         74:16:01:b2:31:13:2f:de:27:b5:39:14:10:ab:d7:db:91:4b:
         73:1f:f7:f7:66:f2:5e:0c:c6:e0:c1:19:b2:fb:6c:87:c1:96:
         1a:ea:36:6a:0d:ba:50:77:25:0a:ef:67:f1:b2:1f:3d:e2:08:
         e5:3b:9e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:55 2024 by rpki-client on console-fra.rpki-client.org