Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/HMD_DY4aRlTNTO7myjH0Z-4Y1Dk.roa
File:                     HMD_DY4aRlTNTO7myjH0Z-4Y1Dk.roa (raw, json)
Hash identifier:          wIt5bkMp5+eBxUzVpsf6Q7KnEEAOIltb91EBGRQlHcI=
Subject key identifier:   1C:C0:FF:0D:8E:1A:46:54:CD:4C:EE:E6:CA:31:F4:67:EE:18:D4:39
Certificate issuer:       /CN=b30bf5d9085fe5afe5e201d7c236cef9be9235af
Certificate serial:       05BD014A
Authority key identifier: B3:0B:F5:D9:08:5F:E5:AF:E5:E2:01:D7:C2:36:CE:F9:BE:92:35:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swv12Qhf5a_l4gHXwjbO-b6SNa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/HMD_DY4aRlTNTO7myjH0Z-4Y1Dk.roa
Signing time:             Sat 01 Jan 2022 00:55:32 +0000
ROA not before:           Sat 01 Jan 2022 00:55:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211052
IP address blocks:        45.154.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96272714 (0x5bd014a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30bf5d9085fe5afe5e201d7c236cef9be9235af
        Validity
            Not Before: Jan  1 00:55:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1cc0ff0d8e1a4654cd4ceee6ca31f467ee18d439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:04:a7:7e:d5:00:e8:de:9a:c4:d5:bc:cd:b7:
                    f8:1b:82:6f:a3:76:26:75:6e:52:ed:24:e3:72:40:
                    78:cc:2e:b1:54:e2:ad:86:2d:e3:27:47:62:ec:f9:
                    62:be:e5:87:7a:13:aa:94:cc:34:62:f9:6b:8c:bf:
                    76:8b:bb:fb:1a:4e:ba:69:55:99:c8:2b:40:39:fa:
                    5b:9a:ad:f1:64:4c:20:a3:32:d8:0f:ca:4c:43:5f:
                    b0:fa:83:10:64:1b:cd:7b:c2:78:8b:cc:58:6b:35:
                    1d:cb:dc:c3:c1:d2:b1:bf:ff:34:d9:44:82:fe:75:
                    74:bb:9f:15:63:a5:17:3c:c5:f1:01:89:15:e1:c7:
                    41:64:cb:cb:e8:84:9c:53:77:87:9b:0a:e1:9e:19:
                    2c:71:b2:0d:7e:65:1d:6f:0c:cd:7b:87:fd:2c:0e:
                    a9:86:32:c3:d6:72:83:87:4e:0c:08:61:fa:11:c0:
                    34:a7:97:fc:3a:fe:f9:fa:e4:ff:3e:39:bf:11:29:
                    53:11:08:f0:24:16:e6:5d:fa:2c:fc:3c:f3:71:63:
                    09:07:64:d1:c1:67:e0:7a:8d:cd:cb:d1:10:03:c9:
                    07:ee:b3:40:7b:ca:65:83:69:e1:48:43:f9:cf:de:
                    9e:0e:84:66:d0:cd:0d:46:8c:f7:6f:75:37:df:36:
                    35:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C0:FF:0D:8E:1A:46:54:CD:4C:EE:E6:CA:31:F4:67:EE:18:D4:39
            X509v3 Authority Key Identifier:
                keyid:B3:0B:F5:D9:08:5F:E5:AF:E5:E2:01:D7:C2:36:CE:F9:BE:92:35:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swv12Qhf5a_l4gHXwjbO-b6SNa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/HMD_DY4aRlTNTO7myjH0Z-4Y1Dk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/swv12Qhf5a_l4gHXwjbO-b6SNa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:98:f4:20:f5:50:46:8a:be:94:21:d6:1e:10:44:fd:48:6d:
         e9:80:d9:88:77:dc:32:fc:8f:56:93:dc:5c:4e:65:f4:f9:eb:
         bc:a3:f5:b7:f1:93:16:04:59:ad:b1:1a:6c:64:22:f0:de:72:
         94:14:66:8a:2d:38:ae:0a:2c:74:b1:38:51:e0:86:c2:09:5d:
         f6:8b:d4:df:18:69:c0:71:ec:91:2e:d8:b9:07:90:9b:b4:d0:
         49:89:c2:e0:92:22:a4:a5:33:6a:e6:cb:f2:80:38:45:d9:31:
         3f:fc:74:4f:e8:ff:c8:0e:27:3e:bc:4a:ea:b4:da:67:f9:d3:
         e1:be:c7:f2:f6:ba:0a:29:28:c6:1a:c7:dc:5a:ec:eb:b9:54:
         42:0c:6e:6d:ad:0f:0d:cf:55:01:2d:29:cd:75:61:6b:da:49:
         8b:40:8f:fa:da:b7:76:4b:e6:eb:38:c5:7d:e5:03:28:46:b8:
         4a:86:8d:cd:8c:11:4c:fb:7a:60:e3:21:28:d8:28:67:e6:e0:
         54:0f:a0:7a:32:34:7f:86:49:1d:98:07:0c:76:8b:d4:f4:b4:
         f9:01:d9:4c:78:46:d3:b6:33:2b:ea:b4:c8:2f:62:c4:be:40:
         3c:61:e8:be:14:bb:db:96:a4:38:1d:05:0d:2c:08:df:83:74:
         cc:14:2b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:44 2024 by rpki-client on console-ams.rpki-client.org