Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/Wtc_ugK3UF06ukQf_IXvrV17z-U.roa
File:                     Wtc_ugK3UF06ukQf_IXvrV17z-U.roa (raw, json)
Hash identifier:          Uu4dmNxIjji1+tg2ZellX3WpPScAqLxDNWv/L7C62LU=
Subject key identifier:   5A:D7:3F:BA:02:B7:50:5D:3A:BA:44:1F:FC:85:EF:AD:5D:7B:CF:E5
Certificate issuer:       /CN=425e132c37f05117dab94af1869a7149c6408d80
Certificate serial:       0184A5BBC21576897D997ED43E252A180E44
Authority key identifier: 42:5E:13:2C:37:F0:51:17:DA:B9:4A:F1:86:9A:71:49:C6:40:8D:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ql4TLDfwURfauUrxhppxScZAjYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/Wtc_ugK3UF06ukQf_IXvrV17z-U.roa
Signing time:             Wed 23 Nov 2022 18:24:16 +0000
ROA not before:           Wed 23 Nov 2022 18:24:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        45.81.57.0/24 maxlen: 24
                          45.81.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:a5:bb:c2:15:76:89:7d:99:7e:d4:3e:25:2a:18:0e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=425e132c37f05117dab94af1869a7149c6408d80
        Validity
            Not Before: Nov 23 18:24:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5ad73fba02b7505d3aba441ffc85efad5d7bcfe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b5:28:09:94:79:0a:70:f1:49:4b:c3:44:88:
                    06:58:7c:aa:23:29:34:fd:4d:e9:42:ac:e4:03:c1:
                    79:35:60:a6:bf:44:c0:73:a9:b1:c9:5e:86:bf:8d:
                    16:89:e6:9d:2b:01:b9:89:86:07:20:05:aa:55:f1:
                    5d:c8:fc:a4:40:63:e3:b6:3c:84:42:79:55:4f:13:
                    4d:72:37:8b:45:2e:66:0f:71:b2:6d:ce:99:04:4a:
                    b8:f3:c7:ed:9f:4d:be:67:2f:22:db:8c:e2:31:f4:
                    90:99:97:a5:93:c8:80:52:1a:2f:c1:ac:ad:04:b7:
                    dd:c4:7e:84:95:a4:a5:ca:ec:24:00:59:8a:3c:0d:
                    88:3e:fc:10:f9:0a:c0:9a:3e:d5:63:f6:f0:f6:80:
                    23:33:64:6a:f0:b9:8e:3e:ef:58:0c:98:ab:23:65:
                    be:dd:20:09:29:04:10:b0:9c:09:f9:07:ce:d6:18:
                    6e:93:5c:a8:01:05:87:dd:a1:0c:5b:c6:31:a4:83:
                    d9:a8:1f:6f:13:86:64:6b:2a:35:68:5f:8e:56:29:
                    45:92:a2:94:a8:75:03:1f:9d:f8:f0:7e:90:72:a5:
                    20:32:19:c0:49:d9:ca:9a:81:03:90:81:b7:91:3c:
                    ee:0d:33:2e:ac:04:2c:84:27:62:7f:05:55:e7:be:
                    81:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D7:3F:BA:02:B7:50:5D:3A:BA:44:1F:FC:85:EF:AD:5D:7B:CF:E5
            X509v3 Authority Key Identifier:
                keyid:42:5E:13:2C:37:F0:51:17:DA:B9:4A:F1:86:9A:71:49:C6:40:8D:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ql4TLDfwURfauUrxhppxScZAjYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/Wtc_ugK3UF06ukQf_IXvrV17z-U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/Ql4TLDfwURfauUrxhppxScZAjYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.57.0/24
                  45.81.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:25:fb:7b:de:d1:69:5c:05:49:69:8c:48:ab:aa:40:d4:7e:
         59:46:e3:5d:ca:2f:fc:29:67:18:5c:a8:2e:84:98:43:02:35:
         ba:93:2c:fc:b6:b6:08:12:dc:08:d6:ff:5f:b4:d0:3a:3a:6e:
         1e:b6:d7:f4:d0:9e:a8:4f:2d:2e:bc:01:29:c0:45:e8:c4:47:
         15:31:48:10:a8:32:ed:a7:30:6c:9a:fe:70:60:48:02:90:ca:
         84:8b:12:95:73:91:8c:62:fc:2d:fe:6e:84:68:ac:27:53:cf:
         39:9a:09:33:6a:55:f5:2d:3a:97:17:ba:70:77:20:9b:1f:95:
         40:61:4f:85:77:0b:e5:de:c5:62:53:2b:8b:45:79:31:04:b9:
         c8:e7:52:6d:45:3a:b7:ae:14:22:57:fd:45:16:5c:8f:48:d9:
         08:90:59:f3:dc:11:cc:d0:4b:3b:e9:f6:71:89:2c:d3:6e:46:
         b4:c1:fa:63:bf:eb:25:af:63:4b:ee:2c:44:e8:b2:26:31:b5:
         b5:4a:c4:72:48:47:ed:38:8f:0b:6d:64:5e:8f:8a:66:5b:a1:
         3e:0b:3a:c4:80:8b:12:1d:c8:e3:a8:1d:a8:2f:64:e2:11:e1:
         13:a3:1d:54:b0:28:9d:21:ea:81:b3:5b:cf:c1:61:e4:db:b0:
         8d:46:26:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:00 2024 by rpki-client on console-ams.rpki-client.org