Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/RVzSiUnJGQMVZa33InErNEuOIs8.roa
File:                     RVzSiUnJGQMVZa33InErNEuOIs8.roa (raw, json)
Hash identifier:          9L6jjodmK0uWHcb8UcVaQEFgtJMAqbIALDN1KwHGG24=
Subject key identifier:   45:5C:D2:89:49:C9:19:03:15:65:AD:F7:22:71:2B:34:4B:8E:22:CF
Certificate issuer:       /CN=0a2010093f10810b1b85724ea89e294fcdccfbf2
Certificate serial:       015C5C3E
Authority key identifier: 0A:20:10:09:3F:10:81:0B:1B:85:72:4E:A8:9E:29:4F:CD:CC:FB:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CiAQCT8QgQsbhXJOqJ4pT83M-_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/RVzSiUnJGQMVZa33InErNEuOIs8.roa
Signing time:             Sat 01 Jan 2022 03:57:30 +0000
ROA not before:           Sat 01 Jan 2022 03:57:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        46.31.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22830142 (0x15c5c3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a2010093f10810b1b85724ea89e294fcdccfbf2
        Validity
            Not Before: Jan  1 03:57:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=455cd28949c919031565adf722712b344b8e22cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c6:51:50:1b:e8:db:cb:3c:e7:a3:5e:b9:f8:
                    39:49:c4:d8:e6:48:66:f9:d0:bc:d4:c4:81:15:3e:
                    0f:1d:79:fa:e5:03:18:91:b7:56:89:5e:88:09:50:
                    ff:01:54:7c:c8:2d:92:8f:51:80:4d:53:a8:d8:28:
                    81:6f:b1:4c:52:22:af:92:d2:01:0f:5e:45:89:1e:
                    31:db:4a:de:b4:10:a5:28:71:98:6b:60:03:8d:8c:
                    c0:cf:14:37:39:8e:f4:a4:45:f2:b8:79:8b:a3:0f:
                    d4:9d:53:54:4c:33:9a:a4:83:a9:23:c8:0a:69:d2:
                    e4:72:09:02:dd:21:0e:7e:b8:69:e6:94:70:6b:52:
                    4d:c2:06:93:0d:07:35:0a:fa:17:e7:0a:88:59:c9:
                    80:ff:ee:81:63:20:0e:29:f6:18:ae:9c:56:5e:1c:
                    5a:7c:6a:3b:84:b4:ee:17:30:f8:54:61:e8:4f:c7:
                    d3:bf:d2:62:86:5a:a4:de:5b:c5:a5:3a:7d:44:d1:
                    41:d4:8a:f5:c5:a3:0d:b8:50:83:5e:2a:2f:2b:a4:
                    af:d0:2f:d9:a7:59:18:e4:63:fd:b2:98:48:5f:91:
                    40:5b:fe:d0:4b:0b:7b:59:12:46:d6:5b:e6:94:48:
                    ed:1f:c1:88:c7:60:67:f6:10:3e:ae:96:14:c3:f2:
                    55:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5C:D2:89:49:C9:19:03:15:65:AD:F7:22:71:2B:34:4B:8E:22:CF
            X509v3 Authority Key Identifier:
                keyid:0A:20:10:09:3F:10:81:0B:1B:85:72:4E:A8:9E:29:4F:CD:CC:FB:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiAQCT8QgQsbhXJOqJ4pT83M-_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/RVzSiUnJGQMVZa33InErNEuOIs8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/CiAQCT8QgQsbhXJOqJ4pT83M-_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.31.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:9c:a6:7b:f3:b2:f0:cf:0f:bb:ad:13:d7:bd:0e:1e:88:a3:
         ec:20:bf:59:78:c2:97:3d:11:d3:8b:36:0a:b8:e4:b1:a4:65:
         6e:34:8b:10:90:96:af:f7:fa:d5:d6:f5:cd:71:23:c6:da:af:
         cb:2e:60:a2:1e:88:53:f4:e3:2e:13:90:5c:67:8f:80:65:5a:
         61:c1:01:35:46:14:e0:18:f3:43:cb:dd:73:e1:2c:5c:4a:28:
         38:e8:49:2c:10:d6:ab:41:28:7a:da:ce:4d:ee:02:3b:a8:38:
         e3:0a:e9:c0:f3:2a:ba:1e:a3:66:f0:be:83:40:70:9a:9d:c5:
         da:48:38:a0:b7:7c:6f:8d:d8:02:42:da:6e:ec:da:c2:fe:65:
         ff:8a:01:24:d9:8f:90:b7:4b:5d:f9:8b:5f:18:83:7e:7c:da:
         e2:40:15:e6:3e:fa:1c:45:ea:25:9d:69:b2:1a:ef:74:b5:f6:
         c8:85:a5:23:59:f3:56:bd:e4:36:14:c0:f1:cc:c8:4f:ad:61:
         bf:d0:3e:31:f8:f0:a3:88:cf:a5:c5:bc:f6:67:f5:47:96:86:
         54:42:0b:36:ea:e5:1c:4c:ab:86:41:aa:52:bb:50:6d:ed:7d:
         7e:50:d6:fd:82:b0:ed:5a:c2:59:bf:ad:96:61:6a:d7:27:5e:
         5b:e3:31:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:06 2024 by rpki-client on console-ams.rpki-client.org