Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/GY2P1GeyTOLwaZqded0jJtCbvvE.roa
File:                     GY2P1GeyTOLwaZqded0jJtCbvvE.roa (raw, json)
Hash identifier:          FxX1n7DBwFJ1bGU36OK0X6miM85cUX2Ma9qjOuLKJGo=
Subject key identifier:   19:8D:8F:D4:67:B2:4C:E2:F0:69:9A:9D:79:DD:23:26:D0:9B:BE:F1
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       0184FF02BED7BE67819A75DFC6BDF78E0832
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/GY2P1GeyTOLwaZqded0jJtCbvvE.roa
Signing time:             Sun 11 Dec 2022 02:28:00 +0000
ROA not before:           Sun 11 Dec 2022 02:28:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211975
IP address blocks:        45.8.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ff:02:be:d7:be:67:81:9a:75:df:c6:bd:f7:8e:08:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Dec 11 02:28:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=198d8fd467b24ce2f0699a9d79dd2326d09bbef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:de:37:05:e0:50:e6:e9:57:17:43:a1:bc:19:
                    de:8b:cd:80:9e:81:56:26:13:a9:7e:15:77:c3:fb:
                    46:6a:2d:38:dd:00:08:ef:e3:be:16:cc:c9:96:9d:
                    be:a5:41:71:24:bb:a8:e3:ff:49:12:77:95:cb:f3:
                    d6:e3:4e:52:5b:db:08:33:3d:76:5f:4a:ee:03:59:
                    18:4a:37:b8:a6:a4:33:60:56:62:d2:b9:94:ea:a5:
                    66:72:64:4b:6c:e3:fa:fa:54:c0:f1:67:16:a5:c8:
                    53:6a:80:96:b4:bb:d8:98:19:1a:e9:62:7d:f3:be:
                    b7:c9:6b:89:ef:f5:c9:b4:a7:14:b1:d5:b5:2a:df:
                    99:f8:51:97:27:1c:ff:3e:f0:44:ac:74:de:e4:5c:
                    c8:ae:51:b9:5d:38:61:eb:14:14:01:20:b6:7c:ab:
                    bc:d8:b2:28:0d:aa:c6:6f:a6:00:86:f1:d3:bd:f5:
                    31:f7:a8:26:8a:ef:73:4d:4e:4a:6c:77:37:87:fa:
                    9f:73:a9:aa:e0:44:a1:28:c2:29:38:71:de:cc:6a:
                    24:90:7d:c6:11:66:6e:23:43:8d:c1:47:b9:3a:d6:
                    3b:32:a1:f1:e3:53:f6:3e:32:8e:bf:5f:a8:76:c9:
                    cc:b1:41:b2:94:8a:91:bf:4c:ad:01:34:12:27:cf:
                    8f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8D:8F:D4:67:B2:4C:E2:F0:69:9A:9D:79:DD:23:26:D0:9B:BE:F1
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/GY2P1GeyTOLwaZqded0jJtCbvvE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ef:e0:eb:46:3e:11:de:74:d9:a6:48:ab:95:e1:b3:26:19:88:
         18:81:bc:8a:04:5b:d0:0a:ab:47:ee:92:4b:6a:dd:3d:fa:87:
         37:7b:85:36:c1:0c:ad:f2:60:b9:ae:d0:ea:07:3f:85:d4:e4:
         f6:52:0f:e1:99:bf:28:e4:17:13:30:a0:cc:25:88:85:cc:41:
         03:2d:65:7d:f2:de:e5:a4:e2:c1:23:d0:03:2c:65:e4:3e:e9:
         fc:c3:8e:97:6d:c2:aa:40:aa:77:c6:cb:bb:aa:98:fd:3e:c8:
         1f:83:13:33:80:24:11:31:e3:14:85:b9:46:2c:4c:59:ba:1a:
         31:7f:8d:b0:b1:85:46:3b:f5:71:0a:b2:9c:4a:1c:ab:e2:d9:
         19:88:5e:59:5c:ba:33:7b:eb:af:18:45:21:09:c9:c8:17:5b:
         a4:17:ee:cb:0f:80:c8:06:e8:86:8c:0a:c2:94:ea:73:29:a0:
         c7:be:9b:c7:32:38:b9:da:6d:20:0b:8f:ef:22:f8:f1:e9:24:
         8f:d1:98:64:89:58:59:7e:62:ed:68:67:e7:f9:ef:b9:78:54:
         85:57:44:e9:71:b8:85:b5:8d:55:ab:a0:3c:07:7a:40:b4:9a:
         97:07:09:94:27:49:03:67:54:fb:0b:4d:6e:94:be:43:c1:c3:
         aa:7e:bf:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:20 2024 by rpki-client on console-ams.rpki-client.org