Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/MLo3sbd53IxKVv_yNUwBC2AT-w0.roa
File:                     MLo3sbd53IxKVv_yNUwBC2AT-w0.roa (raw, json)
Hash identifier:          ER44L/4gszHyZyE67QH2BYMEyZ6tO0xO3cyM88AH/4M=
Subject key identifier:   30:BA:37:B1:B7:79:DC:8C:4A:56:FF:F2:35:4C:01:0B:60:13:FB:0D
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       0183C960EE4C41ED91CB04DCD88840C8CBE5
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/MLo3sbd53IxKVv_yNUwBC2AT-w0.roa
Signing time:             Tue 11 Oct 2022 23:28:36 +0000
ROA not before:           Tue 11 Oct 2022 23:28:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35913
IP address blocks:        45.13.148.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:c9:60:ee:4c:41:ed:91:cb:04:dc:d8:88:40:c8:cb:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Oct 11 23:28:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=30ba37b1b779dc8c4a56fff2354c010b6013fb0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f2:3f:a3:6e:61:b7:b3:6e:57:bc:fa:0b:01:
                    f3:f4:cc:e9:48:9f:1f:df:36:04:b8:0e:1b:5d:e9:
                    0c:7b:d9:be:a8:37:05:77:ea:64:d6:f5:1b:ae:9c:
                    61:d8:7e:b3:cf:46:24:98:90:31:12:35:4c:e5:32:
                    48:03:e4:52:e3:bc:c4:00:a3:df:75:b4:bf:ce:b2:
                    a8:e8:d5:75:9d:96:17:6e:5b:77:ca:16:a9:99:8d:
                    8b:cd:b3:02:96:8b:04:fa:d2:e8:e3:5a:bd:e1:c0:
                    b5:19:71:cc:6c:5e:e7:19:c5:c9:3b:c9:0a:b5:29:
                    06:d4:46:60:a1:db:f9:0a:94:ee:86:2b:73:9a:eb:
                    9a:da:b6:b9:81:b0:aa:38:ac:36:4c:d2:48:eb:57:
                    bf:85:45:cc:57:77:c9:2f:69:31:a1:7b:d9:46:06:
                    45:4f:ff:db:ea:45:d7:1f:a4:11:44:29:c6:08:e7:
                    95:fa:25:12:0d:90:82:3e:9d:89:85:5e:8a:9f:63:
                    2d:f0:bd:3e:9d:35:aa:45:88:d2:bd:a1:17:89:85:
                    8f:0a:fe:77:54:24:11:97:72:c6:8e:ca:0a:34:7b:
                    2e:b2:16:3f:9a:c4:e3:69:72:e4:0b:15:21:af:24:
                    b1:59:37:47:c0:4a:e4:2c:6f:13:1d:0f:9a:77:39:
                    0b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BA:37:B1:B7:79:DC:8C:4A:56:FF:F2:35:4C:01:0B:60:13:FB:0D
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/MLo3sbd53IxKVv_yNUwBC2AT-w0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:8d:4e:14:71:7e:21:40:f2:de:92:31:19:12:71:2e:1f:e5:
         8f:5c:77:0d:24:5c:aa:78:e1:29:16:ac:83:0e:3e:e8:a6:26:
         ff:9e:6e:ca:7b:54:8c:84:5f:cf:29:6b:33:d0:2f:a1:9b:bf:
         41:a6:28:4f:0a:e2:56:a3:7a:1f:c6:5c:e7:66:1e:47:48:91:
         29:bc:00:a3:bf:83:4f:c9:b2:aa:9d:53:1e:0d:90:21:8d:5b:
         27:13:48:a2:b6:28:8a:b8:a9:38:a8:49:e8:52:7c:33:bc:3e:
         a4:10:93:aa:e2:5f:d4:7f:3c:85:60:b3:ac:70:9c:81:0d:ae:
         57:1c:27:af:90:f8:61:b4:7e:04:2b:ad:55:12:e4:24:c4:05:
         97:4a:76:de:c8:a0:d0:42:55:fb:43:f1:c0:85:ff:af:5e:0e:
         60:93:2a:37:93:e3:a7:80:40:82:80:c4:c2:92:63:b8:8d:ee:
         aa:f8:a3:cd:db:30:40:0d:84:1e:13:a5:b9:cc:ef:51:89:ce:
         64:e2:b4:68:65:90:ab:91:84:fe:02:54:d5:87:4c:f8:cc:72:
         14:9d:0a:01:ae:21:46:e7:9d:34:53:0a:e0:f7:65:d0:e3:f8:
         35:86:08:7f:ab:bc:91:d5:e6:27:22:d5:94:c5:cf:c4:20:da:
         87:ba:b6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org