Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Y68du8XOX-URtiPYBunaR4yg5S8.roa
File:                     Y68du8XOX-URtiPYBunaR4yg5S8.roa (raw, json)
Hash identifier:          ow0lH0KwjI4MtWB9DWHVO5VvZ0Gp/UJ/MqP2auZcmPs=
Subject key identifier:   63:AF:1D:BB:C5:CE:5F:E5:11:B6:23:D8:06:E9:DA:47:8C:A0:E5:2F
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       096E38E9
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Y68du8XOX-URtiPYBunaR4yg5S8.roa
Signing time:             Fri 25 Feb 2022 06:40:45 +0000
ROA not before:           Fri 25 Feb 2022 06:40:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35913
IP address blocks:        45.13.148.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158218473 (0x96e38e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Feb 25 06:40:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=63af1dbbc5ce5fe511b623d806e9da478ca0e52f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:22:4a:1c:9b:3a:e7:ad:77:b5:9f:5d:42:
                    78:f7:41:11:2f:42:2e:3c:f6:4f:a5:8b:78:7b:bd:
                    4a:67:57:fa:c5:5f:76:8d:ed:90:58:1e:01:8e:cc:
                    fd:e3:8c:ea:c1:5b:56:22:62:ac:41:26:42:62:9e:
                    9a:46:39:20:2e:05:a5:04:28:4e:4a:3f:ed:30:ec:
                    29:4f:35:bb:2a:77:92:e4:67:c2:eb:99:d3:72:ad:
                    8b:13:dc:06:92:f5:d6:58:e2:f5:6a:29:af:1a:94:
                    8c:7e:d4:84:29:2e:10:da:bb:f0:43:0f:6e:f4:69:
                    47:3f:81:72:8c:44:71:b6:d6:2c:d5:75:29:b0:18:
                    f4:8b:79:1d:27:21:41:42:27:e5:42:ed:55:16:14:
                    e5:3f:c0:de:0a:d0:ba:7b:25:9c:7e:de:67:d8:86:
                    7a:b3:09:b9:65:d8:99:33:47:08:7f:f7:3f:0e:bf:
                    eb:37:47:ac:57:72:6c:1c:69:e9:6e:16:24:d3:c3:
                    6c:89:91:b0:0b:af:96:9d:88:c0:1e:dc:7c:85:51:
                    4c:1e:6d:c6:02:f2:a0:23:43:7e:de:51:97:76:31:
                    2b:2a:c5:49:73:c3:99:97:a7:56:cc:51:0b:52:92:
                    41:54:49:40:88:bc:3f:f0:46:3d:ce:d6:a0:bf:ac:
                    69:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AF:1D:BB:C5:CE:5F:E5:11:B6:23:D8:06:E9:DA:47:8C:A0:E5:2F
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Y68du8XOX-URtiPYBunaR4yg5S8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e5:88:33:a6:ce:8c:3b:34:b6:9e:01:49:8e:3f:70:14:7f:89:
         11:a4:6e:f1:2d:13:cb:7a:06:de:e8:3f:9c:bb:5f:b8:d0:ea:
         df:b8:18:1a:46:87:3b:83:cf:ae:ee:1e:eb:15:ba:de:f9:27:
         7a:05:c4:b8:ed:bd:30:d7:48:ca:09:9c:67:ea:b8:0e:60:e0:
         bb:79:ce:0c:e6:15:a1:fe:c4:9f:37:76:be:8e:b3:6e:e9:91:
         99:40:ca:75:03:6d:8c:4d:c0:88:d1:0c:44:65:f7:b3:4e:e0:
         bd:c8:f2:5d:36:06:d9:54:17:c1:eb:1d:ae:21:c1:9f:3c:e4:
         f4:8f:d4:64:d4:a1:1b:4d:fc:8f:f9:53:95:2f:5c:d6:dc:eb:
         d0:65:1a:90:65:1b:63:1e:f3:9e:b9:23:b8:59:3b:ad:61:4a:
         72:ac:59:8d:54:de:d9:9b:d7:44:39:c3:4a:2d:f8:06:45:6b:
         b4:99:a7:7f:1a:e3:01:be:3e:c1:81:b9:55:4c:04:5a:ee:0a:
         c5:b2:3c:bd:8d:23:d3:ee:af:0c:c1:e9:b8:e0:89:7e:38:5f:
         b0:a9:a9:32:4d:30:8d:fb:e3:15:0b:d2:df:db:0f:1f:26:d5:
         7e:67:2f:d4:5d:0b:70:dc:75:09:8f:9f:f5:ee:9c:25:a3:94:
         50:8e:b4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org