Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/fJ0DUH-s0ui6eGh-pyCAT6xQTZU.roa
File:                     fJ0DUH-s0ui6eGh-pyCAT6xQTZU.roa (raw, json)
Hash identifier:          qMQOooKuzAjDXrDeOIEGhoG+434/uX0JuxsBUCD6sPQ=
Subject key identifier:   7C:9D:03:50:7F:AC:D2:E8:BA:78:68:7E:A7:20:80:4F:AC:50:4D:95
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       08D586FF
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/fJ0DUH-s0ui6eGh-pyCAT6xQTZU.roa
Signing time:             Sat 01 Jan 2022 07:55:52 +0000
ROA not before:           Sat 01 Jan 2022 07:55:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29119
IP address blocks:        45.66.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148211455 (0x8d586ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Jan  1 07:55:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7c9d03507facd2e8ba78687ea720804fac504d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:59:30:db:81:46:dd:3c:7c:8f:c7:1f:ae:a0:
                    e7:10:73:3e:5e:2c:76:99:9e:6d:c9:db:b8:96:eb:
                    a4:7a:14:f5:8b:3f:17:e9:a9:30:2a:45:69:f6:55:
                    7a:42:4f:00:26:ee:c2:09:b4:5c:cc:b3:15:6f:58:
                    c9:02:d0:6c:31:f6:f1:fa:ac:96:9e:fc:26:ce:05:
                    97:52:e4:77:8a:27:b5:db:53:dd:a6:bf:73:01:9c:
                    f0:96:6c:50:ac:61:ea:d7:8a:21:e7:0f:d6:66:03:
                    d4:79:a6:c7:88:ba:d4:8b:ae:95:8a:7e:9c:d3:1b:
                    3f:62:93:b9:69:90:11:b3:6e:c2:25:c2:ec:34:56:
                    15:ef:6b:cb:ee:98:83:49:0f:4c:38:fd:1d:da:2a:
                    12:09:c4:24:0d:69:55:f0:9b:da:00:28:a5:94:d4:
                    c7:30:7d:34:15:ef:62:34:a1:25:5b:05:96:8a:c4:
                    80:44:17:e6:93:93:25:3d:bb:93:79:b8:ca:a3:e7:
                    43:50:6f:ae:76:6c:93:76:af:5d:78:d2:78:30:83:
                    39:fe:29:05:f3:d7:36:dc:6a:3b:39:15:0c:83:49:
                    36:94:24:ab:32:c2:90:2a:28:06:08:52:f0:e3:f8:
                    ec:43:dc:e6:43:a3:bf:bd:71:cb:08:1c:47:fe:52:
                    42:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9D:03:50:7F:AC:D2:E8:BA:78:68:7E:A7:20:80:4F:AC:50:4D:95
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/fJ0DUH-s0ui6eGh-pyCAT6xQTZU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:a1:65:c9:3e:94:47:71:4f:bd:3f:4d:ff:06:83:89:6e:bb:
         82:ee:e5:cd:14:78:2c:eb:af:f6:6e:45:9c:70:8b:96:55:0c:
         15:cb:f5:50:3e:a0:c0:cf:f8:93:5b:86:75:d7:bc:17:fc:12:
         f8:1b:c4:60:f1:ec:99:77:7c:84:1b:f4:8d:22:ad:af:1f:78:
         b3:b6:9d:f9:e6:8b:58:99:73:e0:43:94:7d:b5:1b:55:34:2a:
         88:53:19:ab:3a:04:23:93:c1:1d:49:8d:a1:9b:0c:69:45:52:
         ca:02:d4:27:f7:1a:ea:87:f8:0c:b0:cf:17:15:54:9d:fc:48:
         c6:a5:d3:0d:74:ad:44:5d:38:cf:25:d7:03:44:9c:3a:d7:fb:
         53:92:4d:bc:d7:33:00:5c:a9:c7:30:7e:9e:0b:63:3c:0a:3c:
         76:0f:d0:1f:61:08:b0:b5:be:b2:0a:a2:02:e6:d8:d1:11:a7:
         a8:15:2e:0a:70:a5:c0:7e:53:d6:de:4f:5f:97:2d:50:eb:9d:
         91:b7:5a:d7:53:a3:fe:0e:11:96:a3:53:b0:3b:96:62:5b:9b:
         7f:ff:e6:f5:c8:8f:bf:1f:6d:6b:27:a9:fe:b7:96:0c:be:5d:
         72:4c:3f:93:26:03:ca:3d:4e:dc:96:d3:6b:98:44:c3:35:bd:
         58:38:28:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org