Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/w_kogygG5jkn3aRqowlDB8rzvjM.roa
File:                     w_kogygG5jkn3aRqowlDB8rzvjM.roa (raw, json)
Hash identifier:          MqpOcTPknSNosJ4akAQhBaxq6cJ495qH5OPXnybJx2w=
Subject key identifier:   C3:F9:28:83:28:06:E6:39:27:DD:A4:6A:A3:09:43:07:CA:F3:BE:33
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       01857142F168727E5CC8192C3EE6772C2AE5
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/w_kogygG5jkn3aRqowlDB8rzvjM.roa
Signing time:             Mon 02 Jan 2023 06:54:50 +0000
ROA not before:           Mon 02 Jan 2023 06:54:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        45.66.148.0/22 maxlen: 24
                          45.13.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:42:f1:68:72:7e:5c:c8:19:2c:3e:e6:77:2c:2a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Jan  2 06:54:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3f928832806e63927dda46aa3094307caf3be33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9d:6e:bf:b5:76:2d:92:cc:b1:ae:65:69:b3:
                    71:b2:ed:63:bd:e5:79:f7:9e:2d:0d:e0:13:d3:d1:
                    18:c1:5c:dc:a2:36:73:e0:89:30:7f:1e:93:bb:46:
                    59:79:28:5d:22:83:4f:34:ed:0c:70:8b:60:84:ea:
                    8f:a6:02:cd:cb:1f:8e:8f:26:4e:20:b5:5a:be:5a:
                    1e:87:73:cf:13:bc:df:85:17:c3:3d:94:52:f5:d1:
                    5f:ef:b7:af:bc:eb:dd:1d:34:36:d7:d7:0d:cf:87:
                    cd:62:19:c3:b0:c8:7c:22:46:46:4d:35:00:5a:77:
                    ec:d4:d7:99:b6:9c:03:11:d2:f8:f6:b0:5c:bf:62:
                    d4:c4:d0:4b:f8:a5:96:e8:38:af:1b:7b:1f:f1:a2:
                    84:76:38:4a:9b:00:a0:7e:ec:c1:bb:0f:09:c3:be:
                    0b:df:72:1a:e6:8d:32:da:95:a0:5f:73:af:54:13:
                    d0:93:66:a4:91:6f:b0:50:c4:cf:78:15:1b:f0:80:
                    80:58:52:eb:be:ec:eb:48:1c:ee:7b:8b:ec:20:f2:
                    0e:fd:c7:dd:5b:e0:7a:54:99:9b:14:d9:f4:5b:15:
                    9e:b9:1f:d0:9c:9f:4b:7c:8f:8d:94:57:90:fd:28:
                    f5:e6:b2:93:9f:19:1a:67:12:b8:10:1b:7f:8f:97:
                    dd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F9:28:83:28:06:E6:39:27:DD:A4:6A:A3:09:43:07:CA:F3:BE:33
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/w_kogygG5jkn3aRqowlDB8rzvjM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.149.0/24
                  45.66.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:d3:be:1f:7d:b1:d3:1a:17:95:ed:f5:68:c2:a1:2d:54:d5:
         d5:60:d4:0a:54:bf:35:00:a7:c8:a8:87:b8:3d:ef:72:07:49:
         f3:e7:ba:b8:56:58:91:81:b2:e4:26:85:21:96:76:90:19:45:
         29:50:91:57:90:10:ef:af:22:5f:67:0c:ab:8f:9e:1e:57:df:
         fc:f7:05:06:bd:f3:1d:83:2f:ec:c3:2d:b1:53:31:88:0b:97:
         0f:a5:45:51:db:60:74:03:e7:dc:ba:ae:b5:89:c6:82:7b:b5:
         f8:1b:42:0c:00:f8:8f:10:d4:46:70:61:02:d7:bb:1d:0e:22:
         15:aa:e4:96:74:14:c5:c8:5f:56:cc:1d:d2:18:ef:5f:e6:6f:
         ba:1c:86:3e:a2:f6:67:8f:a0:b5:1f:e2:02:5d:ec:0c:6c:ca:
         42:fb:da:0e:61:ed:94:4e:d2:07:bb:0f:61:31:93:29:bf:49:
         78:dc:8b:d1:87:52:bd:49:b8:4a:f8:6d:23:06:fd:66:f6:c4:
         9c:77:ce:ba:df:03:83:1a:29:40:11:5c:db:b9:c8:66:22:7e:
         12:76:3f:93:c4:59:ac:95:f2:50:6d:7b:a0:2b:31:71:13:cc:
         dc:94:6c:78:94:5f:09:9e:0a:44:a3:55:9e:19:bb:3a:5a:94:
         81:72:f8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org