Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/wvdajyk7hUiaZ1YylJwzNl9Ubgo.roa
File:                     wvdajyk7hUiaZ1YylJwzNl9Ubgo.roa (raw, json)
Hash identifier:          L2uOrrR60eUJVGOmzo5FZn7rcVdntUxrYx9951hedeQ=
Subject key identifier:   C2:F7:5A:8F:29:3B:85:48:9A:67:56:32:94:9C:33:36:5F:54:6E:0A
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       0931DABF
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/wvdajyk7hUiaZ1YylJwzNl9Ubgo.roa
Signing time:             Mon 31 Jan 2022 10:44:43 +0000
ROA not before:           Mon 31 Jan 2022 10:44:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        45.13.150.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154262207 (0x931dabf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Jan 31 10:44:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c2f75a8f293b85489a675632949c33365f546e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:f1:d1:12:74:ff:d1:5a:48:1f:e9:a0:c7:
                    be:87:8e:08:d8:52:c3:53:af:1e:2f:5b:3d:20:06:
                    d4:76:76:31:fb:7e:a9:c8:14:4a:f2:60:c9:ec:46:
                    8b:39:fe:7d:f3:9d:47:8a:60:35:26:3d:4b:92:73:
                    65:c4:0f:c2:da:17:fd:28:d0:9a:d9:a1:7a:e6:15:
                    a9:92:24:d4:be:93:f7:d9:14:1f:5e:47:71:d0:cc:
                    b9:ae:0a:a1:f8:7a:04:e7:36:a5:be:e0:58:19:bf:
                    a4:45:1f:e4:ed:0c:19:5b:16:4f:b6:18:c0:85:32:
                    dd:8b:0a:0b:ec:f6:03:ea:af:73:6e:1d:f4:79:8e:
                    1a:a9:57:35:0f:6c:bb:eb:66:b8:bc:0a:29:55:2b:
                    1c:62:82:64:02:6f:3f:cd:02:93:2d:1e:a1:ed:a2:
                    4c:84:7e:f7:71:b0:cd:8a:09:d0:2b:58:87:a7:f1:
                    88:02:6c:01:bd:c4:4d:b7:ab:c3:31:14:e6:f8:93:
                    fd:f9:38:25:6e:fa:ff:3c:47:0b:64:ec:30:42:42:
                    c3:bb:78:26:e1:f4:7a:89:44:85:fe:4e:07:29:27:
                    92:7f:7f:35:0b:9b:d5:a5:1f:5e:06:a7:fb:07:08:
                    2d:7f:24:87:48:3b:57:4e:ed:71:9b:16:01:0b:df:
                    00:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F7:5A:8F:29:3B:85:48:9A:67:56:32:94:9C:33:36:5F:54:6E:0A
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/wvdajyk7hUiaZ1YylJwzNl9Ubgo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d7:0b:c8:6e:63:7a:d8:c7:c8:4a:5b:95:c2:45:22:bb:24:c7:
         94:94:f4:2b:0a:9b:a4:99:00:e8:9a:bd:a3:7e:9b:27:18:fe:
         c4:1a:f2:68:f5:0a:8b:3f:01:64:65:ac:74:19:52:d4:a4:1d:
         08:46:74:eb:f6:0b:0a:2a:2b:2e:61:bd:b6:d2:d0:e8:0c:fc:
         26:e3:c6:ca:c8:2a:be:b3:f0:c2:dd:57:64:b8:31:ec:5f:a8:
         a2:76:3d:5e:3f:c1:a8:63:66:1f:64:87:ec:a5:ee:ed:62:16:
         8b:ad:8c:f2:06:1c:0b:be:b2:65:96:c7:45:7a:ff:ca:7f:52:
         a6:34:26:33:42:dd:c5:de:d3:35:cb:09:c4:98:e1:91:fa:c5:
         1a:a3:03:dc:1c:54:0a:69:a7:68:55:fb:0c:1a:d5:63:87:ad:
         97:f8:ec:ab:30:8f:92:27:e3:51:e6:e1:6e:bf:5f:7f:39:ee:
         a9:70:87:98:a5:c1:81:e3:d3:e1:8d:56:82:d1:c0:70:18:11:
         51:d9:06:99:75:b7:71:a0:72:c7:69:c7:af:0c:b1:55:4f:19:
         8d:45:ad:f6:30:e3:32:fb:1c:70:a4:94:29:41:47:58:ac:03:
         d8:a4:a3:7a:0b:61:c4:01:cd:4c:58:5f:fe:8d:b6:82:a2:89:
         a5:df:ae:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org