Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/EjV2AE4N3wLza4wpKGbzTg9U1Yo.roa
File:                     EjV2AE4N3wLza4wpKGbzTg9U1Yo.roa (raw, json)
Hash identifier:          eqqBv19fNwX+TtDmm+ZL+CtN1jMpqyL7eEO0cDb/Vjg=
Subject key identifier:   12:35:76:00:4E:0D:DF:02:F3:6B:8C:29:28:66:F3:4E:0F:54:D5:8A
Certificate issuer:       /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial:       019261F6F9FFDD5939A96FA30FCB8FA46A08
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/EjV2AE4N3wLza4wpKGbzTg9U1Yo.roa
Signing time:             Sun 06 Oct 2024 13:13:48 +0000
ROA not before:           Sun 06 Oct 2024 13:13:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     19905
IP address blocks:        45.132.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:61:f6:f9:ff:dd:59:39:a9:6f:a3:0f:cb:8f:a4:6a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
        Validity
            Not Before: Oct  6 13:13:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=123576004e0ddf02f36b8c292866f34e0f54d58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:22:f6:b7:eb:4e:7a:72:01:5c:99:72:c6:ae:
                    9a:72:c7:e3:5b:15:88:ba:20:a5:93:58:ac:14:51:
                    8b:90:17:9b:6e:97:69:9a:82:05:96:79:7b:53:78:
                    b9:6d:62:cc:31:1a:bf:95:dd:b1:17:96:36:68:35:
                    57:cd:5c:26:a5:de:a8:a8:9a:9e:31:cf:8b:a0:8c:
                    ae:8f:b2:f3:91:98:c8:22:a8:e3:ff:f9:b5:2d:ee:
                    44:30:28:a0:c6:1b:78:5d:c0:90:49:1c:cb:e3:b8:
                    f7:74:dc:f8:5a:b8:93:2d:af:dd:28:6d:76:bc:de:
                    e4:bd:83:1f:86:19:8c:af:9d:7e:1f:e0:31:39:22:
                    22:8b:7f:09:61:06:d7:a6:6d:96:9f:05:a3:49:d0:
                    bc:af:38:86:d4:38:12:cd:80:81:34:79:5f:56:62:
                    71:d9:99:1b:54:84:1b:c7:4c:27:7b:e8:c4:f8:7f:
                    57:cd:be:55:22:9e:cf:62:f6:fc:19:d4:47:35:4c:
                    4d:1c:2b:f0:67:77:56:fc:cf:1e:14:85:da:12:9f:
                    be:94:f3:33:41:11:cf:69:79:99:61:ef:76:34:8a:
                    d6:51:02:54:80:6f:07:98:5a:0c:4a:03:fd:b9:2e:
                    be:af:a4:27:00:62:5b:d8:80:f4:98:34:9b:58:a2:
                    17:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:35:76:00:4E:0D:DF:02:F3:6B:8C:29:28:66:F3:4E:0F:54:D5:8A
            X509v3 Authority Key Identifier:
                keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/EjV2AE4N3wLza4wpKGbzTg9U1Yo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:f8:d9:d2:a6:b0:4a:f5:5b:1e:3e:a3:50:6c:8e:84:b0:2d:
         87:b8:bc:21:09:23:7a:7c:bf:ca:3c:48:a9:97:1b:22:8d:23:
         b4:73:31:65:70:4a:0c:ae:d5:d9:82:a8:2c:33:fc:f1:43:8b:
         e8:47:77:79:7d:19:40:61:5d:5e:53:4d:af:27:37:5e:07:63:
         0a:a4:aa:96:6b:31:b3:84:94:75:6a:cb:32:3e:e5:d8:fd:54:
         9d:f7:7f:33:41:2d:08:62:d8:6b:41:08:06:db:7e:ba:46:da:
         12:b1:fc:74:29:1f:ca:7d:b9:82:48:46:ad:3f:30:23:f5:10:
         f3:28:2d:b4:77:d8:e6:74:02:da:07:96:86:2e:f5:f0:b7:26:
         2d:55:43:b1:b2:35:54:94:ca:a7:15:d7:6f:45:e1:de:43:63:
         91:d5:27:ba:50:f7:38:f9:a1:f9:69:a1:be:aa:11:ae:e2:b0:
         70:d6:e6:41:7a:2c:d4:ab:22:42:95:96:37:57:88:fe:94:46:
         93:1f:06:ef:51:2e:db:ff:60:ef:bb:87:36:23:42:76:24:ba:
         d9:fe:c8:4e:da:75:2b:2e:f4:24:aa:5c:e3:b3:e0:1c:b5:89:
         17:6b:cb:24:8b:86:a4:a2:44:16:6d:4a:af:78:75:0b:52:f7:
         da:0a:e1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:42 2024 by rpki-client on console.sobornost.net