Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/1_Y5VUlF-Di_aWRasOI9aDeuWT4.roa
File:                     1_Y5VUlF-Di_aWRasOI9aDeuWT4.roa (raw, json)
Hash identifier:          0anpD3s44pSUM62LDjMP2m1BRmvxkKS03Jcbk6ULaao=
Subject key identifier:   D7:F6:39:55:49:45:F8:38:BF:69:64:5A:B0:E2:3D:68:37:AE:59:3E
Certificate issuer:       /CN=b06c430b61be7a380191cd5dfd105c3af21482fc
Certificate serial:       13B918
Authority key identifier: B0:6C:43:0B:61:BE:7A:38:01:91:CD:5D:FD:10:5C:3A:F2:14:82:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sGxDC2G-ejgBkc1d_RBcOvIUgvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/1_Y5VUlF-Di_aWRasOI9aDeuWT4.roa
Signing time:             Sat 01 Jan 2022 01:56:00 +0000
ROA not before:           Sat 01 Jan 2022 01:56:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25369
IP address blocks:        45.156.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1292568 (0x13b918)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b06c430b61be7a380191cd5dfd105c3af21482fc
        Validity
            Not Before: Jan  1 01:56:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d7f639554945f838bf69645ab0e23d6837ae593e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:08:33:76:4e:95:8e:00:05:b9:48:f6:c2:
                    42:36:fc:e3:a1:68:24:52:a9:28:02:67:12:3c:b2:
                    ea:04:d1:72:f2:f9:ba:73:c4:ff:08:45:33:6a:0b:
                    8a:a9:44:cf:99:62:d3:19:2c:96:7f:22:28:47:8f:
                    1b:96:ca:75:b1:7e:fc:4d:24:46:98:c3:79:0b:de:
                    92:9b:9e:98:05:31:9c:ba:04:ad:a4:23:ce:a6:ed:
                    3f:32:50:4f:e1:70:40:2f:0b:88:70:b0:c2:99:a7:
                    d9:33:71:d2:8c:96:11:1c:85:53:a2:44:2d:31:9c:
                    81:03:4f:29:91:29:e6:f4:f1:af:08:a1:71:00:87:
                    8b:1b:b7:31:c9:7e:db:2a:7a:6b:20:88:0c:6b:c0:
                    48:74:91:ba:6b:4b:1c:f7:07:11:47:d7:67:1f:16:
                    2f:ba:c6:9d:aa:49:fb:f7:2d:08:6a:eb:e6:a5:88:
                    39:fb:47:d1:0a:af:66:53:a3:ed:db:e7:de:cf:01:
                    60:84:04:02:f5:fa:b5:5d:7c:ce:18:e3:39:01:86:
                    53:83:32:ec:8c:d9:e3:92:55:c4:b8:be:aa:07:74:
                    17:2f:cf:e9:4e:a3:1f:a2:f6:fa:c1:43:83:ea:90:
                    17:f1:27:97:31:ae:96:ac:cc:8b:4e:34:d7:9a:eb:
                    9e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F6:39:55:49:45:F8:38:BF:69:64:5A:B0:E2:3D:68:37:AE:59:3E
            X509v3 Authority Key Identifier:
                keyid:B0:6C:43:0B:61:BE:7A:38:01:91:CD:5D:FD:10:5C:3A:F2:14:82:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGxDC2G-ejgBkc1d_RBcOvIUgvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/1_Y5VUlF-Di_aWRasOI9aDeuWT4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/sGxDC2G-ejgBkc1d_RBcOvIUgvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.156.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:87:da:9c:e0:d4:45:23:25:3c:8a:cc:fc:d3:7c:19:87:cb:
         a5:24:fe:fb:5a:2a:0d:bf:b8:91:b4:cc:7b:03:3c:c5:63:c5:
         38:b8:37:ed:d6:ab:8b:20:74:d0:fd:e1:6f:88:72:b7:ef:e6:
         71:f4:22:c7:2d:55:21:a7:6a:0b:0d:6c:a9:38:cc:eb:94:df:
         61:dc:44:c1:78:14:59:d9:86:83:45:3a:d1:23:c4:82:2e:ca:
         d0:e5:98:41:78:97:03:d9:32:2d:8b:1c:9a:18:51:3b:01:94:
         4d:68:9a:37:a5:84:46:a0:81:86:8e:a4:60:e8:81:bb:c7:92:
         fc:87:c8:d9:10:a4:05:4e:39:0f:7a:54:3d:8e:b0:50:89:c6:
         fa:fb:b8:8b:f4:5e:b6:68:d5:49:25:80:95:fb:fd:9e:f1:83:
         f8:16:54:98:80:55:b8:27:86:da:3a:1d:03:da:d9:eb:a4:e6:
         4b:a6:8b:09:d0:3d:47:c9:61:fb:62:51:d2:86:89:05:5a:e5:
         e5:64:68:fe:d6:b9:9b:db:52:64:f7:24:c6:23:15:07:0e:11:
         4d:e8:6f:6b:0a:14:de:68:b7:cd:20:2a:19:a5:91:60:7d:d1:
         23:b4:81:cf:6b:9b:7b:e1:b0:9d:39:13:7a:52:bb:61:ef:9c:
         33:1d:6a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:52 2023 by rpki-client on console.sobornost.net