Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/lPADGxC87G86wWcyRrEYCCfgVzI.roa
File:                     lPADGxC87G86wWcyRrEYCCfgVzI.roa (raw, json)
Hash identifier:          FF3SrreLw1y4jX0AJ8+pBves9d4tsrGlldDWswMHTp0=
Subject key identifier:   94:F0:03:1B:10:BC:EC:6F:3A:C1:67:32:46:B1:18:08:27:E0:57:32
Certificate issuer:       /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial:       01938C4543F0039E47808EA45C32833DDB1A
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/lPADGxC87G86wWcyRrEYCCfgVzI.roa
Signing time:             Tue 03 Dec 2024 11:26:09 +0000
ROA not before:           Tue 03 Dec 2024 11:26:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44213
IP address blocks:        45.149.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8c:45:43:f0:03:9e:47:80:8e:a4:5c:32:83:3d:db:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
        Validity
            Not Before: Dec  3 11:26:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=94f0031b10bcec6f3ac1673246b1180827e05732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c2:24:4a:d0:2d:b9:a5:c6:81:58:ff:11:27:
                    b8:f9:b8:e1:ee:cd:b8:02:d2:05:e5:8c:37:59:ab:
                    14:6f:85:03:2e:3b:43:fd:0a:2e:6e:3b:94:fc:c9:
                    a3:ec:96:52:57:56:13:40:e8:e2:a4:42:0d:4b:0d:
                    6e:c8:1b:85:c5:23:87:7a:ba:41:99:cb:be:31:96:
                    da:0b:bb:11:f7:1f:08:69:f3:b7:39:5f:13:df:e4:
                    e5:09:a7:33:37:9c:0e:46:19:c5:d0:05:b6:fd:b2:
                    8a:c5:01:10:9d:da:34:14:79:4c:30:b1:76:6b:58:
                    e2:19:70:2f:07:24:d2:40:a6:b6:58:e4:a9:39:3e:
                    6a:62:5f:6f:20:ff:08:d9:fb:f2:8e:b3:75:53:3c:
                    b5:95:c1:32:9c:ba:e2:8a:16:1b:e6:df:37:8e:7c:
                    c4:b3:4a:35:e7:6c:08:36:1f:d0:dd:d7:1e:c7:c5:
                    ae:8f:18:44:cf:f4:a1:54:92:fc:e4:aa:af:63:72:
                    1d:5b:2a:67:70:08:70:87:ed:a5:15:c9:72:a6:a1:
                    d1:69:91:df:b8:c7:3f:51:d3:02:0b:89:59:aa:cb:
                    7c:4c:47:10:d8:b7:a8:e4:6c:b1:ba:8f:43:f2:89:
                    21:a5:be:98:17:be:b4:ae:e7:73:6e:9a:f2:13:9b:
                    48:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F0:03:1B:10:BC:EC:6F:3A:C1:67:32:46:B1:18:08:27:E0:57:32
            X509v3 Authority Key Identifier:
                keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/lPADGxC87G86wWcyRrEYCCfgVzI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:04:84:bc:d7:13:00:62:89:07:a1:0e:57:39:55:93:98:d1:
         ed:50:d7:2b:08:3a:01:ee:ca:1f:5c:05:39:44:77:48:56:f0:
         96:1c:e9:94:ed:ca:70:f6:72:8d:5f:d4:02:de:d6:5d:49:68:
         a0:3c:2a:a9:ea:de:00:46:8d:e5:0b:88:ed:16:1e:6f:e7:3d:
         db:a1:43:9d:71:a3:35:1e:5e:7e:c6:a8:7f:b1:d7:3b:16:80:
         b5:38:fa:fb:48:03:79:1b:b8:af:f1:6e:f5:f7:40:60:ab:db:
         ca:3c:22:1e:53:b2:03:b0:b8:69:90:a2:b0:b4:9d:69:79:b0:
         fd:a3:d4:96:5a:86:f7:51:1f:13:06:d4:f0:a9:f0:da:20:6b:
         bb:98:49:f8:9c:01:b8:b1:1d:a7:57:59:6e:a3:6b:42:48:28:
         eb:75:64:e8:d7:04:a1:e2:1b:59:64:70:2f:a5:e0:5b:eb:47:
         73:22:18:b9:a7:d8:03:20:ae:e0:ca:9b:2e:ba:8e:57:6f:fb:
         0c:8e:4a:96:ba:10:34:97:d5:19:0e:9d:02:99:84:2b:8c:37:
         f7:b0:e7:a4:62:4a:9c:09:15:2e:22:5d:40:80:8e:c3:30:5c:
         03:27:b2:1f:5c:ff:f9:4b:73:43:1e:99:ac:67:a1:61:68:69:
         8c:ee:13:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:42 2024 by rpki-client on console.sobornost.net