Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/Lmvz7UtyX1lXwrZFQxyw10f965g.roa
File:                     Lmvz7UtyX1lXwrZFQxyw10f965g.roa (raw, json)
Hash identifier:          vCjTy8e/EOIM+a9VJ+a62nLt4xZsnuTV5eHITh46LzI=
Subject key identifier:   2E:6B:F3:ED:4B:72:5F:59:57:C2:B6:45:43:1C:B0:D7:47:FD:EB:98
Certificate issuer:       /CN=b960b14746c5875244ae3b694162ec6d8c63255e
Certificate serial:       019426D91A7C83634740F19E8A9FAD99A16C
Authority key identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/Lmvz7UtyX1lXwrZFQxyw10f965g.roa
Signing time:             Thu 02 Jan 2025 11:49:09 +0000
ROA not before:           Thu 02 Jan 2025 11:49:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     202120
IP address blocks:        45.135.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:1a:7c:83:63:47:40:f1:9e:8a:9f:ad:99:a1:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b960b14746c5875244ae3b694162ec6d8c63255e
        Validity
            Not Before: Jan  2 11:49:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2e6bf3ed4b725f5957c2b645431cb0d747fdeb98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c5:7b:71:d0:7d:63:73:41:56:d8:f9:01:24:
                    58:52:55:fa:a5:d3:ee:5a:75:96:22:56:c8:92:fd:
                    9d:44:a7:6d:25:88:1b:5a:25:31:c5:00:be:3d:0b:
                    f6:33:26:49:30:71:f9:b7:9a:0c:c8:f4:bc:d3:65:
                    85:30:d0:94:d1:3a:b4:14:bc:2c:5b:86:c4:4a:75:
                    e2:d7:04:46:87:99:2a:53:37:8c:be:af:9c:d8:dc:
                    0b:8c:59:d7:8e:a7:49:b7:9f:b8:52:e3:0f:6a:31:
                    11:f5:58:f0:3d:dc:f8:98:cf:93:87:a5:b9:c5:fb:
                    53:5c:b7:46:96:84:2a:e9:0e:4d:27:e1:a6:55:95:
                    11:c3:55:de:ca:19:57:ae:35:75:16:7e:07:6f:c5:
                    b4:ee:7b:62:e4:2e:55:d1:15:3c:e9:bc:9e:be:64:
                    9d:36:8b:69:62:f4:a5:c7:2c:f8:25:81:3d:29:cf:
                    48:b6:6b:12:07:11:4b:18:40:e0:35:fd:79:0a:b7:
                    99:a3:14:73:ec:34:2b:4f:c0:0c:c6:69:82:23:e7:
                    15:3c:62:80:80:1b:a9:06:c0:94:57:21:14:fd:ef:
                    41:12:90:42:93:4c:de:ac:10:39:9e:df:8f:9e:39:
                    35:84:ea:7e:2b:d7:c3:c1:e1:01:d0:bb:7b:74:d7:
                    f6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6B:F3:ED:4B:72:5F:59:57:C2:B6:45:43:1C:B0:D7:47:FD:EB:98
            X509v3 Authority Key Identifier:
                keyid:B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/Lmvz7UtyX1lXwrZFQxyw10f965g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:73:45:7d:0c:29:99:b0:07:d9:79:85:27:52:57:d6:84:7a:
         88:d7:5a:f4:9e:a7:d1:99:37:db:3d:cf:63:e7:fe:34:03:c0:
         1a:26:74:02:3d:63:38:2c:da:76:97:7b:fb:27:87:14:d4:76:
         1e:42:b3:6a:98:e3:ed:63:51:1a:19:00:82:66:fc:e3:bb:35:
         2a:6d:76:a2:f2:0e:af:e6:a0:8e:ae:b0:2f:5d:d3:78:93:2c:
         67:d9:25:21:8a:ec:fc:20:3b:7d:d7:6b:0a:f0:b8:2d:21:fe:
         99:71:6d:1c:da:e4:f8:b5:60:4a:e4:0a:27:d0:ab:a7:fa:5e:
         57:56:27:f9:ae:d5:ef:87:97:b8:78:61:95:7a:c1:10:3c:83:
         6a:3b:9f:dc:19:a4:54:f3:37:72:70:6e:b1:da:ea:cc:6d:13:
         03:fd:e6:d7:e9:2a:e6:87:36:70:eb:7e:b1:f0:44:05:17:80:
         94:2a:a3:d1:d2:ed:01:4b:73:b1:9f:13:7b:60:a0:c1:70:66:
         66:31:c6:4d:90:5a:40:1c:5e:2e:76:ef:a6:03:03:2d:d6:0e:
         60:c7:04:47:87:f0:30:d9:ed:1a:0c:f3:71:20:cd:aa:95:df:
         80:bf:33:b5:b5:9c:fc:77:73:8f:ad:85:6e:34:0e:40:a1:1d:
         ed:86:e9:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2Rp8g2NHQPGeip+tmaFsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NjBiMTQ3NDZjNTg3NTI0NGFlM2I2OTQxNjJlYzZkOGM2
MzI1NWUwHhcNMjUwMTAyMTE0OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTZiZjNlZDRiNzI1ZjU5NTdjMmI2NDU0MzFjYjBkNzQ3ZmRlYjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsV7cdB9Y3NBVtj5ASRYUlX6pdPu
WnWWIlbIkv2dRKdtJYgbWiUxxQC+PQv2MyZJMHH5t5oMyPS802WFMNCU0Tq0FLws
W4bESnXi1wRGh5kqUzeMvq+c2NwLjFnXjqdJt5+4UuMPajER9VjwPdz4mM+Th6W5
xftTXLdGloQq6Q5NJ+GmVZURw1XeyhlXrjV1Fn4Hb8W07nti5C5V0RU86byevmSd
NotpYvSlxyz4JYE9Kc9ItmsSBxFLGEDgNf15CreZoxRz7DQrT8AMxmmCI+cVPGKA
gBupBsCUVyEU/e9BEpBCk0zerBA5nt+Pnjk1hOp+K9fDweEB0Lt7dNf2GQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC5r8+1Lcl9ZV8K2RUMcsNdH/euYMB8GA1UdIwQY
MBaAFLlgsUdGxYdSRK47aUFi7G2MYyVeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVdDeFIwYkZoMUpFcmp0cFFXTHNiWXhqSlY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80NTgwNzgtNDI2ZS00NDQ5LWEyYTkt
MTg4ODJhMjgwOWIyLzEvTG12ejdVdHlYMWxYd3JaRlF4eXcxMGY5NjVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80NTgwNzgtNDI2ZS00NDQ5LWEyYTktMTg4ODJhMjgwOWIy
LzEvdVdDeFIwYkZoMUpFcmp0cFFXTHNiWXhqSlY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYfSMA0G
CSqGSIb3DQEBCwUAA4IBAQA/c0V9DCmZsAfZeYUnUlfWhHqI11r0nqfRmTfbPc9j
5/40A8AaJnQCPWM4LNp2l3v7J4cU1HYeQrNqmOPtY1EaGQCCZvzjuzUqbXai8g6v
5qCOrrAvXdN4kyxn2SUhiuz8IDt912sK8LgtIf6ZcW0c2uT4tWBK5Aon0Kun+l5X
Vif5rtXvh5e4eGGVesEQPINqO5/cGaRU8zdycG6x2urMbRMD/ebX6SrmhzZw636x
8EQFF4CUKqPR0u0BS3OxnxN7YKDBcGZmMcZNkFpAHF4udu+mAwMt1g5gxwRHh/Aw
2e0aDPNxIM2qld+AvzO1tZz8d3OPrYVuNA5AoR3thuk/
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:58 2025 by rpki-client on console.sobornost.net