Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/859374-7672-49cc-a852-1620c3759991/1/zdwjcsJcPV7ZFXphlWm_xdUJmeY.roa
File:                     zdwjcsJcPV7ZFXphlWm_xdUJmeY.roa (raw, json)
Hash identifier:          0lCYJWwbEUITf3s0Woc6RR6GWBBJQAKSWed0oxaRKNI=
Subject key identifier:   CD:DC:23:72:C2:5C:3D:5E:D9:15:7A:61:95:69:BF:C5:D5:09:99:E6
Certificate issuer:       /CN=b5db73239715bc88b100b38638a5f830c4249917
Certificate serial:       076145D4
Authority key identifier: B5:DB:73:23:97:15:BC:88:B1:00:B3:86:38:A5:F8:30:C4:24:99:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tdtzI5cVvIixALOGOKX4MMQkmRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/859374-7672-49cc-a852-1620c3759991/1/zdwjcsJcPV7ZFXphlWm_xdUJmeY.roa
Signing time:             Sat 01 Jan 2022 09:01:45 +0000
ROA not before:           Sat 01 Jan 2022 09:01:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43069
IP address blocks:        45.150.148.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123815380 (0x76145d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5db73239715bc88b100b38638a5f830c4249917
        Validity
            Not Before: Jan  1 09:01:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cddc2372c25c3d5ed9157a619569bfc5d50999e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e5:af:14:20:65:e0:b4:a0:b7:ec:da:b7:00:
                    de:52:ff:10:7c:2d:f3:61:2e:d9:34:32:6d:09:fc:
                    37:65:c1:f0:61:1b:7f:b0:10:87:83:eb:63:22:68:
                    6e:f3:e8:83:d3:63:6b:7c:01:1b:90:04:f2:df:79:
                    b5:2f:98:50:3d:a0:65:7c:10:bb:c1:7b:85:c0:7d:
                    de:59:25:b1:8a:62:71:aa:db:43:d0:de:42:0e:06:
                    b4:51:3f:6f:75:17:e1:29:82:18:2c:6c:a3:9b:df:
                    22:05:32:d1:b3:94:1f:e4:f6:84:71:92:de:f7:01:
                    00:9f:92:99:56:30:8a:7a:b6:2e:fe:96:16:b8:92:
                    cf:2e:67:5b:63:1e:1c:99:3d:b5:2e:fd:cd:2b:e3:
                    87:a4:c1:6c:4a:4a:14:00:b5:6c:51:6e:9c:ba:36:
                    1b:13:2a:87:7d:ac:5c:c7:21:67:ac:9e:18:c5:bc:
                    d7:e9:aa:73:cd:39:21:4e:c3:14:a2:5a:fc:3c:7f:
                    23:d8:6f:cb:5a:1a:8e:1b:70:42:ba:9c:64:d4:47:
                    18:04:85:c3:62:3f:5b:89:bc:14:73:8b:d9:70:93:
                    e3:2b:ef:f2:93:1f:8e:ad:f1:e2:4d:c7:df:55:2e:
                    0f:e0:e5:a7:cc:40:12:92:ae:e6:1c:8a:e2:e2:8c:
                    84:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DC:23:72:C2:5C:3D:5E:D9:15:7A:61:95:69:BF:C5:D5:09:99:E6
            X509v3 Authority Key Identifier:
                keyid:B5:DB:73:23:97:15:BC:88:B1:00:B3:86:38:A5:F8:30:C4:24:99:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tdtzI5cVvIixALOGOKX4MMQkmRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/859374-7672-49cc-a852-1620c3759991/1/zdwjcsJcPV7ZFXphlWm_xdUJmeY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/859374-7672-49cc-a852-1620c3759991/1/tdtzI5cVvIixALOGOKX4MMQkmRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:88:c5:06:ef:65:b3:7e:38:08:2c:1a:04:97:8e:81:86:28:
         5a:e8:18:76:66:9b:d9:c9:fe:d0:3a:4b:46:6a:cc:af:97:dd:
         01:8e:db:7b:18:ce:fe:a4:5b:0f:a2:50:3b:6a:37:68:fb:74:
         ce:10:e2:71:b5:42:e3:21:f6:ad:35:20:5f:58:be:70:79:32:
         23:46:01:b0:d1:57:9b:86:5c:1e:e8:b0:3a:89:35:1a:d7:18:
         8e:8f:fa:5a:67:ab:65:dc:74:67:46:14:46:05:79:c6:fa:a2:
         38:77:46:f3:37:83:11:8c:e4:1d:ba:6c:b3:4f:14:ff:58:19:
         db:77:68:e9:0e:09:5d:82:b6:8f:40:37:08:b6:f5:e1:fb:e8:
         b9:5e:39:76:8e:f2:dc:49:f7:16:b8:e0:1d:a9:38:29:6f:41:
         1e:63:c4:42:2a:30:f9:59:4d:6f:7e:f9:26:a6:9a:68:bf:40:
         e4:f0:6f:c4:20:30:6c:6d:99:98:f0:a2:cd:c5:9e:4d:ba:4f:
         db:a0:26:bb:25:26:4c:44:1c:f7:f9:c4:16:fe:90:6c:80:64:
         78:95:9c:89:da:0b:c9:fa:b9:a1:84:11:35:e0:a2:23:08:9d:
         20:e4:c9:b1:94:0d:16:44:25:5d:7f:34:c1:8c:79:c5:8f:53:
         c8:13:02:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:03 2025 by rpki-client