Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/11281f-9af1-4150-9fb8-c8b975f0b107/1/rV2gxhT7YbmmukHGbx82JZEOn8Q.roa
File:                     rV2gxhT7YbmmukHGbx82JZEOn8Q.roa (raw, json)
Hash identifier:          smT+Gxz1QTw/YQOi77fshxskwXE7iDjW7nyizkRhtu4=
Subject key identifier:   AD:5D:A0:C6:14:FB:61:B9:A6:BA:41:C6:6F:1F:36:25:91:0E:9F:C4
Certificate issuer:       /CN=754c959d94ef8c7cb96d86c6c4b9236df12fa87d
Certificate serial:       04082B48
Authority key identifier: 75:4C:95:9D:94:EF:8C:7C:B9:6D:86:C6:C4:B9:23:6D:F1:2F:A8:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dUyVnZTvjHy5bYbGxLkjbfEvqH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/11281f-9af1-4150-9fb8-c8b975f0b107/1/rV2gxhT7YbmmukHGbx82JZEOn8Q.roa
Signing time:             Sat 01 Jan 2022 06:03:30 +0000
ROA not before:           Sat 01 Jan 2022 06:03:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49792
IP address blocks:        45.142.196.0/22 maxlen: 22
                          2a0e:db40::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67644232 (0x4082b48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=754c959d94ef8c7cb96d86c6c4b9236df12fa87d
        Validity
            Not Before: Jan  1 06:03:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ad5da0c614fb61b9a6ba41c66f1f3625910e9fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1f:bf:f9:86:49:68:ed:a0:3d:01:d9:b1:5b:
                    e5:fd:5a:ab:87:2f:d7:d9:0b:77:c2:55:54:c8:5b:
                    7b:74:9d:4d:e4:0a:e3:58:0d:5a:18:eb:31:f6:41:
                    06:4d:57:5f:2d:c4:a0:50:d8:ce:6d:fc:7f:50:ad:
                    6c:fc:a2:fe:68:8c:9c:5c:f6:24:1e:79:68:93:c9:
                    37:57:94:00:c3:f1:3a:87:61:78:4f:d9:7b:31:ad:
                    5d:03:b7:04:74:2d:57:e1:11:41:05:35:70:41:10:
                    97:31:47:75:90:4c:fa:cd:f2:6d:24:a2:6d:db:6b:
                    e9:73:88:35:71:8c:7f:60:55:84:b1:da:a4:99:a8:
                    44:0d:15:b8:6c:c8:f7:51:e2:0f:a6:5f:45:bb:b7:
                    46:a1:cd:61:bb:fb:7d:44:1f:36:11:1d:6f:6e:96:
                    ca:dc:cb:a9:75:6d:d5:22:2b:c1:e2:17:24:31:8b:
                    d7:1e:a5:be:c5:72:cb:a5:56:5e:f2:e1:65:f1:37:
                    57:65:1f:a7:02:b1:36:25:e3:14:b1:89:fc:f9:dc:
                    ea:4b:60:87:e0:fc:b0:af:48:45:a6:07:90:02:2a:
                    84:4d:d8:12:ce:e5:33:9c:f9:0f:22:fe:7c:92:3d:
                    06:6a:ee:9d:dd:3e:06:4a:59:69:e0:d5:b7:9f:d0:
                    8e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5D:A0:C6:14:FB:61:B9:A6:BA:41:C6:6F:1F:36:25:91:0E:9F:C4
            X509v3 Authority Key Identifier:
                keyid:75:4C:95:9D:94:EF:8C:7C:B9:6D:86:C6:C4:B9:23:6D:F1:2F:A8:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUyVnZTvjHy5bYbGxLkjbfEvqH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/11281f-9af1-4150-9fb8-c8b975f0b107/1/rV2gxhT7YbmmukHGbx82JZEOn8Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/11281f-9af1-4150-9fb8-c8b975f0b107/1/dUyVnZTvjHy5bYbGxLkjbfEvqH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.196.0/22
                IPv6:
                  2a0e:db40::/29

    Signature Algorithm: sha256WithRSAEncryption
         9a:6a:d3:bb:78:dd:d2:44:47:7d:cc:72:2c:fd:a0:5f:21:3c:
         1e:68:b9:38:91:59:f2:67:b7:e9:b5:cc:31:72:9f:08:14:55:
         f2:ee:11:f5:56:9e:fd:62:31:a6:40:2c:21:5b:49:5e:42:c2:
         00:fb:ee:66:ce:b5:b6:98:a4:4d:a3:02:0b:16:30:f2:87:dc:
         74:5f:15:90:35:96:52:68:a8:7d:ac:e6:dc:76:bd:00:aa:5d:
         f6:f5:7b:9c:72:9f:55:8b:d1:4e:86:44:36:24:23:a7:4a:c1:
         1f:26:3c:b7:d2:cc:07:e0:ba:f7:a1:9b:f6:9e:08:06:74:2d:
         64:f2:f1:8e:b5:73:0c:f0:02:6a:dc:c0:9f:a4:9f:9a:30:b1:
         e5:ee:9f:d2:dd:5b:6c:ae:f7:77:75:18:35:1c:13:d4:56:04:
         77:a4:73:f8:4d:00:1d:0b:78:45:c4:9f:6c:62:6f:ca:5a:36:
         53:c0:1f:fa:54:7e:0b:12:72:c9:75:b2:a3:67:33:9e:8a:c7:
         ef:01:ff:4b:9e:a0:c5:d1:f9:d4:b0:19:9f:08:5e:be:a7:e7:
         e2:9e:34:ee:54:66:a2:ab:90:d1:ab:8f:df:98:1e:ae:bf:9a:
         c3:5b:6e:7b:ca:5e:9f:ed:b5:72:2b:2e:a5:be:a1:0a:4c:60:
         9c:d8:eb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:05 2024 by rpki-client on console-fra.rpki-client.org