Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/PZLQgqXldRCTsPCXSIx7M7rJcP4.roa
File:                     PZLQgqXldRCTsPCXSIx7M7rJcP4.roa (raw, json)
Hash identifier:          k7PgmTm/neMjbNGEHGO8HdoNhEenJrbcy2WwXmhyhr8=
Subject key identifier:   3D:92:D0:82:A5:E5:75:10:93:B0:F0:97:48:8C:7B:33:BA:C9:70:FE
Certificate issuer:       /CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Certificate serial:       01827054D1F623D34A277E2A450AD0A84A79
Authority key identifier: B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/PZLQgqXldRCTsPCXSIx7M7rJcP4.roa
Signing time:             Fri 05 Aug 2022 23:26:23 +0000
ROA not before:           Fri 05 Aug 2022 23:26:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206995
IP address blocks:        45.80.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:70:54:d1:f6:23:d3:4a:27:7e:2a:45:0a:d0:a8:4a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
        Validity
            Not Before: Aug  5 23:26:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3d92d082a5e5751093b0f097488c7b33bac970fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f3:ef:a8:5f:35:90:a9:3d:77:e7:69:b8:61:
                    12:a1:ca:fc:00:92:6c:0e:65:53:50:63:1d:48:6e:
                    df:63:47:81:25:15:2b:ba:15:bc:28:18:6e:56:e2:
                    60:94:ad:1f:66:e8:69:44:79:84:4f:08:c8:cb:30:
                    d5:62:f5:f7:c2:13:f7:6b:f4:23:fe:e9:e5:d6:e3:
                    48:6b:1b:ca:84:04:7f:a2:e9:50:c2:c5:52:6a:c5:
                    bb:00:b8:2a:f0:06:3c:8e:16:9a:04:f2:ff:d3:09:
                    11:2d:f1:06:dd:ac:73:96:c7:fb:f6:86:b8:eb:2b:
                    ce:35:d9:8f:6d:b8:94:e2:96:88:7b:9e:61:da:9c:
                    eb:3b:fe:ad:bf:98:09:75:23:f9:1a:2a:44:53:8c:
                    a5:67:37:8b:46:6e:92:c0:74:80:33:60:b0:d6:c8:
                    8c:39:5f:d5:48:54:2c:2d:9c:0b:78:2d:d9:dc:7d:
                    90:6f:65:5d:4c:f6:58:c4:b0:bc:fc:22:24:2f:c7:
                    f9:ea:de:b1:35:24:30:69:de:c0:49:f1:49:7b:44:
                    ad:1d:6a:0b:96:4d:f8:01:6c:3c:23:f4:e9:a1:34:
                    d5:4f:4c:69:21:46:cb:3a:85:d1:40:97:b5:06:73:
                    93:10:f1:80:dd:db:9b:ec:63:7b:31:49:0f:b0:b2:
                    70:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:92:D0:82:A5:E5:75:10:93:B0:F0:97:48:8C:7B:33:BA:C9:70:FE
            X509v3 Authority Key Identifier:
                keyid:B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/PZLQgqXldRCTsPCXSIx7M7rJcP4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/twWU8mXww-sA58_Cj-yFkMimMqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:c3:8a:10:68:b1:07:f0:91:d0:4f:22:ca:73:08:a1:79:33:
         34:af:2e:1f:f9:59:10:d1:b6:af:e6:db:32:16:6b:45:79:de:
         31:f8:3b:c9:3e:03:15:00:68:87:5b:46:8f:85:a0:82:22:8d:
         10:1c:8c:f3:59:0b:d2:3b:ca:b6:dc:b5:58:0d:95:b2:46:73:
         eb:cf:c8:6d:36:35:ab:55:1b:4b:6d:f2:17:e5:33:9b:fd:6c:
         83:bf:ed:ab:40:f0:b8:f3:df:ce:32:f6:10:c3:9b:32:99:f0:
         f3:e6:d4:20:3f:f1:f1:a7:d0:46:b1:01:9e:7c:11:04:a5:d4:
         41:fe:fe:64:15:58:9e:4d:81:8e:c4:f9:53:8a:cd:09:22:c3:
         62:f8:b1:48:24:19:b7:bf:d3:f2:71:c1:54:5f:60:97:6d:eb:
         97:31:a4:53:f6:3c:e8:88:38:0f:73:9f:87:21:57:9f:55:50:
         7b:ac:3d:e7:88:55:62:91:9d:3f:ef:f7:da:00:ce:81:6d:50:
         4c:c1:b4:6e:45:a8:dd:67:bf:d2:c1:bf:ae:ca:8e:c3:b4:e3:
         12:eb:1a:14:7e:76:57:54:72:24:14:e8:36:68:6e:7c:76:da:
         4f:24:29:f0:43:bb:83:0d:bd:4c:4c:6d:38:70:fe:fe:52:f1:
         97:e9:b6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:50 2024 by rpki-client on console-ams.rpki-client.org