Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/Te74_I5RdWPs7OrZqIzeeGMUsG4.roa
File:                     Te74_I5RdWPs7OrZqIzeeGMUsG4.roa (raw, json)
Hash identifier:          AqV2O8JAByfF4A+yz5XT5+qJVG0mOMwdRZNM01kbI4s=
Subject key identifier:   4D:EE:F8:FC:8E:51:75:63:EC:EC:EA:D9:A8:8C:DE:78:63:14:B0:6E
Certificate issuer:       /CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
Certificate serial:       0A67F8B5
Authority key identifier: B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/Te74_I5RdWPs7OrZqIzeeGMUsG4.roa
Signing time:             Fri 15 Apr 2022 13:26:23 +0000
ROA not before:           Fri 15 Apr 2022 13:26:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211114
IP address blocks:        45.80.175.0/24 maxlen: 24
                          185.136.205.0/24 maxlen: 24
                          185.136.207.0/24 maxlen: 24
                          185.207.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174586037 (0xa67f8b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70594f265f0c3eb00e7cfc28fec8590c8a632a5
        Validity
            Not Before: Apr 15 13:26:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4deef8fc8e517563ececead9a88cde786314b06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f5:0f:aa:f8:c7:38:4b:2b:3e:f7:d1:79:ac:
                    66:ee:41:6d:16:f3:4c:60:33:92:f0:41:86:e8:bd:
                    3e:e1:6e:21:1f:60:5f:69:e8:54:5e:97:db:d8:00:
                    92:82:04:d7:d2:3a:87:eb:76:09:af:7d:86:87:ff:
                    1e:31:c3:ce:e7:a1:d9:14:86:4d:b6:44:e1:f2:02:
                    bf:8d:82:af:8e:e7:13:07:36:40:03:61:32:09:74:
                    4c:56:23:36:3b:66:78:1e:bb:c8:90:c6:e6:72:f5:
                    ee:d3:f6:f5:e4:38:46:6f:f8:03:bb:86:d9:02:46:
                    ae:15:a1:0a:0e:52:18:7f:5f:48:53:2d:e9:2f:49:
                    8d:e3:57:a1:85:2e:b3:dd:b4:7b:c2:a8:59:f0:c1:
                    03:69:bc:0b:2b:ed:23:20:4c:89:fa:68:d4:c5:3d:
                    2e:b0:a6:67:b1:7b:28:24:1f:99:46:60:00:87:d2:
                    b8:6f:2e:14:da:05:04:ff:21:11:22:72:1f:76:e1:
                    37:d9:2e:ca:84:f2:e9:1a:3f:ee:5c:a9:8d:cc:ae:
                    4c:87:b0:04:d0:d4:6c:f2:f5:57:74:bd:51:2f:72:
                    88:7d:f4:80:f9:b6:f5:51:b1:bf:f3:48:12:b9:c2:
                    16:6f:86:dd:38:5c:86:95:4f:65:96:5a:29:05:f6:
                    28:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EE:F8:FC:8E:51:75:63:EC:EC:EA:D9:A8:8C:DE:78:63:14:B0:6E
            X509v3 Authority Key Identifier:
                keyid:B7:05:94:F2:65:F0:C3:EB:00:E7:CF:C2:8F:EC:85:90:C8:A6:32:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/twWU8mXww-sA58_Cj-yFkMimMqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/Te74_I5RdWPs7OrZqIzeeGMUsG4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2077ba-1dc6-4117-bcb7-ab4cdf3145c9/1/twWU8mXww-sA58_Cj-yFkMimMqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.175.0/24
                  185.136.205.0/24
                  185.136.207.0/24
                  185.207.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:c9:a4:52:4f:7b:02:b3:02:f0:de:50:4f:aa:c4:23:01:83:
         cc:b6:d7:9f:8a:33:37:4e:d8:f6:2f:d0:03:cd:04:dd:09:5e:
         10:4b:3a:2e:bb:05:2a:0d:04:35:3f:9c:2c:64:4f:61:4f:a9:
         93:cd:9d:2b:45:bc:69:51:ce:71:16:f2:2f:f8:fd:b0:4b:a6:
         bf:3a:b6:c8:a6:92:58:9d:c7:cf:c4:9b:5f:79:de:bc:37:f8:
         c3:37:93:86:1b:fc:51:4e:1d:89:fc:bb:3a:08:e8:f8:f9:66:
         b5:72:34:64:ef:1f:96:77:c1:16:a1:d3:55:1d:30:12:fa:b3:
         fd:3b:d2:7c:47:b5:9d:2d:d9:c3:33:c8:5b:f3:ad:44:10:f4:
         d0:43:d6:40:50:ab:cb:57:c0:e7:60:c8:9f:39:31:e4:aa:ba:
         c2:d1:c1:03:19:4a:40:93:c5:40:d9:c7:3b:4b:22:c7:9a:2d:
         d9:67:44:85:f7:ed:af:58:9d:64:d5:a4:19:3e:d0:07:49:d7:
         ca:50:74:2b:f5:e7:5b:0d:e5:d0:7c:aa:8b:ec:22:4e:05:aa:
         6a:be:e4:72:cf:a7:2d:a8:12:61:07:75:cb:92:d8:f2:56:ba:
         81:aa:00:5a:06:fe:c0:0b:63:3e:9b:71:8b:11:c0:d8:43:d5:
         ba:d8:60:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:50 2024 by rpki-client on console-ams.rpki-client.org