Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1f3d88-1c95-4f30-99be-4129dc694b7d/1/zhNiVaWYELczVjp9Nub7d9AeUBA.roa
File:                     zhNiVaWYELczVjp9Nub7d9AeUBA.roa (raw, json)
Hash identifier:          aPjidiQWsnV4STYPlA4uDbNE5M9RY2LDSpA196dQMOA=
Subject key identifier:   CE:13:62:55:A5:98:10:B7:33:56:3A:7D:36:E6:FB:77:D0:1E:50:10
Certificate issuer:       /CN=ec0b93781ae8843e510a3e1c2d08313b259d169b
Certificate serial:       0181FD3A5FC02649D001C3D17E6A33804365
Authority key identifier: EC:0B:93:78:1A:E8:84:3E:51:0A:3E:1C:2D:08:31:3B:25:9D:16:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7AuTeBrohD5RCj4cLQgxOyWdFps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/1f3d88-1c95-4f30-99be-4129dc694b7d/1/zhNiVaWYELczVjp9Nub7d9AeUBA.roa
Signing time:             Thu 14 Jul 2022 15:01:10 +0000
ROA not before:           Thu 14 Jul 2022 15:01:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39878
IP address blocks:        45.67.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:fd:3a:5f:c0:26:49:d0:01:c3:d1:7e:6a:33:80:43:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec0b93781ae8843e510a3e1c2d08313b259d169b
        Validity
            Not Before: Jul 14 15:01:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ce136255a59810b733563a7d36e6fb77d01e5010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4c:c9:3a:66:a2:37:d0:0c:be:40:a7:da:78:
                    1e:bb:e8:ea:d9:ec:d4:1a:8a:1c:4c:7f:5d:6e:69:
                    ab:8e:cb:de:30:a1:ea:19:45:0b:59:24:a7:2a:16:
                    de:9a:d5:bc:93:80:76:e5:3b:33:75:7d:6d:93:59:
                    f8:28:55:0e:0d:7f:56:1e:9a:cb:56:51:e3:10:04:
                    33:3b:f7:85:7b:5d:f2:70:8c:0e:ab:3f:52:d5:64:
                    90:7e:bf:02:81:62:0c:38:90:48:1d:6f:fa:7a:7e:
                    6c:a1:fc:43:75:11:6d:7b:e1:db:d8:ea:30:aa:0b:
                    d3:b8:83:e9:31:aa:9b:58:2b:16:4a:ef:12:c5:ae:
                    ef:bd:e3:fb:f4:3f:15:7b:b5:25:9d:31:fb:24:06:
                    3a:be:6a:d8:23:80:eb:ee:7b:19:13:cd:37:c1:8f:
                    c0:3f:80:4e:9b:62:25:28:c0:6b:ee:61:99:95:e7:
                    95:df:d0:0f:4d:44:07:ca:7e:21:ca:fe:bd:6c:af:
                    05:25:c7:d1:13:70:c4:24:57:f8:79:09:c1:ff:b9:
                    7b:48:e8:58:fb:8f:b4:c7:f2:67:4d:07:50:48:b7:
                    7f:26:2e:e0:1f:90:2b:7f:dd:84:f8:4e:d3:fe:3b:
                    19:00:b6:a9:e5:e6:ef:5d:57:bb:90:52:0f:26:df:
                    ea:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:13:62:55:A5:98:10:B7:33:56:3A:7D:36:E6:FB:77:D0:1E:50:10
            X509v3 Authority Key Identifier:
                keyid:EC:0B:93:78:1A:E8:84:3E:51:0A:3E:1C:2D:08:31:3B:25:9D:16:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AuTeBrohD5RCj4cLQgxOyWdFps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1f3d88-1c95-4f30-99be-4129dc694b7d/1/zhNiVaWYELczVjp9Nub7d9AeUBA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1f3d88-1c95-4f30-99be-4129dc694b7d/1/7AuTeBrohD5RCj4cLQgxOyWdFps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:38:28:7a:a2:75:75:13:a3:a3:e3:86:aa:96:a3:db:9d:5c:
         87:86:d7:df:9e:f6:0f:ea:cb:b3:b1:3a:6f:57:49:c1:9a:58:
         6d:39:60:a8:61:9e:3b:a1:b0:1f:29:23:62:19:14:cb:cf:ab:
         17:ac:99:ad:ae:09:c4:08:3a:4c:03:b4:01:9e:71:d8:3f:8c:
         de:61:ea:f0:91:5b:45:14:35:bd:a7:72:84:7b:51:eb:ce:43:
         56:12:51:a0:99:b6:3a:5c:df:f2:a4:90:cc:55:a3:b8:43:bc:
         fe:21:32:c6:82:0b:b4:a4:18:c5:f5:c7:bd:74:80:fe:f7:61:
         be:8e:35:51:d7:2d:ad:98:ac:ee:7f:40:50:60:89:a9:b8:8f:
         bf:d0:7a:d3:e4:80:b2:f9:af:5d:56:89:c4:0d:d9:f9:3c:4b:
         c1:a7:16:bf:19:8f:aa:1e:24:dd:ff:df:96:73:49:24:14:82:
         c4:fc:72:03:5d:57:cd:24:f6:bc:c9:a7:13:55:b3:28:79:07:
         96:88:ed:de:5c:44:ad:56:9e:fd:03:46:95:7c:0f:5a:8e:8c:
         c4:53:0f:ea:44:13:ad:6e:26:e3:e0:f1:9c:0c:4c:1f:4f:17:
         f6:c0:3e:7b:36:96:b9:c5:8f:ba:69:cf:fa:45:c3:ec:90:89:
         20:d8:23:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:12 2024 by rpki-client on console-fra.rpki-client.org