Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/jMxIX5I9_QH7F0CP9GwkfKlZ89o.roa
File:                     jMxIX5I9_QH7F0CP9GwkfKlZ89o.roa (raw, json)
Hash identifier:          z3xoPYHOJxKiDFNgDXEFJTrrL04dAhdQdggBV27jd1o=
Subject key identifier:   8C:CC:48:5F:92:3D:FD:01:FB:17:40:8F:F4:6C:24:7C:A9:59:F3:DA
Certificate issuer:       /CN=7945a3a1efc0e6b3e03e8412726b0233c08e77fb
Certificate serial:       01856CAF26D616BC2AAB406EA76EA4EBB241
Authority key identifier: 79:45:A3:A1:EF:C0:E6:B3:E0:3E:84:12:72:6B:02:33:C0:8E:77:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eUWjoe_A5rPgPoQScmsCM8COd_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/jMxIX5I9_QH7F0CP9GwkfKlZ89o.roa
Signing time:             Sun 01 Jan 2023 09:34:56 +0000
ROA not before:           Sun 01 Jan 2023 09:34:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7007
IP address blocks:        45.94.184.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:af:26:d6:16:bc:2a:ab:40:6e:a7:6e:a4:eb:b2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7945a3a1efc0e6b3e03e8412726b0233c08e77fb
        Validity
            Not Before: Jan  1 09:34:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8ccc485f923dfd01fb17408ff46c247ca959f3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b4:5e:5e:df:78:5b:24:8c:8e:8a:0c:18:1e:
                    ea:a4:a1:99:b1:e9:0c:ac:77:2c:15:d1:23:f8:24:
                    60:26:78:2a:07:d8:ba:74:5e:6f:34:a6:89:19:ea:
                    21:17:f7:0f:06:06:43:34:78:1c:cf:57:21:ed:c5:
                    5b:70:c7:84:05:98:c3:49:9d:c2:ae:6c:97:07:dd:
                    81:1e:10:c3:f2:43:e7:1a:68:cf:60:6c:aa:ae:1a:
                    5b:f1:15:de:fa:3d:f2:9f:a5:e4:78:48:cb:4a:6f:
                    75:95:c1:40:14:bf:d0:4d:1e:77:4e:bd:a8:85:be:
                    9b:e1:32:12:5c:ef:33:84:8f:0b:dd:e1:07:ea:6c:
                    96:53:8d:f8:81:fb:6b:44:0f:ab:e9:05:08:6a:12:
                    a7:76:2f:34:7e:2d:f7:c0:91:80:5e:20:66:ef:cb:
                    2d:ba:7a:b8:0d:73:6c:e5:67:70:12:5a:e9:54:3d:
                    71:54:9a:46:24:dc:26:33:4f:02:c7:0f:4e:84:22:
                    37:8d:b7:e3:dd:33:90:b2:18:5e:ae:8a:a6:1b:ed:
                    48:aa:ca:eb:82:7f:eb:13:62:52:76:a2:11:d6:27:
                    9a:a8:49:14:c0:2f:46:1f:f0:94:86:21:28:97:87:
                    ac:25:4e:cd:0a:e2:df:fc:05:4a:c1:04:11:08:19:
                    33:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CC:48:5F:92:3D:FD:01:FB:17:40:8F:F4:6C:24:7C:A9:59:F3:DA
            X509v3 Authority Key Identifier:
                keyid:79:45:A3:A1:EF:C0:E6:B3:E0:3E:84:12:72:6B:02:33:C0:8E:77:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUWjoe_A5rPgPoQScmsCM8COd_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/jMxIX5I9_QH7F0CP9GwkfKlZ89o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/eUWjoe_A5rPgPoQScmsCM8COd_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:ff:1b:47:b6:69:cc:07:30:3e:e2:ff:15:ec:ce:2a:e5:b4:
         80:46:4b:db:f1:d4:d7:9a:68:e7:3c:d7:fd:20:b4:c5:6a:9e:
         d4:82:c8:f1:f4:63:10:dc:2d:a7:38:c1:c1:84:1e:31:f0:2a:
         1c:45:4e:a5:cb:39:e8:2c:3c:52:f9:64:83:e0:08:92:0f:bd:
         36:11:94:60:7c:21:a1:eb:37:28:7c:c5:a3:66:f4:6f:25:5b:
         94:a0:05:a9:6a:20:05:16:e8:0a:df:75:b3:25:1f:01:5b:af:
         da:a4:86:bc:4a:2a:94:50:ea:73:b5:5d:65:06:dd:4d:06:43:
         a3:41:ff:a5:c1:d3:cd:d5:c8:11:87:f6:cd:ac:09:ec:c4:2e:
         6b:6a:fa:77:c7:22:e7:a6:b2:3a:b5:82:08:08:49:48:47:65:
         f5:73:41:a6:27:53:ee:1d:0d:f9:81:91:a8:7d:61:53:f4:f4:
         fb:78:10:9d:da:72:50:6a:a7:cf:e9:cc:b7:1a:cf:38:9e:1e:
         d2:06:b1:1c:a4:0d:44:4c:c3:11:c0:cb:1b:ab:57:12:23:c9:
         f7:ae:f9:46:75:65:ff:d0:de:d7:ca:06:88:ae:17:ae:ab:c1:
         e3:21:c3:22:46:4a:04:57:f6:15:8d:80:95:f8:6e:51:2a:b2:
         81:53:d2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:42 2024 by rpki-client on console-fra.rpki-client.org